$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e3b4711a-2547-31a9-8ca7-81ce081814c9.roa File: e3b4711a-2547-31a9-8ca7-81ce081814c9.roa (raw, json) Hash identifier: x7z3TzvLJWb/LhovPRcm7o7AOQmzVn3NzQ/8+k0vzhk= Subject key identifier: 43:8D:5C:51:68:3A:56:C5:59:CC:47:BE:16:BD:23:4A:CC:C9:28:06 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584DAAE01A4018B687BED2CE4F80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e3b4711a-2547-31a9-8ca7-81ce081814c9.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 64267 IP address blocks: 104.244.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:1a:40:18:b6:87:be:d2:ce:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=8be2b63c-6622-4c43-9e7d-168f52beba1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:c5:57:2c:f9:26:8a:9b:a8:01:e6:fc:79: 1e:e9:ce:cf:1c:37:e7:3b:0c:f5:ba:16:0a:3c:a9: 37:cc:83:8e:71:91:22:43:13:47:e1:98:53:78:31: 4f:fa:b0:50:cd:d2:c4:da:f3:a5:6d:14:35:b7:76: e9:f5:9b:e0:b2:57:d9:d8:1e:be:93:ee:0c:db:c1: b6:b0:70:52:bf:e7:4e:84:3f:18:cd:71:46:3c:ba: cc:d5:e3:b7:e2:c6:60:46:18:a0:a5:df:4a:6c:a6: 40:37:92:fe:fe:90:73:51:65:a3:64:d2:4f:e9:13: fb:f7:3b:c7:91:18:76:a2:28:a3:0f:d2:1e:d9:35: 5b:18:26:b0:bb:a3:7c:e9:3e:74:d8:20:67:48:ea: 41:14:24:21:74:de:fd:54:09:58:89:41:18:36:00: 54:95:2b:43:e9:0a:40:2d:d0:90:5d:d8:5a:31:a5: 90:21:c1:d2:e9:b9:61:61:e8:a8:f1:aa:5c:df:7a: bc:68:90:ec:a1:4f:7b:bf:c3:56:b1:42:ad:51:72: 42:6c:15:83:1a:7a:77:b7:bd:0b:c3:c4:bc:1e:22: f3:5b:6b:f9:71:52:28:dd:74:f3:c1:5b:b8:57:45: 21:00:f6:f8:b3:27:1a:cb:63:97:c3:6b:ac:91:3d: e6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:5C:51:68:3A:56:C5:59:CC:47:BE:16:BD:23:4A:CC:C9:28:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e3b4711a-2547-31a9-8ca7-81ce081814c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 104.244.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0a:0f:0b:d4:9e:62:8b:8d:fc:a6:af:1d:5c:5d:4b:3b:a9: d3:a9:42:a4:63:2d:13:b4:b1:48:64:7c:2d:00:9c:b9:bf:c6: cb:41:57:00:8d:22:84:0c:bb:d9:de:f5:87:3c:14:62:f6:ed: ad:59:81:a4:0e:6f:1e:9f:f8:ea:d2:ef:cf:62:9b:6e:02:2d: 06:7f:01:45:1b:d9:7a:a1:ba:eb:ac:f5:a9:1f:16:f8:57:72: 0f:bb:50:73:b0:b5:c6:09:ba:6f:88:24:51:77:03:a6:df:6a: 08:97:9f:d9:62:71:8d:c1:3a:11:aa:36:95:01:04:b0:3f:bd: b7:05:76:ba:60:ff:d7:60:93:3d:d4:4e:86:3c:67:ed:23:3a: 9b:26:30:52:88:c9:6f:a4:82:5d:f6:3b:9f:82:ea:d1:2b:fd: 7f:12:30:d6:db:30:14:7c:5e:0d:fc:0c:34:f3:d3:f9:4a:67: 6f:91:c5:6e:7d:52:20:44:13:aa:b3:b0:02:e8:75:fd:17:fd: e8:19:39:67:38:c3:da:8d:92:5a:86:fb:c6:a3:bc:ff:02:45: c5:fa:c0:8f:f4:64:10:fd:a9:33:fb:77:f1:62:b0:d6:24:6b: b7:f2:59:a7:90:b6:5f:bf:8e:f9:31:07:9b:bb:40:37:2c:22: 3c:e1:68:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4BpAGLaHvtLOT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk OGJlMmI2M2MtNjYyMi00YzQzLTllN2QtMTY4ZjUyYmViYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVXFVyz5JoqbqAHm/Hke6c7PHDfnOwz1uhYK PKk3zIOOcZEiQxNH4ZhTeDFP+rBQzdLE2vOlbRQ1t3bp9ZvgslfZ2B6+k+4M28G2 sHBSv+dOhD8YzXFGPLrM1eO34sZgRhigpd9KbKZAN5L+/pBzUWWjZNJP6RP79zvH kRh2oiijD9Ie2TVbGCawu6N86T502CBnSOpBFCQhdN79VAlYiUEYNgBUlStD6QpA LdCQXdhaMaWQIcHS6blhYeio8apc33q8aJDsoU97v8NWsUKtUXJCbBWDGnp3t70L w8S8HiLzW2v5cVIo3XTzwVu4V0UhAPb4sycay2OXw2uskT3mbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEONXFFoOlbFWcxHvha9I0rMySgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZTNiNDcxMWEtMjU0Ny0z MWE5LThjYTctODFjZTA4MTgxNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYKDwvUnmKLjfymrx1cXUs7qdOpQqRjLRO0sUhkfC0AnLm/xstBVwCN IoQMu9ne9Yc8FGL27a1ZgaQObx6f+OrS789im24CLQZ/AUUb2Xqhuuus9akfFvhX cg+7UHOwtcYJum+IJFF3A6bfagiXn9licY3BOhGqNpUBBLA/vbcFdrpg/9dgkz3U ToY8Z+0jOpsmMFKIyW+kgl32O5+C6tEr/X8SMNbbMBR8Xg38DDTz0/lKZ2+RxW59 UiBEE6qzsALodf0X/egZOWc4w9qNklqG+8ajvP8CRcX6wI/0ZBD9qTP7d/FisNYk a7fyWaeQtl+/jvkxB5u7QDcsIjzhaD4= -----END CERTIFICATE-----Generated at Wed May 13 13:35:40 2026 by rpki-client