$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa File: 944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa (raw, json) Hash identifier: U9TcDoxmIbSrwlMzZDRLP9yDmVzHE4NhC+jLwuTbK04= Subject key identifier: 2C:9E:DE:44:64:90:CE:B4:D3:24:2B:51:0F:6A:0A:FA:3C:92:BC:6D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D492A7A9EA7DC3FF3C4C81940 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 2914 IP address blocks: 104.140.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:7a:9e:a7:dc:3f:f3:c4:c8:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=24954faa-89ba-4267-b8a9-2068028da195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:e7:90:8c:6e:da:99:ba:8a:5e:52:fe:75: 39:43:8b:6a:c6:28:cf:24:23:b0:fb:0a:6a:72:f5: 9c:b0:05:0d:01:2d:23:28:b2:00:8b:a5:9b:d5:ac: a9:e8:ba:c4:ba:9d:10:f2:9d:ee:57:0e:2d:33:ed: 8c:74:0d:79:fd:2d:b9:67:15:fb:9e:0e:aa:f9:30: 20:49:df:c9:b2:70:99:2f:4b:3e:df:cc:8d:d2:15: 58:50:8b:96:4f:ef:0b:ad:3c:2f:32:fa:89:a8:fb: e2:ec:00:a7:c9:71:cf:0a:e3:ec:00:92:38:85:8a: 00:bd:e5:7d:27:e5:c8:13:22:c4:95:c5:bf:88:32: 7e:35:d4:e9:29:a1:90:78:54:d8:f3:d6:be:86:97: 2e:84:d4:c2:40:5b:0d:84:fb:0b:6d:28:a8:e5:31: e7:9f:59:64:06:49:1e:22:bf:6a:d4:1e:6e:ec:db: d9:30:67:0c:f5:d6:84:30:4d:50:e4:cc:09:ca:ad: ed:7e:76:ff:cb:e5:9f:5b:f4:26:26:69:93:eb:c1: 9e:9c:96:66:9f:f8:71:59:04:ce:3b:7e:de:04:ed: da:08:c1:06:bd:50:e2:53:18:03:e6:65:bc:10:19: a6:7e:75:2f:7b:a4:91:a2:a4:41:73:82:25:ab:ee: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:DE:44:64:90:CE:B4:D3:24:2B:51:0F:6A:0A:FA:3C:92:BC:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c5:62:7f:71:9e:aa:e5:3d:7b:34:1c:38:4c:3c:27:57:69: 96:86:43:7c:29:4d:ea:0f:91:1a:23:c9:77:19:06:e3:2b:1a: 51:f7:8c:ca:95:f3:47:f9:24:4c:bf:07:e6:a3:65:7a:5a:bd: 23:b4:68:ac:7e:84:c8:68:6c:19:f0:9f:a8:67:60:a5:3e:0a: 92:3a:5f:6f:9a:54:9e:6f:be:11:4b:ac:2f:f1:a6:ec:b1:b2: c0:f3:39:85:78:ea:99:49:fc:2b:5e:94:6d:09:e9:02:53:d2: 5b:ed:11:15:f5:89:51:94:a8:02:8c:cd:13:8f:5d:2a:fe:60: 21:4d:88:b1:15:85:9d:fd:a8:a4:a7:6c:bb:e2:3e:b1:e4:e0: f6:80:10:71:53:e1:f5:1e:73:00:71:23:ad:6a:d8:8c:a4:fc: c2:bc:35:1c:01:f3:7d:83:8a:0f:9b:2e:22:d6:ea:6c:04:fe: 93:d2:58:7c:56:48:84:d2:06:9e:52:ac:bb:ae:c4:d6:89:0b: 30:e7:9d:0d:3f:82:f2:35:fe:12:6b:42:7f:fd:f6:16:11:d1: 27:79:bb:17:33:39:c9:d6:d9:90:ea:6f:fc:99:97:51:a5:4f: b6:3f:50:50:1c:2e:c3:da:8b:55:37:39:bf:34:09:ff:41:c6: 72:df:ed:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnqep9w/88TIGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MjQ5NTRmYWEtODliYS00MjY3LWI4YTktMjA2ODAyOGRhMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGjnkIxu2pm6il5S/nU5Q4tqxijPJCOw+wpq cvWcsAUNAS0jKLIAi6Wb1ayp6LrEup0Q8p3uVw4tM+2MdA15/S25ZxX7ng6q+TAg Sd/JsnCZL0s+38yN0hVYUIuWT+8LrTwvMvqJqPvi7ACnyXHPCuPsAJI4hYoAveV9 J+XIEyLElcW/iDJ+NdTpKaGQeFTY89a+hpcuhNTCQFsNhPsLbSio5THnn1lkBkke Ir9q1B5u7NvZMGcM9daEME1Q5MwJyq3tfnb/y+WfW/QmJmmT68GenJZmn/hxWQTO O37eBO3aCMEGvVDiUxgD5mW8EBmmfnUve6SRoqRBc4Ilq+7RVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCye3kRkkM600yQrUQ9qCvo8krxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTQ0ZDgzODctMmRiNi0z ZTJjLWI5ZDktNWJiZGU1NGVhNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIxiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbFYn9xnqrlPXs0HDhMPCdXaZaGQ3wpTeoPkRojyXcZBuMrGlH3jMqV 80f5JEy/B+ajZXpavSO0aKx+hMhobBnwn6hnYKU+CpI6X2+aVJ5vvhFLrC/xpuyx ssDzOYV46plJ/CtelG0J6QJT0lvtERX1iVGUqAKMzROPXSr+YCFNiLEVhZ39qKSn bLviPrHk4PaAEHFT4fUecwBxI61q2Iyk/MK8NRwB832Dig+bLiLW6mwE/pPSWHxW SITSBp5SrLuuxNaJCzDnnQ0/gvI1/hJrQn/99hYR0Sd5uxczOcnW2ZDqb/yZl1Gl T7Y/UFAcLsPai1U3Ob80Cf9BxnLf7ak= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:23 2026 by rpki-client