$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa File: 37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa (raw, json) Hash identifier: eNtvPZiaYU8jziFPZU2GsmJdT5wPQD9h/OyNeCOQnzU= Subject key identifier: 41:03:31:D5:E3:1B:F9:4D:BA:00:47:8A:8B:3B:48:0E:58:EA:8B:5C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D143D35B599BC7AECE376C980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 104.29.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:35:b5:99:bc:7a:ec:e3:76:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=ff1f430a-9295-4e52-8a68-babf2ed1dcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:5b:4a:de:de:85:13:b5:a5:27:f2:3a:da: 9b:f8:eb:22:bf:b5:e4:da:af:d9:fc:b7:76:b8:e3: da:54:9a:aa:ff:73:9e:c6:95:d2:81:c8:a1:d2:90: 34:55:5a:c8:a2:55:99:9a:a8:9e:a7:fe:8d:d8:7d: 3c:dd:db:00:1f:a3:09:a4:2e:d7:2f:a2:9d:b4:b2: 1f:64:dd:91:b1:9b:2d:9e:8d:6f:58:b8:45:7d:aa: 62:09:2a:a4:9e:b1:71:1b:13:94:3c:5e:65:ce:07: a1:53:fc:43:73:7b:5f:40:d4:a1:84:7a:30:f4:ac: 17:fc:fa:6f:a3:73:6a:b5:35:d1:e9:06:50:72:70: 79:8a:33:66:51:93:94:4d:28:13:b0:19:2b:32:10: b7:95:52:97:d5:d3:79:20:89:c4:62:f6:81:e9:45: 76:73:46:2d:b1:43:bf:72:d2:a7:05:8f:b2:b1:cd: 51:6d:8f:07:35:53:14:52:e8:cf:a7:2d:ea:e7:32: 0e:be:4a:c4:ed:d8:97:c8:20:2a:e2:d3:2b:91:88: 2a:df:c3:63:0a:f9:24:eb:cc:4d:4d:7a:75:9e:01: e9:65:ae:b3:d4:66:4e:34:a6:3a:69:53:ae:cd:fd: 81:2f:5b:31:0d:ee:ac:9a:29:f8:9c:10:f6:c0:46: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:03:31:D5:E3:1B:F9:4D:BA:00:47:8A:8B:3B:48:0E:58:EA:8B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37aa74d1-cc51-3786-9d2a-6aa300c7cf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 104.29.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:3c:fb:cc:22:4f:3a:af:62:39:fd:a2:33:c9:a9:20:b8:96: b2:df:59:0d:01:e9:db:40:2d:fe:4c:74:d9:ce:10:61:38:68: f0:1b:44:44:cb:62:b9:81:1b:47:55:24:64:21:fe:58:af:c8: 4f:17:66:03:49:25:fa:f3:e4:af:3e:e5:7a:86:20:cc:41:a4: f8:a0:05:d2:a9:00:2e:ec:69:d8:c7:c9:8d:ec:b2:da:49:6d: 86:d0:3e:69:a2:d2:ee:53:7f:d6:24:b5:3d:88:ce:a0:d1:b1: 19:b6:80:0e:f1:2d:5b:57:4d:fc:f6:87:ad:96:d5:a7:55:e9: 89:cd:b0:c2:1b:c8:30:39:c0:06:da:ed:a3:b4:76:57:32:fd: 4f:a5:ec:90:ad:4b:44:35:dc:a8:3f:24:71:a2:3b:bc:47:f4: b8:89:c2:50:16:12:96:15:43:0d:30:fa:f5:f5:be:54:e1:d5: 61:59:53:9a:74:38:e6:7c:14:2d:b6:4d:6e:c1:88:bc:4e:90: 89:b5:5c:8b:64:e8:fc:d4:4f:34:dc:73:55:03:3b:cd:66:82: e9:2d:7b:23:9e:ca:8a:a0:d0:45:e5:15:57:aa:d7:ac:b3:1f: df:f1:30:6e:50:09:a3:24:66:30:7e:6f:14:3d:21:fd:3f:f8: 6b:3b:db:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTW1mbx67ON2yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmYxZjQzMGEtOTI5NS00ZTUyLThhNjgtYmFiZjJlZDFkY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFtbSt7ehRO1pSfyOtqb+Osiv7Xk2q/Z/Ld2 uOPaVJqq/3OexpXSgcih0pA0VVrIolWZmqiep/6N2H083dsAH6MJpC7XL6KdtLIf ZN2RsZstno1vWLhFfapiCSqknrFxGxOUPF5lzgehU/xDc3tfQNShhHow9KwX/Ppv o3NqtTXR6QZQcnB5ijNmUZOUTSgTsBkrMhC3lVKX1dN5IInEYvaB6UV2c0YtsUO/ ctKnBY+ysc1RbY8HNVMUUujPpy3q5zIOvkrE7diXyCAq4tMrkYgq38NjCvkk68xN TXp1ngHpZa6z1GZONKY6aVOuzf2BL1sxDe6smin4nBD2wEZOLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEDMdXjG/lNugBHios7SA5Y6otcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzdhYTc0ZDEtY2M1MS0z Nzg2LTlkMmEtNmFhMzAwYzdjZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMc8+8wiTzqvYjn9ojPJqSC4lrLfWQ0B6dtALf5MdNnOEGE4aPAbRETL YrmBG0dVJGQh/livyE8XZgNJJfrz5K8+5XqGIMxBpPigBdKpAC7sadjHyY3sstpJ bYbQPmmi0u5Tf9YktT2IzqDRsRm2gA7xLVtXTfz2h62W1adV6YnNsMIbyDA5wAba 7aO0dlcy/U+l7JCtS0Q13Kg/JHGiO7xH9LiJwlAWEpYVQw0w+vX1vlTh1WFZU5p0 OOZ8FC22TW7BiLxOkIm1XItk6PzUTzTcc1UDO81mgukteyOeyoqg0EXlFVeq16yz H9/xMG5QCaMkZjB+bxQ9If0/+Gs72wI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:42 2026 by rpki-client