$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa File: 90e30d69-d192-3d3b-af69-a1564717f280.roa (raw, json) Hash identifier: ej2zfQGYpTLXyy8SV39CWtTcS68p29TJpiQ2KIFiRjY= Subject key identifier: F3:CA:DD:45:09:9A:45:C5:66:33:2D:59:16:41:9E:7A:DF:0C:C4:CA Certificate issuer: /CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Certificate serial: 010D0C9F4328584D19B4F1647521C11C9F94F1A0 Authority key identifier: 7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 30580 IP address blocks: 104.249.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:f1:64:75:21:c1:1c:9f:94:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=bb9cf096-b8f0-4dfe-a362-54e5983fe550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:ce:65:13:8d:09:94:ca:9a:a4:3d:4c:1f: d1:30:80:f8:72:be:f8:21:26:71:4f:1a:46:5a:82: b5:63:ad:1c:83:64:a6:72:b4:7f:9b:39:2f:62:67: a0:16:2d:9a:b4:8d:44:12:b9:f3:06:aa:d1:39:4e: f2:8a:0f:62:76:db:5a:ce:c6:1f:dc:8b:fd:5e:7b: f0:48:4f:1e:46:84:8e:24:66:e5:7b:4c:93:ce:06: 6b:32:4c:67:a7:f1:4a:75:7c:fa:3f:0f:ee:c4:32: c3:3b:c4:75:8e:8a:4e:a5:e9:a2:92:b6:d9:c8:56: 94:3b:71:b5:f8:d1:07:47:7c:31:4a:45:3b:b3:58: 5e:d3:60:64:d0:cf:3d:fe:cc:75:52:b3:2d:40:78: 06:e9:35:bc:9e:9d:72:1d:7a:ab:75:14:cd:1b:6c: 52:73:55:d0:14:e8:3e:0b:1f:c7:7c:76:39:b2:f8: 23:d7:64:77:bd:a8:6e:bc:7d:f8:e4:3e:2e:a5:45: 92:ae:1a:a0:cc:30:db:25:e4:b6:e7:1a:c6:bc:76: c2:53:a1:64:76:b6:a3:33:88:cb:ff:f8:5c:50:44: 20:3a:1c:39:fd:9f:9a:a9:c7:0c:17:31:15:fb:a6: f6:bc:6b:e5:24:d1:67:0d:ce:1e:2d:14:85:83:76: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CA:DD:45:09:9A:45:C5:66:33:2D:59:16:41:9E:7A:DF:0C:C4:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl X509v3 Authority Key Identifier: keyid:7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer sbgp-ipAddrBlock: critical IPv4: 104.249.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:45:31:a1:ac:ba:58:c7:61:85:a4:9a:95:52:56:db:8e:86: ec:13:0e:ea:f9:45:a1:a3:33:2a:00:7d:42:bd:79:8e:e7:f8: 91:38:52:e9:b5:92:33:ce:ac:07:9f:f8:87:cf:29:ba:2b:aa: af:53:cf:98:5e:8e:f7:3f:86:e6:28:ab:e7:8f:f3:56:3d:94: 98:b6:8b:e8:85:29:21:03:81:3f:27:7c:94:f5:72:6d:83:01: cc:ca:87:01:62:02:da:58:08:b4:0c:4d:93:71:88:74:fb:dc: f0:8e:d5:7a:2b:9a:9e:85:92:0f:51:8a:19:6b:56:bc:95:55: 0a:3f:b6:c2:c0:84:30:ad:e6:0d:00:6b:3e:a1:21:94:d8:2d: 63:d9:63:f1:b0:fe:3f:80:47:6a:0e:21:5f:84:e5:74:b1:3e: d7:25:f8:ea:84:a7:c8:0f:2c:47:1f:29:5c:66:68:56:b2:9d: 4e:47:72:3a:a0:1e:41:5d:92:4b:50:62:da:96:fd:95:8b:ae: 5b:aa:1a:22:3c:61:c0:c8:b4:4f:a7:4b:98:84:88:e5:d2:01: a3:51:0f:8d:b8:ce:29:d9:fa:d7:0b:06:bd:75:ad:0d:0d:9c: f8:01:06:13:9a:3b:c8:a9:28:2e:17:3d:7a:0f:51:37:3f:09: d0:68:92:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtPFkdSHBHJ+U8aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4MWVmNjMtYjAzYy00OGFmLTgxOTEtZTEzY2U4Y2I3 OGMzMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YmI5Y2YwOTYtYjhmMC00ZGZlLWEzNjItNTRlNTk4M2ZlNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vOZRONCZTKmqQ9TB/RMID4cr74ISZxTxpG WoK1Y60cg2SmcrR/mzkvYmegFi2atI1EErnzBqrROU7yig9idttazsYf3Iv9Xnvw SE8eRoSOJGble0yTzgZrMkxnp/FKdXz6Pw/uxDLDO8R1jopOpemikrbZyFaUO3G1 +NEHR3wxSkU7s1he02Bk0M89/sx1UrMtQHgG6TW8np1yHXqrdRTNG2xSc1XQFOg+ Cx/HfHY5svgj12R3vahuvH345D4upUWSrhqgzDDbJeS25xrGvHbCU6FkdrajM4jL //hcUEQgOhw5/Z+aqccMFzEV+6b2vGvlJNFnDc4eLRSFg3YP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPK3UUJmkXFZjMtWRZBnnrfDMTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgx ZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNjZThjYjc4YzMvOTBlMzBkNjktZDE5Mi0z ZDNiLWFmNjktYTE1NjQ3MTdmMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzY4MWVmNjMtYjAzYy00OGFmLTgx OTEtZTEzY2U4Y2I3OGMzLzM2ODFlZjYzLWIwM2MtNDhhZi04MTkxLWUxM2NlOGNi NzhjMy5jcmwwHwYDVR0jBBgwFoAUe7h0rJRDiVDZIB47vTbmgZfRPg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgxZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNj ZThjYjc4YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJFMaGsuljHYYWkmpVSVtuOhuwTDur5RaGjMyoAfUK9eY7n+JE4Uum1 kjPOrAef+IfPKborqq9Tz5hejvc/huYoq+eP81Y9lJi2i+iFKSEDgT8nfJT1cm2D AczKhwFiAtpYCLQMTZNxiHT73PCO1Xormp6Fkg9RihlrVryVVQo/tsLAhDCt5g0A az6hIZTYLWPZY/Gw/j+AR2oOIV+E5XSxPtcl+OqEp8gPLEcfKVxmaFaynU5Hcjqg HkFdkktQYtqW/ZWLrluqGiI8YcDItE+nS5iEiOXSAaNRD424zinZ+tcLBr11rQ0N nPgBBhOaO8ipKC4XPXoPUTc/CdBokk8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:18 2026 by rpki-client