$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: Q6WgCi209nwnqTMqkh4mxn3si2kC81qo9YpV4cvJDH0= Subject key identifier: 71:27:FE:9E:9B:D9:BB:06:89:EB:14:EE:90:EC:B2:28:CC:49:D8:BD Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584D2D3F7543489EB663383C2EC0 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:75:43:48:9e:b6:63:38:3c:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8266a596-ecfe-47ed-b80c-1ba7ffedc346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:29:21:c8:dc:22:b8:87:08:a3:99:61:27: 19:25:db:9a:77:ba:4c:74:61:39:8f:67:c9:3b:88: 3b:44:b2:15:76:85:20:07:8e:71:16:b5:6f:88:ca: 04:95:56:c2:d1:98:53:e1:21:1c:c6:ed:e5:68:d5: c3:93:19:88:40:75:81:84:bc:79:70:15:12:e8:e6: ae:72:5a:62:0c:fb:eb:c8:95:21:19:90:87:b9:af: 22:57:ff:9f:d6:d4:24:2a:8e:e9:5e:32:88:49:06: e0:1c:1d:cf:70:24:18:fd:6d:df:ec:f7:aa:b9:98: 06:51:2b:ce:ae:55:c1:ed:5d:a9:2c:c4:5c:ea:e8: 08:b5:80:ec:5b:01:7e:a9:c4:b3:2b:59:b3:26:e1: c2:c1:a6:3c:01:40:ab:f6:53:11:db:f0:6c:fa:7d: 7b:57:44:f7:b0:35:db:b1:54:95:ec:44:01:85:4c: e0:cb:a3:7b:37:8e:5c:80:7d:a2:e5:fb:34:e8:65: 4c:c6:03:25:f6:7d:de:52:08:df:36:64:5a:b3:8a: d3:e9:63:22:37:b4:21:36:8a:9f:0b:3b:5b:b2:87: be:46:68:c6:d8:de:8b:40:af:7f:40:b6:f8:18:d4: 73:66:39:a2:21:2a:a1:72:cc:e6:df:d5:4c:91:32: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:FE:9E:9B:D9:BB:06:89:EB:14:EE:90:EC:B2:28:CC:49:D8:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:79:00:38:dc:21:b1:0d:94:bb:dd:41:bc:12:29:05:b5:bd: 33:a0:89:2c:a4:f9:2f:c5:7a:72:7c:d1:f7:1c:7f:5a:30:c9: c3:c9:d4:8b:21:2a:7a:06:f7:f6:96:47:b0:04:45:ba:a7:25: 70:78:0c:34:31:f8:38:50:cb:05:b2:57:9c:e2:c9:de:d4:df: 11:4d:b1:65:76:85:ea:7c:a7:9e:52:9f:51:aa:ca:dc:25:2d: 3d:4c:b1:f5:b4:85:1c:27:77:41:41:4f:82:05:72:75:6c:7a: a5:e8:d0:28:36:09:af:cf:3e:06:f7:2b:bc:7e:ba:23:19:4b: 5b:e1:74:fb:7c:0f:bd:49:9c:05:b2:0d:ac:46:2e:62:11:d9: 21:2b:42:4f:0a:1a:73:a1:56:c4:2d:ab:5e:7e:63:9f:f6:00: e9:7c:de:f9:0e:cb:a1:e1:be:97:86:d9:9f:03:c1:73:22:83: 98:9b:56:e4:20:43:53:8a:40:ac:44:2d:dd:a9:af:47:c1:79: d5:01:82:dd:9c:b7:4c:1e:77:7a:34:b8:0b:c8:5e:53:89:9b: 66:b4:c4:e5:ac:21:ff:8b:01:54:5e:a2:29:01:91:90:6d:c8: 47:6e:69:6b:a4:19:46:60:0e:3e:a3:27:a8:e7:ea:2c:11:69: 9a:9c:47:9e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0tP3VDSJ62Yzg8LsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ODI2NmE1OTYtZWNmZS00N2VkLWI4MGMtMWJhN2ZmZWRjMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvApIcjcIriHCKOZYScZJduad7pMdGE5j2fJ O4g7RLIVdoUgB45xFrVviMoElVbC0ZhT4SEcxu3laNXDkxmIQHWBhLx5cBUS6Oau clpiDPvryJUhGZCHua8iV/+f1tQkKo7pXjKISQbgHB3PcCQY/W3f7PequZgGUSvO rlXB7V2pLMRc6ugItYDsWwF+qcSzK1mzJuHCwaY8AUCr9lMR2/Bs+n17V0T3sDXb sVSV7EQBhUzgy6N7N45cgH2i5fs06GVMxgMl9n3eUgjfNmRas4rT6WMiN7QhNoqf Cztbsoe+RmjG2N6LQK9/QLb4GNRzZjmiISqhcszm39VMkTIchQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHEn/p6b2bsGiesU7pDssijMSdi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAB55ADjcIbENlLvdQbwSKQW1vTOgiSyk+S/F enJ80fccf1owycPJ1IshKnoG9/aWR7AERbqnJXB4DDQx+DhQywWyV5ziyd7U3xFN sWV2hep8p55Sn1GqytwlLT1MsfW0hRwnd0FBT4IFcnVseqXo0Cg2Ca/PPgb3K7x+ uiMZS1vhdPt8D71JnAWyDaxGLmIR2SErQk8KGnOhVsQtq15+Y5/2AOl83vkOy6Hh vpeG2Z8DwXMig5ibVuQgQ1OKQKxELd2pr0fBedUBgt2ct0wed3o0uAvIXlOJm2a0 xOWsIf+LAVReoikBkZBtyEduaWukGUZgDj6jJ6jn6iwRaZqcR54= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:14 2026 by rpki-client