$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/d398555e-9d5c-3406-8a83-504d25dc2801.roa File: d398555e-9d5c-3406-8a83-504d25dc2801.roa (raw, json) Hash identifier: Gqy/jCJnAqtmGjjKwuiCW9xamfqAN30fwlPTpf8mKUc= Subject key identifier: 4C:D7:17:68:84:0B:56:89:CF:9E:64:96:B9:49:47:23:54:B4:9A:79 Certificate issuer: /CN=3034d07c-3a5c-48d3-8756-810837f1ae39 Certificate serial: 010D0C9F4328584D8EF577E1350BFCFAE5122CA0 Authority key identifier: CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/d398555e-9d5c-3406-8a83-504d25dc2801.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 395378 IP address blocks: 104.152.216.0/22 maxlen: 22 104.152.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:77:e1:35:0b:fc:fa:e5:12:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3034d07c-3a5c-48d3-8756-810837f1ae39 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ebbffd6b-3581-42b2-b0b7-c069b3381ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:df:bc:cb:f6:42:9a:0a:b7:78:89:69:bb:a3: 56:a4:7a:96:3b:76:5b:8c:8a:eb:5a:5d:c8:3b:32: 63:1a:e2:a1:40:a0:a8:8d:65:c1:51:7c:86:5e:47: 1f:13:6b:a5:ac:f5:c5:fb:0a:10:b4:1a:f2:db:a2: e6:ba:a2:95:7f:02:0e:73:92:47:6f:c5:81:cf:70: 6b:91:17:2b:30:f2:4d:4e:1d:69:0b:24:85:dc:13: 36:f9:f4:e1:58:d6:ab:63:fc:de:6a:a6:74:e4:57: 98:83:1c:60:83:61:b3:27:28:1f:ed:b5:87:3e:fa: b4:94:4b:57:42:ba:c6:a8:34:56:ad:6e:a8:55:d0: 51:40:fb:4a:12:ef:4f:e6:0e:25:0b:ac:15:40:af: 6c:d8:07:86:01:0e:9a:ab:d5:35:8f:68:bd:fd:91: f0:64:49:b0:a3:ad:14:86:45:92:71:03:fa:1d:1f: a2:05:99:84:bb:fc:e0:ae:1b:85:17:0f:67:6c:57: 4e:72:63:bf:c1:02:8a:e5:f2:18:38:63:1c:c3:27: f6:bc:b4:40:f1:7d:e0:58:86:21:c8:c0:1e:85:0d: da:25:82:33:7f:da:7a:b5:13:fd:d5:d9:05:02:cc: a8:b4:fe:23:a1:28:c2:05:78:32:dc:d7:13:b3:95: ae:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D7:17:68:84:0B:56:89:CF:9E:64:96:B9:49:47:23:54:B4:9A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/d398555e-9d5c-3406-8a83-504d25dc2801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl X509v3 Authority Key Identifier: keyid:CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer sbgp-ipAddrBlock: critical IPv4: 104.152.216.0-104.152.221.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e3:08:e2:90:3e:6e:48:c1:3c:60:de:13:ae:d2:4c:47:1a: 4f:f1:82:1c:54:8a:6e:80:b0:3a:81:43:55:03:87:f9:38:2c: c0:42:90:4f:2c:bf:21:10:6a:a6:5e:d4:49:89:a8:69:a3:7e: 78:5c:41:68:2f:5a:ea:81:35:6f:7b:55:a8:7a:04:0d:6e:db: e1:de:61:73:18:8d:76:02:dd:77:7c:85:a2:93:6d:8f:36:c3: 5e:55:4e:9e:ee:02:08:a5:d4:70:c7:df:86:94:f2:34:30:60: db:2c:d7:4e:d3:e2:7e:f8:65:55:e7:dd:a9:97:f0:ae:1f:68: 09:36:fe:e2:09:a9:58:11:ee:b4:7f:dc:4a:cf:7e:d0:ab:19: 6b:17:d5:31:32:cd:90:00:33:db:e2:7f:6d:0b:f5:4e:ca:9e: 4e:3e:56:d6:6f:cd:9d:5d:5e:fd:d7:8e:c6:90:87:50:16:a0: 7f:06:16:f9:af:9c:0d:4b:98:3b:c4:61:8d:67:3c:6b:52:6c: c7:03:8a:44:ca:a8:e2:2c:11:56:db:13:38:98:f8:a6:dc:76: 9a:e2:da:c5:27:9d:07:8b:2f:4f:11:46:e9:0d:f3:0c:13:6b: 30:6c:9e:5a:bc:37:49:fc:57:e0:63:41:55:ce:9e:25:b8:7c: 7e:73:28:80 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2O9XfhNQv8+uUSLKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAzNGQwN2MtM2E1Yy00OGQzLTg3NTYtODEwODM3ZjFh ZTM5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZWJiZmZkNmItMzU4MS00MmIyLWIwYjctYzA2OWIzMzgxZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9+8y/ZCmgq3eIlpu6NWpHqWO3ZbjIrrWl3I OzJjGuKhQKCojWXBUXyGXkcfE2ulrPXF+woQtBry26LmuqKVfwIOc5JHb8WBz3Br kRcrMPJNTh1pCySF3BM2+fThWNarY/zeaqZ05FeYgxxgg2GzJygf7bWHPvq0lEtX QrrGqDRWrW6oVdBRQPtKEu9P5g4lC6wVQK9s2AeGAQ6aq9U1j2i9/ZHwZEmwo60U hkWScQP6HR+iBZmEu/zgrhuFFw9nbFdOcmO/wQKK5fIYOGMcwyf2vLRA8X3gWIYh yMAehQ3aJYIzf9p6tRP91dkFAsyotP4joSjCBXgy3NcTs5Wu7QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEzXF2iEC1aJz55klrlJRyNUtJp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDM0 ZDA3Yy0zYTVjLTQ4ZDMtODc1Ni04MTA4MzdmMWFlMzkvZDM5ODU1NWUtOWQ1Yy0z NDA2LThhODMtNTA0ZDI1ZGMyODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzAzNGQwN2MtM2E1Yy00OGQzLTg3 NTYtODEwODM3ZjFhZTM5LzMwMzRkMDdjLTNhNWMtNDhkMy04NzU2LTgxMDgzN2Yx YWUzOS5jcmwwHwYDVR0jBBgwFoAUzrMxGCjzma4f78LnmqRLKLrLNvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMDM0ZDA3Yy0zYTVjLTQ4ZDMtODc1Ni04MTA4 MzdmMWFlMzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANomNgD BAFomNwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmeMI4pA+bkjBPGDeE67STEcaT/GCHFSKboCwOoFDVQOH +TgswEKQTyy/IRBqpl7USYmoaaN+eFxBaC9a6oE1b3tVqHoEDW7b4d5hcxiNdgLd d3yFopNtjzbDXlVOnu4CCKXUcMffhpTyNDBg2yzXTtPifvhlVefdqZfwrh9oCTb+ 4gmpWBHutH/cSs9+0KsZaxfVMTLNkAAz2+J/bQv1TsqeTj5W1m/NnV1e/deOxpCH UBagfwYW+a+cDUuYO8RhjWc8a1JsxwOKRMqo4iwRVtsTOJj4ptx2muLaxSedB4sv TxFG6Q3zDBNrMGyeWrw3SfxX4GNBVc6eJbh8fnMogA== -----END CERTIFICATE-----Generated at Wed May 13 15:29:51 2026 by rpki-client