$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bdea95b5-6ac6-3343-8c09-ca296bac4953.roa File: bdea95b5-6ac6-3343-8c09-ca296bac4953.roa (raw, json) Hash identifier: Gknhq1+pZwRllvhaPIw4If9bn1OGXrHxX4O5HEAgR9U= Subject key identifier: F1:3B:12:A8:BD:F5:D9:26:7C:27:36:92:77:E8:DE:EE:86:D9:01:1B Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584CAE570AC68377F2995C8F6240 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bdea95b5-6ac6-3343-8c09-ca296bac4953.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 36601 IP address blocks: 104.243.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:0a:c6:83:77:f2:99:5c:8f:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ae8888ca-6296-469e-b2b5-c37ca78b3fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:e2:4e:95:5e:e1:94:9e:32:bd:ac:98:e0: 2d:e8:2e:8d:c4:3d:66:a9:b3:a1:fc:c9:53:9d:0d: f3:df:cb:73:90:91:c9:fc:40:cc:bc:a7:6d:4a:f5: 5a:3d:40:49:04:5e:24:4a:d7:bf:9d:82:d6:bc:64: b8:f6:45:09:76:95:fe:f7:db:02:4f:50:d5:2d:99: 37:5c:93:c5:8e:da:e1:e6:75:c6:5a:83:8a:ad:4b: f6:c3:6c:e9:85:b3:8e:68:69:18:61:03:2f:12:df: d0:ea:c4:14:0d:e4:b0:2b:23:35:9f:19:47:8f:41: e5:5f:e9:d7:d4:1d:85:29:81:6f:a5:aa:9e:c5:e7: 21:93:d6:b3:05:22:eb:c2:49:02:47:ec:c5:32:5a: fa:f7:7e:84:99:f0:4e:06:82:4c:6a:17:dc:85:ee: 0f:8d:22:ba:02:b4:e2:90:06:5b:80:c0:df:ec:f8: 74:72:42:fc:22:3a:c7:f6:b0:08:08:04:a3:4f:e8: fe:81:60:36:2b:aa:29:df:2b:05:3f:7a:25:24:08: d6:3c:b6:89:7a:a5:80:ba:47:bb:c2:4f:19:82:22: 21:3e:24:ab:34:db:f7:3f:8b:04:c9:bb:4b:1f:3d: 07:8f:ab:9e:4e:1d:e5:20:55:cf:0e:a7:a8:51:fd: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3B:12:A8:BD:F5:D9:26:7C:27:36:92:77:E8:DE:EE:86:D9:01:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/bdea95b5-6ac6-3343-8c09-ca296bac4953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 104.243.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bf:4c:88:6b:03:d5:4b:01:6f:01:2f:8a:83:1e:7f:76:f2: 0e:dc:f4:2f:1f:6d:75:e1:36:09:72:23:b3:34:79:9a:35:91: 16:35:b9:48:ec:0a:51:53:04:37:c8:cb:2c:70:be:51:01:e7: de:d0:65:58:c5:8a:1f:dc:f4:69:cf:ed:ba:d5:30:51:36:22: 36:9a:f7:30:7d:fb:45:bc:d7:ce:cb:11:1f:7a:51:7a:9b:17: cc:c7:b9:e7:97:d8:1a:ee:a8:ee:4c:ec:e4:05:c8:eb:82:dc: 86:12:40:c6:f7:41:92:ad:12:f1:30:81:65:97:b5:6b:3c:40: de:57:8f:6f:5d:37:79:cc:2d:38:ba:a5:c2:a6:3b:1f:65:9b: bd:73:56:7d:71:44:5e:a9:d1:dc:fd:ca:ce:eb:11:3f:96:69: bb:7e:fa:7f:f0:96:2f:ea:0a:b1:9d:4e:70:2b:e4:05:85:e2: 0d:70:e0:4c:40:42:f8:77:f2:24:9d:7e:e5:29:39:3d:1b:3d: 65:01:09:4b:f2:15:ef:cd:99:8e:88:4d:74:2a:e1:29:78:d1: 5c:6d:f5:5f:27:9d:25:c4:39:03:a0:8a:d3:65:15:a9:2d:a7: cd:d2:fb:7e:fd:1c:06:11:4a:0e:a8:85:6d:45:51:1c:ae:65: 4d:4b:25:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVwrGg3fymVyPYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWU4ODg4Y2EtNjI5Ni00NjllLWIyYjUtYzM3Y2E3OGIzZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoDiTpVe4ZSeMr2smOAt6C6NxD1mqbOh/MlT nQ3z38tzkJHJ/EDMvKdtSvVaPUBJBF4kSte/nYLWvGS49kUJdpX+99sCT1DVLZk3 XJPFjtrh5nXGWoOKrUv2w2zphbOOaGkYYQMvEt/Q6sQUDeSwKyM1nxlHj0HlX+nX 1B2FKYFvpaqexechk9azBSLrwkkCR+zFMlr6936EmfBOBoJMahfche4PjSK6ArTi kAZbgMDf7Ph0ckL8IjrH9rAICASjT+j+gWA2K6op3ysFP3olJAjWPLaJeqWAuke7 wk8ZgiIhPiSrNNv3P4sEybtLHz0Hj6ueTh3lIFXPDqeoUf0mzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE7Eqi99dkmfCc2knfo3u6G2QEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvYmRlYTk1YjUtNmFjNi0z MzQzLThjMDktY2EyOTZiYWM0OTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi/TIhrA9VLAW8BL4qDHn928g7c9C8fbXXhNglyI7M0eZo1kRY1uUjs ClFTBDfIyyxwvlEB597QZVjFih/c9GnP7brVMFE2Ijaa9zB9+0W8187LER96UXqb F8zHueeX2BruqO5M7OQFyOuC3IYSQMb3QZKtEvEwgWWXtWs8QN5Xj29dN3nMLTi6 pcKmOx9lm71zVn1xRF6p0dz9ys7rET+Wabt++n/wli/qCrGdTnAr5AWF4g1w4ExA Qvh38iSdfuUpOT0bPWUBCUvyFe/NmY6ITXQq4Sl40Vxt9V8nnSXEOQOgitNlFakt p83S+379HAYRSg6ohW1FURyuZU1LJeQ= -----END CERTIFICATE-----Generated at Mon Mar 2 03:13:59 2026 by rpki-client