$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa File: bbd6b25f-8695-34b1-ac59-247d8785d485.roa (raw, json) Hash identifier: Y9ZBmkpcpzbH0sgIo5MXmLvzAZZQMd3g1jEnMZ+BpIs= Subject key identifier: B3:F0:1B:22:62:F5:A6:30:7E:80:00:2A:1D:31:75:8F:43:C5:40:CE Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFEA9A7FF54B4B0EBDDF00 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 104.137.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ea:9a:7f:f5:4b:4b:0e:bd:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=3ae4541f-8da7-4ee1-9e7d-a0a3a2bffa7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:d8:30:20:8e:da:36:48:af:b7:d1:db:63: 63:d1:1f:1f:6b:2e:1a:6e:07:af:c2:37:a0:93:6c: 5f:35:62:b1:76:e3:82:c5:22:f3:d3:32:a8:c6:4f: 59:77:fc:d2:16:7f:90:96:1e:01:aa:f3:75:45:65: f4:3b:57:b3:d0:f6:2c:b2:50:45:55:98:c4:9a:83: c5:c5:e4:3a:d7:7d:84:8c:55:4c:40:a8:bc:1c:ef: aa:4a:46:9a:a6:7e:94:e9:b5:92:ba:36:fc:d7:25: 0d:5c:ba:34:86:f5:86:cf:3d:b0:ef:28:17:bc:9c: 17:12:a8:95:86:07:24:d5:e1:ce:fa:ea:43:45:bb: e5:7f:b7:ac:fa:ec:56:0e:70:a0:e6:96:bb:eb:9d: 2f:f5:b9:54:50:25:db:dc:62:91:60:99:09:42:c2: cf:8a:af:fc:f8:9b:1b:07:08:82:35:fc:68:d6:1e: 0a:6e:2a:e8:6f:56:a3:2c:2e:14:1d:18:20:f2:76: 2b:0a:83:df:9a:0c:d0:9e:87:29:21:6e:8f:7f:80: 74:44:56:7d:85:e7:9e:18:e3:51:62:c9:c4:bc:1a: 12:d3:83:c6:cc:fa:14:08:5d:e7:03:31:56:0b:5a: cc:a7:7a:14:00:58:d1:07:a2:bb:1a:49:fa:11:49: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:1B:22:62:F5:A6:30:7E:80:00:2A:1D:31:75:8F:43:C5:40:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bbd6b25f-8695-34b1-ac59-247d8785d485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 104.137.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f8:7f:a5:51:8c:e2:2d:75:6b:62:5d:ce:44:71:41:77:86: 7f:d8:7b:fc:d8:7e:87:d6:28:0d:2c:bb:43:4d:d9:64:f2:7a: 8a:43:99:64:71:35:8d:d0:02:56:4f:87:ed:07:38:04:a6:ad: 8e:eb:ba:30:ed:fa:70:66:b8:6a:10:86:51:dc:cd:2f:a5:68: a4:08:1a:90:a0:3f:77:81:9d:ff:21:0c:8b:fd:fa:39:e8:93: 33:b4:21:f4:57:26:c6:eb:d9:84:e2:4f:04:f9:5d:a9:76:dc: 1d:9e:b6:77:2b:72:e6:75:d9:36:9a:2b:87:1d:50:0d:a4:f6: 5a:25:36:84:01:cf:a6:1d:d5:a6:ff:3d:fe:86:e7:3c:39:1c: 04:63:42:a4:21:81:21:84:69:b1:c0:02:18:05:22:f3:3b:62: 4d:92:dc:c5:cb:1d:af:40:f9:ae:30:6c:f9:fc:3a:06:6d:38: 48:bc:c8:cd:5c:ac:ad:bf:c9:14:60:7d:2c:8e:5e:0c:ae:87: f0:3c:59:d2:d4:fa:5d:7d:b6:89:1b:86:27:3c:85:2e:df:9c: fc:d7:34:02:68:3a:68:e7:0b:46:9e:a6:9c:c8:68:8c:96:a3: 27:f1:32:59:55:b2:40:68:7c:f9:65:b1:84:2e:9e:f7:d3:ea: d7:d0:b1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/+qaf/VLSw693wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk M2FlNDU0MWYtOGRhNy00ZWUxLTllN2QtYTBhM2EyYmZmYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEnYMCCO2jZIr7fR22Nj0R8fay4abgevwjeg k2xfNWKxduOCxSLz0zKoxk9Zd/zSFn+Qlh4BqvN1RWX0O1ez0PYsslBFVZjEmoPF xeQ6132EjFVMQKi8HO+qSkaapn6U6bWSujb81yUNXLo0hvWGzz2w7ygXvJwXEqiV hgck1eHO+upDRbvlf7es+uxWDnCg5pa7650v9blUUCXb3GKRYJkJQsLPiq/8+Jsb BwiCNfxo1h4Kbirob1ajLC4UHRgg8nYrCoPfmgzQnocpIW6Pf4B0RFZ9heeeGONR YsnEvBoS04PGzPoUCF3nAzFWC1rMp3oUAFjRB6K7Gkn6EUm/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPwGyJi9aYwfoAAKh0xdY9DxUDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYmJkNmIyNWYtODY5NS0z NGIxLWFjNTktMjQ3ZDg3ODVkNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH4f6VRjOItdWtiXc5EcUF3hn/Ye/zYfofWKA0su0NN2WTyeopDmWRx NY3QAlZPh+0HOASmrY7rujDt+nBmuGoQhlHczS+laKQIGpCgP3eBnf8hDIv9+jno kzO0IfRXJsbr2YTiTwT5Xal23B2etncrcuZ12TaaK4cdUA2k9lolNoQBz6Yd1ab/ Pf6G5zw5HARjQqQhgSGEabHAAhgFIvM7Yk2S3MXLHa9A+a4wbPn8OgZtOEi8yM1c rK2/yRRgfSyOXgyuh/A8WdLU+l19tokbhic8hS7fnPzXNAJoOmjnC0aeppzIaIyW oyfxMllVskBofPllsYQunvfT6tfQscw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:42:40 2026 by rpki-client