$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/005257a1-427e-344e-a881-91b273232b93.roa File: 005257a1-427e-344e-a881-91b273232b93.roa (raw, json) Hash identifier: w0nA65+bYeZCVhoNlRxcjsGUXFP7WOMHX8JjPQjSMds= Subject key identifier: D0:F3:A0:16:99:54:A9:B1:07:38:83:D7:84:74:8B:E8:68:C7:B4:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CB5520100BD332DBC8607E900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/005257a1-427e-344e-a881-91b273232b93.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 104.98.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:01:00:bd:33:2d:bc:86:07:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=24eea018-3b5b-4d08-9f6d-b64a2a19aca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:39:cd:c5:5b:8a:75:a6:f9:86:3e:e8:3d: ab:7d:e7:50:5b:bf:45:05:2d:c4:34:1d:fc:fa:bd: d7:37:8b:7d:bd:ac:53:98:bf:e1:34:74:27:e7:ae: a8:be:44:bb:4f:be:11:80:ef:96:03:ae:1a:d7:9d: 89:43:97:f0:71:2e:b7:e0:50:dc:b7:da:a9:8a:59: 05:db:8c:c2:eb:76:38:5a:40:41:12:1e:47:05:34: 7f:ee:0e:ac:75:81:72:c7:8a:37:4f:47:b0:87:f2: 51:78:66:01:f0:24:39:7f:2d:2a:a7:f2:bf:29:85: b5:b6:bd:a5:48:bf:97:e0:af:f8:9f:71:81:40:e8: 33:f8:f7:5e:1c:56:c1:c3:29:32:af:92:fe:62:af: 8d:e1:fd:46:4c:12:fc:73:c8:88:73:cc:6f:50:0d: 35:0c:34:7c:9a:21:48:b1:18:52:2e:7d:25:d8:ef: ac:a7:ab:98:2a:d9:4b:cd:e6:4f:66:91:1c:c3:e9: 6c:39:7a:a2:b7:c5:b4:73:86:d2:89:3d:45:e8:b9: d2:4d:24:75:ec:a7:02:46:55:40:ca:51:f7:45:af: b1:e1:65:fe:dc:6c:8c:d1:b3:34:fd:81:c2:9c:47: 86:73:c6:45:35:5c:ff:04:0f:b4:f4:ce:2f:c1:05: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F3:A0:16:99:54:A9:B1:07:38:83:D7:84:74:8B:E8:68:C7:B4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/005257a1-427e-344e-a881-91b273232b93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:87:16:65:cb:37:10:49:42:eb:c5:04:be:45:25:06:f4:b1: 51:87:1b:59:6c:62:31:25:da:e4:7d:c0:89:8b:9a:eb:e4:84: 9d:2d:dd:2e:2c:9d:fc:0f:c4:f8:f4:6c:16:29:2a:7f:d2:a3: 9a:3b:69:72:4d:10:1f:22:8d:8e:3c:0b:24:90:d2:9e:88:74: 20:e6:a3:28:0d:34:61:22:2b:d3:82:f8:41:a3:1e:10:23:a2: ea:19:08:53:81:09:f8:ba:2c:b8:a0:e3:06:60:a0:8f:7f:20: 01:07:a1:02:f2:2d:9a:32:89:7f:de:ec:75:92:ef:ff:5a:52: d7:e3:85:13:0f:34:1a:a9:52:d9:23:df:f4:b2:96:65:ac:f6: 4f:18:4d:97:a3:27:3b:21:f5:1d:45:f1:29:11:e9:0a:67:e0: 4e:5d:ee:d0:50:a0:ae:e3:f3:e9:e4:98:e2:65:74:d9:68:bc: d3:e0:f0:59:0a:41:89:48:cd:b1:16:52:e5:49:2e:df:c4:8e: 75:ca:22:34:87:25:84:54:89:ae:49:b0:12:dd:2b:c1:cf:e8: eb:fc:d1:b6:eb:6d:75:1f:66:b3:4f:f5:db:4c:c3:a7:5c:94: 76:ec:27:ba:15:0c:e4:29:ce:a7:92:36:c6:2e:c9:4c:51:75: 3f:71:d1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UgEAvTMtvIYH6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MjRlZWEwMTgtM2I1Yi00ZDA4LTlmNmQtYjY0YTJhMTlhY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcc5zcVbinWm+YY+6D2rfedQW79FBS3ENB38 +r3XN4t9vaxTmL/hNHQn566ovkS7T74RgO+WA64a152JQ5fwcS634FDct9qpilkF 24zC63Y4WkBBEh5HBTR/7g6sdYFyx4o3T0ewh/JReGYB8CQ5fy0qp/K/KYW1tr2l SL+X4K/4n3GBQOgz+PdeHFbBwykyr5L+Yq+N4f1GTBL8c8iIc8xvUA01DDR8miFI sRhSLn0l2O+sp6uYKtlLzeZPZpEcw+lsOXqit8W0c4bSiT1F6LnSTSR17KcCRlVA ylH3Ra+x4WX+3GyM0bM0/YHCnEeGc8ZFNVz/BA+09M4vwQUVnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDzoBaZVKmxBziD14R0i+hox7R4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA1MjU3YTEtNDI3ZS0z NDRlLWE4ODEtOTFiMjczMjMyYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGJzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmHFmXLNxBJQuvFBL5FJQb0sVGHG1lsYjEl2uR9wImLmuvkhJ0t3S4s nfwPxPj0bBYpKn/So5o7aXJNEB8ijY48CySQ0p6IdCDmoygNNGEiK9OC+EGjHhAj ouoZCFOBCfi6LLig4wZgoI9/IAEHoQLyLZoyiX/e7HWS7/9aUtfjhRMPNBqpUtkj 3/SylmWs9k8YTZejJzsh9R1F8SkR6Qpn4E5d7tBQoK7j8+nkmOJldNlovNPg8FkK QYlIzbEWUuVJLt/EjnXKIjSHJYRUia5JsBLdK8HP6Ov80bbrbXUfZrNP9dtMw6dc lHbsJ7oVDOQpzqeSNsYuyUxRdT9x0cw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:54 2026 by rpki-client