$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/904cd764-8a25-3dbf-811e-47b34115b923.roa File: 904cd764-8a25-3dbf-811e-47b34115b923.roa (raw, json) Hash identifier: fIiyg6GUwzkz8N9LRHxCap9BdbLbKB8lReIAsh7OyK4= Subject key identifier: 81:DF:AB:6B:4A:36:76:CC:F7:82:F4:50:CE:C0:70:D0:3F:1D:E9:D5 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584D143D391F7E26EF55057AFD00 Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/904cd764-8a25-3dbf-811e-47b34115b923.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 393499 IP address blocks: 104.37.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:39:1f:7e:26:ef:55:05:7a:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=266c3c28-4ffe-4cfa-97de-6324eecf2815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:3b:65:5b:42:91:ce:97:8b:2a:92:82:94: ab:3c:dd:e9:0f:27:e1:ef:f8:02:27:e8:51:c0:7d: 6b:a4:7c:d8:53:9a:58:4a:78:7d:bd:7e:a4:d5:91: d6:a4:f9:1e:f8:a0:d8:8a:b8:e5:cc:b4:6b:fa:5c: f7:7d:d7:2f:e2:12:a6:a3:49:1c:6f:ad:24:9e:4b: 74:5c:bd:2e:cd:9a:31:86:f5:05:29:56:48:d6:13: 07:73:88:2c:a0:05:e0:35:6c:95:88:30:ca:4d:11: 69:8e:de:8e:94:b9:29:4d:14:69:9d:fb:cd:4b:e2: 69:c6:d9:cc:f6:43:c0:4f:aa:2f:11:27:65:05:27: 32:30:79:ac:2a:b5:cd:03:61:04:47:8d:75:11:d8: cd:33:b2:b6:a8:d7:52:4e:17:3e:d3:68:00:92:f4: 8d:e7:6c:44:29:94:f1:43:e0:f2:46:1d:3c:09:72: bf:02:91:86:e6:51:a1:c7:58:8f:40:15:ff:46:96: ca:b9:ee:12:81:26:1b:87:72:f5:df:e1:7f:28:5d: f5:3e:3d:81:0f:46:95:b5:cf:62:cf:3d:87:95:66: 91:b5:16:e2:2e:ed:c1:f4:e5:86:61:16:2f:d9:d2: bd:89:92:2a:06:b8:4d:50:ca:9e:3f:8f:7f:c3:f2: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DF:AB:6B:4A:36:76:CC:F7:82:F4:50:CE:C0:70:D0:3F:1D:E9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/904cd764-8a25-3dbf-811e-47b34115b923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 104.37.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:12:66:68:56:9b:2d:20:8a:6f:08:9b:62:61:0e:bb:9b:02: 96:92:b2:6c:1d:de:ec:99:7f:fc:4a:f9:83:ec:46:04:a4:3b: ec:9e:c2:46:65:d6:f9:26:13:d8:47:e9:18:cf:39:18:0b:c6: 3d:79:fe:71:e5:dd:c0:ff:3a:6f:a3:24:20:e8:4b:ce:17:89: af:1b:7b:04:a5:5a:c2:6f:75:6b:02:69:a9:48:c6:dd:51:9c: 70:47:04:a6:f2:c3:cd:1a:ca:23:ac:fc:b6:22:14:15:b0:6e: 5c:6d:5a:b0:4d:62:ab:ac:b1:23:eb:30:bd:bb:27:97:12:51: b6:f5:a1:12:be:de:a7:51:01:5a:d3:19:ff:f2:ae:97:0b:b7: fc:33:cb:91:70:f8:64:a2:e9:de:24:64:74:c7:9f:06:d7:fb: 37:a8:38:28:74:eb:48:34:89:5d:45:97:4b:7b:a4:f1:4c:6d: 14:63:d1:f1:3f:0b:bc:f1:37:95:ef:b7:2b:09:84:e2:2b:b4: d5:df:71:86:04:26:3d:82:d9:fa:d9:90:e4:c1:8e:58:0a:7d: f7:ca:6f:a2:19:0d:13:55:61:7a:4e:01:c6:3e:9a:d4:80:44: c3:29:43:f0:ab:c6:8f:f8:77:b9:f0:df:fa:04:dc:07:4b:72: a9:dd:9a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTkffibvVQV6/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MjY2YzNjMjgtNGZmZS00Y2ZhLTk3ZGUtNjMyNGVlY2YyODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vI7ZVtCkc6XiyqSgpSrPN3pDyfh7/gCJ+hR wH1rpHzYU5pYSnh9vX6k1ZHWpPke+KDYirjlzLRr+lz3fdcv4hKmo0kcb60knkt0 XL0uzZoxhvUFKVZI1hMHc4gsoAXgNWyViDDKTRFpjt6OlLkpTRRpnfvNS+JpxtnM 9kPAT6ovESdlBScyMHmsKrXNA2EER411EdjNM7K2qNdSThc+02gAkvSN52xEKZTx Q+DyRh08CXK/ApGG5lGhx1iPQBX/RpbKue4SgSYbh3L13+F/KF31Pj2BD0aVtc9i zz2HlWaRtRbiLu3B9OWGYRYv2dK9iZIqBrhNUMqeP49/w/KkTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHfq2tKNnbM94L0UM7AcNA/HenVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvOTA0Y2Q3NjQtOGEyNS0z ZGJmLTgxMWUtNDdiMzQxMTViOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8SZmhWmy0gim8Im2JhDrubApaSsmwd3uyZf/xK+YPsRgSkO+yewkZl 1vkmE9hH6RjPORgLxj15/nHl3cD/Om+jJCDoS84Xia8bewSlWsJvdWsCaalIxt1R nHBHBKbyw80ayiOs/LYiFBWwblxtWrBNYqussSPrML27J5cSUbb1oRK+3qdRAVrT Gf/yrpcLt/wzy5Fw+GSi6d4kZHTHnwbX+zeoOCh060g0iV1Fl0t7pPFMbRRj0fE/ C7zxN5XvtysJhOIrtNXfcYYEJj2C2frZkOTBjlgKfffKb6IZDRNVYXpOAcY+mtSA RMMpQ/Crxo/4d7nw3/oE3AdLcqndmlU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:25 2026 by rpki-client