$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa File: 3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa (raw, json) Hash identifier: r1yWaJuWtzDCsF2RJvHkSE0RqEACVr4attyPlKxZzn8= Subject key identifier: B9:6A:98:D0:5C:68:88:43:30:DC:04:49:7F:83:0A:E5:9F:F5:63:03 Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584D49B848FD199F032238400D00 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa Signing time: Wed 25 Mar 2026 17:46:54 +0000 ROA not before: Wed 25 Mar 2026 17:46:54 +0000 ROA not after: Tue 23 Jun 2026 17:46:54 +0000 asID: 54600 IP address blocks: 104.219.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:b8:48:fd:19:9f:03:22:38:40:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Mar 25 17:46:54 2026 GMT Not After : Jun 23 17:46:54 2026 GMT Subject: CN=ac268ad8-683f-4bda-9256-43a3b5f7dcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2c:ff:db:f9:76:11:bf:60:6c:07:dc:b0:ed: 34:1a:c8:04:21:f8:70:21:11:93:70:58:a9:9a:a9: 49:de:56:ec:16:9a:e6:51:93:27:87:80:fe:4a:cf: 97:81:4b:18:e4:fe:13:c4:c6:a8:a3:b6:b1:46:b4: 64:a1:6a:19:50:70:8f:0f:5c:f6:ec:01:b1:44:08: 17:18:b2:99:14:8c:a4:d5:1c:93:f9:ff:fa:6c:3e: 6e:e8:23:97:8d:19:f3:af:f8:1f:7f:13:cc:51:65: 44:d6:5e:0b:d3:b7:e2:33:95:52:f3:47:6d:0e:a6: 38:2b:08:44:8b:aa:b9:6c:ab:17:f3:f8:e9:96:6e: 88:8d:1d:62:f2:44:60:c6:d0:f5:00:69:52:97:eb: 5b:70:db:7c:d7:ba:c0:96:b3:2a:82:de:e5:e5:a5: c3:6a:1b:9f:5b:2e:4b:93:6c:25:39:30:e6:44:96: 30:bd:12:77:fe:92:17:f9:41:10:20:d3:22:52:a5: fb:39:69:ed:49:a8:99:3e:b8:3b:f1:17:26:21:85: 39:0f:e1:7c:cb:35:f2:c1:50:40:1c:09:32:e5:2e: eb:09:d4:55:3d:85:60:5b:9b:34:29:35:4d:a8:06: 60:00:1d:0d:41:f0:cf:6e:a8:4d:55:44:61:05:b8: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6A:98:D0:5C:68:88:43:30:DC:04:49:7F:83:0A:E5:9F:F5:63:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/3549af14-2515-3ca1-a2d6-1f6f10c6c6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:16:9a:20:e0:c2:6b:19:6c:62:e2:f5:6c:fc:66:f2:ea:17: e0:c1:65:16:e5:13:56:90:c8:b0:89:18:b9:c5:bc:06:a6:5c: c6:25:86:c5:7d:80:a7:b6:6e:cb:30:ba:d2:e0:de:9c:37:e0: b0:08:57:ce:e3:24:2a:07:e0:29:b7:e7:50:22:d7:20:7e:95: cb:b9:89:a0:2d:46:7c:54:28:a0:f9:8d:53:3b:bf:89:aa:11: 0c:c3:5a:84:5f:9d:3f:d9:cb:cd:a1:6d:7f:bf:16:c9:31:1e: 53:81:62:7b:a3:2d:8f:1e:8c:84:e6:2a:01:d4:48:65:2c:7c: 86:82:31:96:fb:28:ba:42:20:7e:72:b6:da:90:f3:1e:2b:48: d6:dd:c5:4a:e3:97:e6:b9:88:0f:40:28:e0:56:67:73:de:55: 77:98:44:50:4f:be:76:12:a0:71:e1:7e:cb:27:7a:35:12:9c: 42:30:c4:65:db:63:66:cb:e3:23:af:c3:5e:a6:1c:1e:62:09: 14:ad:4e:2c:93:6d:1f:38:57:71:18:25:96:ff:ba:c6:f3:d5: dd:86:2a:69:70:15:2f:e3:23:f6:57:a6:3d:56:17:b8:2d:95: e5:4e:61:7a:70:0a:a0:09:76:21:4f:13:5c:7b:a1:98:39:8f: 2d:bf:6c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JuEj9GZ8DIjhADQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI2MDMyNTE3NDY1NFoXDTI2MDYyMzE3NDY1NFowLzEtMCsGA1UEAxMk YWMyNjhhZDgtNjgzZi00YmRhLTkyNTYtNDNhM2I1ZjdkY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyz/2/l2Eb9gbAfcsO00GsgEIfhwIRGTcFip mqlJ3lbsFprmUZMnh4D+Ss+XgUsY5P4TxMaoo7axRrRkoWoZUHCPD1z27AGxRAgX GLKZFIyk1RyT+f/6bD5u6COXjRnzr/gffxPMUWVE1l4L07fiM5VS80dtDqY4KwhE i6q5bKsX8/jplm6IjR1i8kRgxtD1AGlSl+tbcNt817rAlrMqgt7l5aXDahufWy5L k2wlOTDmRJYwvRJ3/pIX+UEQINMiUqX7OWntSaiZPrg78RcmIYU5D+F8yzXywVBA HAky5S7rCdRVPYVgW5s0KTVNqAZgAB0NQfDPbqhNVURhBbisVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlqmNBcaIhDMNwESX+DCuWf9WMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvMzU0OWFmMTQtMjUxNS0z Y2ExLWEyZDYtMWY2ZjEwYzZjNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNvTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8WmiDgwmsZbGLi9Wz8ZvLqF+DBZRblE1aQyLCJGLnFvAamXMYlhsV9 gKe2bsswutLg3pw34LAIV87jJCoH4Cm351Ai1yB+lcu5iaAtRnxUKKD5jVM7v4mq EQzDWoRfnT/Zy82hbX+/FskxHlOBYnujLY8ejITmKgHUSGUsfIaCMZb7KLpCIH5y ttqQ8x4rSNbdxUrjl+a5iA9AKOBWZ3PeVXeYRFBPvnYSoHHhfssnejUSnEIwxGXb Y2bL4yOvw16mHB5iCRStTiyTbR84V3EYJZb/usbz1d2GKmlwFS/jI/ZXpj1WF7gt leVOYXpwCqAJdiFPE1x7oZg5jy2/bF8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:06:55 2026 by rpki-client