$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa File: 3835268a-a25e-35a1-9357-9942576a6214.roa (raw, json) Hash identifier: 9bjOfA/6eKjPyzGY0wKj3h3H4s0ron5Vk8P42aYCllA= Subject key identifier: BF:27:5D:DF:45:B8:E3:71:E8:02:DB:BA:3F:7D:EA:39:4A:26:86:64 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584D1B19F222E34D2F4623608280 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 201106 IP address blocks: 104.37.29.0/24 maxlen: 32 104.143.94.0/24 maxlen: 32 104.194.206.0/24 maxlen: 32 104.194.207.0/24 maxlen: 32 104.194.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f2:22:e3:4d:2f:46:23:60:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=0a11ebd4-82e9-415f-92bc-2ce0f5b9b665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:24:52:8d:48:a7:c7:1f:0d:40:41:e8:10: 0b:c5:9a:e9:67:22:d2:d4:6b:32:e9:90:5c:be:1e: 01:5f:4a:6a:09:0e:2e:4d:c0:e6:0f:de:41:3b:ea: 64:cc:42:a8:b8:e5:52:55:e3:e4:26:42:1c:a5:97: 1a:8d:ec:35:cd:5d:eb:3c:3f:f2:b2:97:41:06:38: 80:11:84:86:e6:d5:ed:dd:d6:4f:da:8c:7f:b0:07: 99:8a:3e:ec:1a:fa:c3:56:61:8b:be:52:5f:af:34: a4:54:f9:c8:aa:da:2b:ea:7c:f5:46:3e:73:aa:ea: a8:5d:c0:0c:f0:e4:91:2d:3c:e4:57:fe:c7:11:4e: ce:10:82:b0:ff:33:e7:03:ce:9d:86:13:5c:4e:cd: 99:74:fd:6d:80:a2:cd:f3:fd:e8:f0:8c:cf:d7:74: 09:d8:5b:60:b0:df:be:fd:8b:26:8f:3b:0d:5c:db: 43:2b:13:b6:f0:26:66:51:a6:ec:c3:de:a0:ff:18: 27:6b:7a:8c:51:1d:c7:a7:c1:cb:25:63:f9:15:ef: a9:aa:fb:0e:15:7e:bb:38:a9:db:cb:62:8a:f8:f5: a6:61:ce:61:a6:35:7a:16:0e:c7:ff:bd:01:bc:f6: 9a:9f:d6:e7:7c:65:85:3a:81:9a:46:15:98:05:77: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:27:5D:DF:45:B8:E3:71:E8:02:DB:BA:3F:7D:EA:39:4A:26:86:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 104.37.29.0/24 104.143.94.0/24 104.194.206.0/23 104.194.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9e:fa:9c:28:69:eb:24:20:63:09:74:ea:7a:4c:34:dc:49: 8b:99:8b:b7:98:00:81:7a:75:f0:77:19:d6:bd:6e:65:bb:df: b2:5a:60:e4:d7:a7:f2:f7:75:12:89:f9:6f:08:c8:c7:a0:6e: 33:e4:5e:ff:24:7e:3d:e9:58:0a:1e:0b:cd:d6:78:c8:88:7e: 16:f3:0b:cf:c8:46:23:44:e2:2b:4e:dc:3b:77:14:e2:c4:c6: 60:04:4c:a1:e0:00:f6:df:52:21:ad:d0:74:ec:88:b7:d9:5e: 88:fa:62:cb:82:83:ad:52:d9:77:66:28:a3:a2:bc:1c:1f:df: 8d:9b:f2:45:9c:7a:03:73:6d:7f:03:0c:6a:dd:fe:84:0c:9e: d9:ba:2b:55:d3:81:7c:67:f1:68:f3:1d:c8:e3:8a:37:d0:c2: 03:42:04:a7:35:7c:a6:25:e5:0b:f3:e8:59:6a:7d:bf:1c:61: a4:59:e0:0c:8c:f4:5b:ad:a2:0b:db:91:e1:7b:dd:d6:c4:f6: f2:9f:b9:51:ec:2c:bc:d9:39:42:52:8a:33:8f:8c:50:6f:17: dd:4a:a5:8b:13:fa:33:2c:0b:62:90:17:d0:9f:2a:d4:7c:72: 14:3e:51:e3:af:d2:84:2d:12:b1:39:56:13:2a:51:5c:e2:5b: 28:49:1c:ff -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE0bGfIi400vRiNggoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MGExMWViZDQtODJlOS00MTVmLTkyYmMtMmNlMGY1YjliNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmMkUo1Ip8cfDUBB6BALxZrpZyLS1Gsy6ZBc vh4BX0pqCQ4uTcDmD95BO+pkzEKouOVSVePkJkIcpZcajew1zV3rPD/yspdBBjiA EYSG5tXt3dZP2ox/sAeZij7sGvrDVmGLvlJfrzSkVPnIqtor6nz1Rj5zquqoXcAM 8OSRLTzkV/7HEU7OEIKw/zPnA86dhhNcTs2ZdP1tgKLN8/3o8IzP13QJ2FtgsN++ /YsmjzsNXNtDKxO28CZmUabsw96g/xgna3qMUR3Hp8HLJWP5Fe+pqvsOFX67OKnb y2KK+PWmYc5hpjV6Fg7H/70BvPaan9bnfGWFOoGaRhWYBXcI0wIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFL8nXd9FuONx6ALbuj996jlKJoZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvMzgzNTI2OGEtYTI1ZS0z NWExLTkzNTctOTk0MjU3NmE2MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaCUdAwQA aI9eAwQBaMLOAwQAaMLbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIKe+pwoaeskIGMJdOp6TDTcSYuZi7eY AIF6dfB3Gda9bmW737JaYOTXp/L3dRKJ+W8IyMegbjPkXv8kfj3pWAoeC83WeMiI fhbzC8/IRiNE4itO3Dt3FOLExmAETKHgAPbfUiGt0HTsiLfZXoj6YsuCg61S2Xdm KKOivBwf342b8kWcegNzbX8DDGrd/oQMntm6K1XTgXxn8WjzHcjjijfQwgNCBKc1 fKYl5Qvz6Flqfb8cYaRZ4AyM9FutogvbkeF73dbE9vKfuVHsLLzZOUJSijOPjFBv F91KpYsT+jMsC2KQF9CfKtR8chQ+UeOv0oQtErE5VhMqUVziWyhJHP8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:07:07 2026 by rpki-client