$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5cde16e8-b96e-355a-96b8-4b33615d310a.roa File: 5cde16e8-b96e-355a-96b8-4b33615d310a.roa (raw, json) Hash identifier: fuxL6rb77/4oJJyb5xoAECm3ojnDSIoeP0DhZF5b+ZI= Subject key identifier: 46:01:98:37:CB:C7:15:31:FA:E6:37:26:9C:1A:12:21:E0:CC:AB:3A Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D0DEBDE922EEFBA1FE12F9700 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5cde16e8-b96e-355a-96b8-4b33615d310a.roa Signing time: Wed 04 Mar 2026 07:42:20 +0000 ROA not before: Wed 04 Mar 2026 07:42:20 +0000 ROA not after: Tue 02 Jun 2026 06:42:20 +0000 asID: 2914 IP address blocks: 104.140.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:eb:de:92:2e:ef:ba:1f:e1:2f:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 4 07:42:20 2026 GMT Not After : Jun 2 06:42:20 2026 GMT Subject: CN=2122be61-eb3a-4575-a157-e6007ffdba78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:eb:66:fa:44:71:a2:d1:c6:2f:b4:5d:99:9a: fb:c5:89:e9:64:70:3b:ea:ca:7d:d0:7b:10:5c:59: 51:fd:04:9f:48:1b:15:df:32:84:b7:be:d4:a2:e1: 16:32:20:9d:76:18:54:f2:9a:89:34:32:71:d0:4e: 9e:c9:98:9b:bd:88:7b:8b:1a:40:43:14:56:cb:d7: f8:91:f5:23:ce:14:e3:cb:ab:0b:a8:fe:33:67:e0: c7:33:69:a8:89:b9:08:5d:a2:ae:aa:86:74:14:c6: 9f:e8:b0:c5:65:d7:f8:6d:9c:1c:59:14:1f:7b:c1: 4b:5e:b8:99:76:6e:58:8f:77:f1:35:a2:42:07:13: 96:a6:b2:14:2f:27:3e:4c:b2:08:0b:cb:8c:4c:d2: 34:c0:30:93:d4:fe:b0:c6:c7:b9:4a:77:ad:35:52: f4:bd:da:42:5e:1d:bf:e9:e2:4f:db:71:74:66:08: 47:5f:59:0c:be:1b:34:9a:f7:b7:d5:46:0c:aa:d7: ab:3e:a0:60:44:67:73:b6:17:6b:df:80:57:6e:5b: 54:b5:04:a3:36:33:3b:b8:86:9c:c9:1e:a4:63:49: 10:44:da:6c:33:43:cf:42:b6:e3:8c:91:b4:37:a7: 3f:7c:e0:d1:3c:41:45:e5:78:23:94:86:d1:5c:33: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:01:98:37:CB:C7:15:31:FA:E6:37:26:9C:1A:12:21:E0:CC:AB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5cde16e8-b96e-355a-96b8-4b33615d310a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:01:7d:10:6e:e7:22:79:46:21:55:14:73:0d:37:23:ae:fb: e4:d8:62:67:51:4b:03:94:ba:47:1b:26:2a:9a:2f:2c:38:e5: 49:0a:b9:a7:ca:d5:33:d0:07:07:bb:c6:de:50:52:25:c1:62: 75:67:5b:09:c9:39:08:ae:a3:d9:f0:d7:42:86:1c:98:7c:18: b9:56:f4:6c:7a:cd:46:d3:18:51:6b:28:36:1a:81:9b:04:0f: 53:3e:71:40:99:89:87:0e:2e:78:e4:b3:28:33:b1:75:a3:b6: 2c:92:15:87:9e:1a:60:25:73:3d:c7:96:16:0e:54:de:5c:87: ac:0c:33:78:1b:7d:3b:65:00:1f:03:b1:9b:dc:91:b4:86:0e: 1b:48:cb:6d:eb:df:cc:92:68:0c:17:b2:9a:ce:d8:73:4c:2e: 1d:f2:3e:0c:55:d7:a4:4e:96:9d:3d:e7:d5:53:51:f6:cb:07: be:d6:04:45:0f:cc:00:8a:75:2d:11:51:14:97:27:68:c9:b5: 46:3a:92:1a:fb:f7:91:74:e2:3d:37:2d:44:10:01:db:77:fa: b4:0f:05:27:63:b7:24:79:f9:4c:a9:45:fb:ee:f6:1f:64:18: bb:f4:31:38:eb:7d:ff:06:79:d3:23:e8:09:2c:b3:49:28:dd: 5b:35:6f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0N696SLu+6H+EvlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMwNDA3NDIyMFoXDTI2MDYwMjA2NDIyMFowLzEtMCsGA1UEAxMk MjEyMmJlNjEtZWIzYS00NTc1LWExNTctZTYwMDdmZmRiYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOtm+kRxotHGL7RdmZr7xYnpZHA76sp90HsQ XFlR/QSfSBsV3zKEt77UouEWMiCddhhU8pqJNDJx0E6eyZibvYh7ixpAQxRWy9f4 kfUjzhTjy6sLqP4zZ+DHM2moibkIXaKuqoZ0FMaf6LDFZdf4bZwcWRQfe8FLXriZ dm5Yj3fxNaJCBxOWprIULyc+TLIIC8uMTNI0wDCT1P6wxse5SnetNVL0vdpCXh2/ 6eJP23F0ZghHX1kMvhs0mve31UYMqterPqBgRGdzthdr34BXbltUtQSjNjM7uIac yR6kY0kQRNpsM0PPQrbjjJG0N6c/fODRPEFF5XgjlIbRXDM1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYBmDfLxxUx+uY3JpwaEiHgzKs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNWNkZTE2ZTgtYjk2ZS0z NTVhLTk2YjgtNGIzMzYxNWQzMTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIwfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoBfRBu5yJ5RiFVFHMNNyOu++TYYmdRSwOUukcbJiqaLyw45UkKuafK 1TPQBwe7xt5QUiXBYnVnWwnJOQiuo9nw10KGHJh8GLlW9Gx6zUbTGFFrKDYagZsE D1M+cUCZiYcOLnjksygzsXWjtiySFYeeGmAlcz3HlhYOVN5ch6wMM3gbfTtlAB8D sZvckbSGDhtIy23r38ySaAwXsprO2HNMLh3yPgxV16ROlp0959VTUfbLB77WBEUP zACKdS0RURSXJ2jJtUY6khr795F04j03LUQQAdt3+rQPBSdjtyR5+UypRfvu9h9k GLv0MTjrff8GedMj6Akss0ko3Vs1bww= -----END CERTIFICATE-----Generated at Thu Mar 26 19:50:03 2026 by rpki-client