$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa File: 58f3b9ab-ee81-3efb-90a1-932f6856911c.roa (raw, json) Hash identifier: qEzlPp3inZ3mZxV84c4rXyMwqpmmtvGXHigFE0BZrJ0= Subject key identifier: BD:01:30:D9:3B:A5:73:EC:E2:67:A1:D5:E6:A0:FF:4F:1E:10:48:53 Certificate issuer: /CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4 Certificate serial: 010D0C9F4328584D3F64D9F49E243D2FCBA22BC0 Authority key identifier: 5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 393431 IP address blocks: 104.219.100.0/22 maxlen: 22 2620:80:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d9:f4:9e:24:3d:2f:cb:a2:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=e42af3a2-5a67-46f2-a027-1d25f4020892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:36:c6:8e:29:13:3e:12:22:d2:08:71:ac: 18:03:0f:78:17:fc:43:79:96:27:93:ce:32:9b:33: ae:ae:f0:f1:36:4a:40:60:62:e0:b4:f4:18:18:a8: 36:44:0f:8b:f5:c8:fc:60:88:a0:08:bc:ab:b7:d1: 53:d6:cb:0b:ee:22:f4:18:ef:46:af:df:50:b6:68: 6d:15:77:c0:cf:5d:1a:36:3b:c5:5b:52:98:cc:4c: 8c:0a:f5:bc:7c:ce:82:a9:ed:89:7a:05:8f:a3:e2: be:fb:3b:9f:02:22:26:76:f8:25:61:dd:b2:84:51: 6e:90:93:b5:61:be:6b:17:4a:8f:36:35:9d:29:b5: 63:eb:87:2d:c0:8d:cc:ce:87:36:b4:ef:95:ee:84: c3:05:da:10:c0:2c:47:53:94:37:ad:17:fc:f6:4a: 32:2f:55:8c:d1:73:e0:89:d5:7a:26:ba:fd:02:b4: 3a:41:1e:ac:9e:61:54:b2:88:96:7c:67:d1:98:bf: e8:eb:83:37:f1:a6:0e:f5:81:b3:85:74:b3:ef:72: 39:a1:98:d1:ed:13:8d:07:92:a5:2a:49:03:eb:de: 59:b2:54:7b:73:81:62:c2:f2:9a:73:51:f5:6d:ca: d7:22:85:1a:0d:8c:0a:74:e5:8e:6d:0a:90:e9:95: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:01:30:D9:3B:A5:73:EC:E2:67:A1:D5:E6:A0:FF:4F:1E:10:48:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/58f3b9ab-ee81-3efb-90a1-932f6856911c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.crl X509v3 Authority Key Identifier: keyid:5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer sbgp-ipAddrBlock: critical IPv4: 104.219.100.0/22 IPv6: 2620:80:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:b4:8d:56:84:92:28:8d:21:7d:89:fd:5c:58:63:f5:c3:04: 8e:e3:9a:65:a6:72:c6:96:6a:d7:96:0c:73:6b:98:d1:c7:2b: f0:a8:4f:b7:90:71:73:c1:94:ed:24:2e:ad:c7:75:43:65:97: 89:68:05:c8:15:21:f3:f1:92:f6:04:f6:ae:3a:47:8b:6c:74: 2f:24:62:40:17:36:25:96:7a:9a:bf:0f:24:3b:00:97:f2:09: 03:52:ae:f9:a1:9c:4d:c0:6d:85:2a:d7:e2:09:48:63:f4:00: d0:4a:13:e8:7e:2c:87:3d:7e:83:f1:2c:60:e2:90:7b:77:83: 0d:f5:f2:d3:de:9d:a0:50:db:d8:15:1a:c5:8a:dc:29:2e:ee: 72:96:e1:dc:3d:c3:0b:71:ea:49:b5:20:cf:4f:ba:be:fe:83: 1f:e6:fc:19:93:a1:99:7d:d4:04:ed:34:f0:de:fa:0d:60:a0: 36:09:db:d1:41:0a:36:ee:85:b3:f8:7c:b3:71:97:f7:1b:cf: 6a:3b:ce:ec:42:65:56:72:85:23:2c:5d:a2:78:33:2a:d7:7a: 95:93:46:f0:9b:12:f4:6b:09:9a:e0:94:87:47:15:a8:09:35: 15:a3:d2:b3:7c:36:e4:6f:58:54:80:dd:78:92:ce:37:e4:fc: a4:f4:3e:cf -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0/ZNn0niQ9L8uiK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc1ZTliZjQtYjZkOC00MjNjLTkxZWItMmNiZjkwYjBk NmU0MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTQyYWYzYTItNWE2Ny00NmYyLWEwMjctMWQyNWY0MDIwODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKw2xo4pEz4SItIIcawYAw94F/xDeZYnk84y mzOurvDxNkpAYGLgtPQYGKg2RA+L9cj8YIigCLyrt9FT1ssL7iL0GO9Gr99Qtmht FXfAz10aNjvFW1KYzEyMCvW8fM6Cqe2JegWPo+K++zufAiImdvglYd2yhFFukJO1 Yb5rF0qPNjWdKbVj64ctwI3Mzoc2tO+V7oTDBdoQwCxHU5Q3rRf89koyL1WM0XPg idV6Jrr9ArQ6QR6snmFUsoiWfGfRmL/o64M38aYO9YGzhXSz73I5oZjR7RONB5Kl KkkD695ZslR7c4FiwvKac1H1bcrXIoUaDYwKdOWObQqQ6ZWpIwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFL0BMNk7pXPs4meh1eag/08eEEhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNzVl OWJmNC1iNmQ4LTQyM2MtOTFlYi0yY2JmOTBiMGQ2ZTQvNThmM2I5YWItZWU4MS0z ZWZiLTkwYTEtOTMyZjY4NTY5MTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzc1ZTliZjQtYjZkOC00MjNjLTkx ZWItMmNiZjkwYjBkNmU0LzM3NWU5YmY0LWI2ZDgtNDIzYy05MWViLTJjYmY5MGIw ZDZlNC5jcmwwHwYDVR0jBBgwFoAUWpd7qB4eEEeTw8FzYD5Zyg+V758wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNzVlOWJmNC1iNmQ4LTQyM2MtOTFlYi0yY2Jm OTBiMGQ2ZTQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCaNtkMA8E AgACMAkDBwAmIACAwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAx7SNVoSSKI0hfYn9XFhj9cMEjuOaZaZy xpZq15YMc2uY0ccr8KhPt5Bxc8GU7SQurcd1Q2WXiWgFyBUh8/GS9gT2rjpHi2x0 LyRiQBc2JZZ6mr8PJDsAl/IJA1Ku+aGcTcBthSrX4glIY/QA0EoT6H4shz1+g/Es YOKQe3eDDfXy096doFDb2BUaxYrcKS7ucpbh3D3DC3HqSbUgz0+6vv6DH+b8GZOh mX3UBO008N76DWCgNgnb0UEKNu6Fs/h8s3GX9xvPajvO7EJlVnKFIyxdongzKtd6 lZNG8JsS9GsJmuCUh0cVqAk1FaPSs3w25G9YVIDdeJLON+T8pPQ+zw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:22:12 2026 by rpki-client