$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa File: 7356e457-670a-3033-a781-b9366fd8a801.roa (raw, json) Hash identifier: +bku5cW/Vt/PYoaLp9ukD8nHUy4vLU9XQOO81OmpTNc= Subject key identifier: D2:DB:1A:07:2D:58:FE:61:B0:BB:B5:3E:EA:73:08:0A:9A:D3:92:E7 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584D4D5A5CF8C7B87E4161AA9000 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46408 IP address blocks: 104.219.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5c:f8:c7:b8:7e:41:61:aa:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=36350714-7122-4bb9-a7dd-3f9f715c93cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7f:57:37:f2:ce:e0:1e:5f:93:6d:f6:b0:58: 84:92:01:01:47:33:ec:cf:8a:8e:8c:39:25:2a:f6: a1:5d:c3:87:20:a4:d5:cb:8a:44:d2:c8:e5:9f:05: b2:ae:33:14:54:97:68:9d:e5:86:c0:1a:50:8f:4e: 4c:41:fb:6f:26:39:d4:9b:64:b8:3e:97:b9:b4:1e: 40:a0:a5:5e:36:a1:7d:02:e0:e7:52:8f:4a:50:77: c4:ec:99:e3:85:16:9f:17:98:23:9f:f0:03:01:e0: b7:db:32:4e:7c:4f:05:1c:b6:d7:fb:db:4c:75:ec: bc:d8:ae:55:28:23:bc:56:db:72:32:88:b0:5c:6a: 86:a4:c6:a1:28:06:f7:fd:94:db:f4:2f:e5:17:24: fd:46:be:f7:56:64:7b:27:b8:55:28:02:29:9e:c6: 5c:48:01:41:3b:45:f9:de:b5:23:fd:fd:30:d5:b1: 1f:d1:6d:4d:be:11:1c:6e:72:f2:52:47:0c:7e:d1: 6d:ab:de:fd:cb:96:ad:7a:b3:96:71:1b:b4:59:5c: 06:ee:78:03:53:df:75:c7:51:13:2c:ea:da:a2:2d: de:61:6a:b2:55:23:86:2b:cc:f4:52:a8:a3:82:05: 68:65:8b:74:54:2b:48:8a:7a:b7:48:f8:aa:6d:ca: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DB:1A:07:2D:58:FE:61:B0:BB:B5:3E:EA:73:08:0A:9A:D3:92:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/7356e457-670a-3033-a781-b9366fd8a801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.219.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:2a:c3:b1:03:c0:31:4a:94:a8:e8:80:68:bc:95:56:bd:f5: 5e:15:f6:03:b0:1f:48:71:4f:4d:79:8c:79:83:11:d1:5a:eb: 37:1b:da:8b:37:bb:f5:ad:a2:98:bf:58:ac:ac:26:15:f0:95: 94:13:96:ed:dd:14:33:8d:9d:6b:b6:0e:83:fe:9e:87:25:09: 67:a6:a5:88:7e:29:a9:ba:8f:f3:8f:2a:a2:09:d8:44:6b:99: 79:8a:06:3d:42:91:d6:e2:57:9f:20:b8:52:6d:cd:4a:c0:cf: cb:44:c4:58:03:aa:a2:5f:d0:51:5f:87:fb:5c:0d:66:7d:3b: ee:fb:23:d3:b5:04:a1:00:b2:a7:ef:41:ca:8c:aa:bd:f1:c5: 1b:0b:c6:d0:c4:04:53:51:4e:39:86:d7:95:44:33:7c:57:62: 1f:56:db:0f:8e:8d:ed:9d:97:62:8c:9a:6d:87:8f:d7:72:99: 16:2f:40:c6:79:dd:84:98:d5:62:a4:21:33:e8:1b:e8:90:23: 7d:17:7f:ad:81:2e:3a:81:90:8c:2d:33:e9:96:81:76:39:15: 44:e5:dd:92:e0:1b:09:90:c4:d7:8f:dc:3b:a0:0b:9a:7e:0d: 29:80:31:e1:95:72:f9:4c:4b:24:a8:ce:c9:e7:87:3f:0e:ed: b1:c0:9c:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlz4x7h+QWGqkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MzYzNTA3MTQtNzEyMi00YmI5LWE3ZGQtM2Y5ZjcxNWM5M2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi39XN/LO4B5fk232sFiEkgEBRzPsz4qOjDkl KvahXcOHIKTVy4pE0sjlnwWyrjMUVJdoneWGwBpQj05MQftvJjnUm2S4Ppe5tB5A oKVeNqF9AuDnUo9KUHfE7JnjhRafF5gjn/ADAeC32zJOfE8FHLbX+9tMdey82K5V KCO8VttyMoiwXGqGpMahKAb3/ZTb9C/lFyT9Rr73VmR7J7hVKAIpnsZcSAFBO0X5 3rUj/f0w1bEf0W1NvhEcbnLyUkcMftFtq979y5aterOWcRu0WVwG7ngDU991x1ET LOraoi3eYWqyVSOGK8z0UqijggVoZYt0VCtIinq3SPiqbcoz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLbGgctWP5hsLu1PupzCAqa05LnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvNzM1NmU0NTctNjcwYS0z MDMzLWE3ODEtYjkzNjZmZDhhODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaNsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkqw7EDwDFKlKjogGi8lVa99V4V9gOwH0hxT015jHmDEdFa6zcb2os3 u/Wtopi/WKysJhXwlZQTlu3dFDONnWu2DoP+noclCWempYh+Kam6j/OPKqIJ2ERr mXmKBj1CkdbiV58guFJtzUrAz8tExFgDqqJf0FFfh/tcDWZ9O+77I9O1BKEAsqfv QcqMqr3xxRsLxtDEBFNRTjmG15VEM3xXYh9W2w+Oje2dl2KMmm2Hj9dymRYvQMZ5 3YSY1WKkITPoG+iQI30Xf62BLjqBkIwtM+mWgXY5FUTl3ZLgGwmQxNeP3DugC5p+ DSmAMeGVcvlMSySozsnnhz8O7bHAnGI= -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:43 2026 by rpki-client