$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa File: dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa (raw, json) Hash identifier: G8I/caTov57dFVh+ZPhsb6bXq27CF1XblaWnoDfJTmE= Subject key identifier: 04:56:35:D0:68:64:DE:18:85:29:0E:92:8B:F6:E8:C6:F4:7C:33:21 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584D492A6790D978088E5D2CD500 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 13807 IP address blocks: 104.37.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:67:90:d9:78:08:8e:5d:2c:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=aaaacd85-2456-4b56-ae3e-447c2ffd60ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:c9:d0:bf:42:bd:9c:fd:28:d3:40:dc:1d: 2c:6a:ce:21:bf:eb:aa:b8:1d:ae:77:5d:32:4d:ea: 7f:e7:d5:24:71:93:e1:60:c1:f3:c9:75:61:29:ea: e0:86:0b:be:67:9d:82:21:d9:ae:5d:f6:80:13:16: 63:3a:8a:9f:c8:a6:59:84:8d:f0:5e:a1:de:7b:e0: 37:74:ac:fc:94:04:e8:33:3d:41:21:dc:a1:e9:32: f6:77:34:e9:89:41:12:d7:8b:f4:bd:16:bb:43:41: 16:88:b3:ed:a1:50:43:df:5d:b5:b3:a4:05:8a:99: 76:52:97:1f:b4:85:5e:6d:d8:8c:a3:bb:ae:cd:03: 4f:e4:6f:09:fe:bf:29:15:f5:c1:ac:f1:e6:60:a4: b8:9e:21:93:a5:ea:50:ea:6f:22:8a:7a:20:cb:b5: ec:48:f7:9f:dd:d3:20:0f:af:1b:83:84:2f:c0:57: cd:8a:a8:1c:a5:9c:99:3b:e8:f2:85:fc:79:ef:a4: 6c:4e:5c:9b:f1:fa:a6:77:7e:56:4f:aa:95:51:c1: 5e:1f:0d:2b:ae:cd:ce:06:61:e1:a9:e3:13:8b:c9: 36:13:d8:7e:0b:29:4d:36:9a:10:07:00:b6:7b:c1: 59:f4:6f:25:d2:08:ce:79:90:65:03:4e:c0:1f:74: e5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:56:35:D0:68:64:DE:18:85:29:0E:92:8B:F6:E8:C6:F4:7C:33:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/dc207e8d-b19a-3f55-a68f-71e0189c5d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 104.37.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d6:e7:8e:53:39:22:f2:df:d8:e7:72:72:09:51:d7:d2:09: 85:17:99:8d:7c:b7:cb:e8:dd:04:7f:2f:66:4e:9d:c0:d3:d1: cd:46:15:da:ce:c7:3d:af:d5:1c:35:45:ac:16:57:26:21:d7: 3c:89:49:4f:05:30:6d:0a:55:c7:00:5e:f9:b2:64:29:b1:25: 81:34:b6:34:6b:a2:36:b4:a2:74:50:70:91:b3:c2:fd:58:2d: fb:c3:a7:e6:08:7c:a7:db:c9:3d:d9:c0:3d:25:be:97:01:34: 53:00:bf:58:27:e2:49:89:d8:3a:23:f2:92:a3:58:47:24:b4: ef:e9:54:28:31:a8:55:ec:c0:45:b5:3b:b0:6e:27:e1:fc:36: cf:28:3c:c5:d7:28:35:84:4a:b8:f5:04:5f:a6:36:a9:c5:68: 12:58:95:ad:90:3b:b6:c1:27:be:a4:26:4c:88:c0:97:d4:83: 24:e9:68:7a:f5:1d:7e:b2:69:3e:33:29:82:90:2d:c3:ca:cc: bb:50:1d:40:3f:22:53:22:80:eb:b1:df:1a:b1:c7:18:e3:0f: 17:a5:7a:9d:72:4d:62:d2:3f:79:58:fb:ba:fe:27:50:63:78: f4:5f:61:60:ed:5c:5a:dd:92:ef:36:c3:41:d6:07:74:e4:46: dc:b9:0a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKmeQ2XgIjl0s1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YWFhYWNkODUtMjQ1Ni00YjU2LWFlM2UtNDQ3YzJmZmQ2MGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZTJ0L9CvZz9KNNA3B0sas4hv+uquB2ud10y Tep/59UkcZPhYMHzyXVhKerghgu+Z52CIdmuXfaAExZjOoqfyKZZhI3wXqHee+A3 dKz8lAToMz1BIdyh6TL2dzTpiUES14v0vRa7Q0EWiLPtoVBD3121s6QFipl2Upcf tIVebdiMo7uuzQNP5G8J/r8pFfXBrPHmYKS4niGTpepQ6m8iinogy7XsSPef3dMg D68bg4QvwFfNiqgcpZyZO+jyhfx576RsTlyb8fqmd35WT6qVUcFeHw0rrs3OBmHh qeMTi8k2E9h+CylNNpoQBwC2e8FZ9G8l0gjOeZBlA07AH3TluQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARWNdBoZN4YhSkOkov26Mb0fDMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvZGMyMDdlOGQtYjE5YS0z ZjU1LWE2OGYtNzFlMDE4OWM1ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLW545TOSLy39jncnIJUdfSCYUXmY18t8vo3QR/L2ZOncDT0c1GFdrO xz2v1Rw1RawWVyYh1zyJSU8FMG0KVccAXvmyZCmxJYE0tjRroja0onRQcJGzwv1Y LfvDp+YIfKfbyT3ZwD0lvpcBNFMAv1gn4kmJ2Doj8pKjWEcktO/pVCgxqFXswEW1 O7BuJ+H8Ns8oPMXXKDWESrj1BF+mNqnFaBJYla2QO7bBJ76kJkyIwJfUgyTpaHr1 HX6yaT4zKYKQLcPKzLtQHUA/IlMigOux3xqxxxjjDxelep1yTWLSP3lY+7r+J1Bj ePRfYWDtXFrdku82w0HWB3TkRty5Cuo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:38 2026 by rpki-client