$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa File: 1fb97d52-90b2-3f47-b40b-69c650bf9738.roa (raw, json) Hash identifier: /49b9hBrbrJjy2NeAMxkH1B1GY5GhvWjEScULwvP+Yg= Subject key identifier: E3:24:70:22:4B:6D:43:19:86:04:36:71:26:3C:02:AE:DF:DA:77:5A Certificate issuer: /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Certificate serial: 010D0C9F4328584CBF17293ACB793C0D7A13CF80 Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 9009 IP address blocks: 104.128.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:29:3a:cb:79:3c:0d:7a:13:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=230bb61a-35cb-4613-ad1c-6be42aa214bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:4b:1c:41:a4:a3:5a:22:8c:94:31:1f:2e: b2:23:af:78:9b:26:a1:9c:b0:ba:9a:ea:bb:c2:14: 31:12:65:e7:2e:a1:e3:1e:e9:2e:af:c5:59:ea:29: 3a:72:60:df:f4:8b:f9:84:0c:d3:ed:9b:51:43:89: 48:52:99:15:7a:e4:6f:1d:04:b1:15:e0:d7:06:3e: 9f:fa:af:4a:c5:7d:70:4e:0d:f3:5f:41:90:9d:d2: 63:d4:a6:bd:ea:b8:27:5f:57:30:c2:20:85:95:a2: e7:c1:5e:6b:78:80:fd:27:e3:f7:15:39:97:04:3c: 94:31:f1:b2:13:0e:83:7e:55:86:71:d7:e0:5a:a8: 7b:89:1f:8d:f6:fe:e3:ca:f2:07:ea:f6:ad:25:ce: ce:cd:50:0c:92:aa:af:f2:6d:7e:31:5d:39:38:52: 8d:e9:af:71:4d:e3:7c:b8:3f:a7:27:3a:87:f6:b8: e5:4f:f1:86:e4:f7:a6:ca:22:36:61:b4:54:74:f6: 23:43:e0:f1:1a:0a:a6:01:71:17:73:62:1c:5d:4f: eb:e6:9f:ca:df:17:32:b6:72:cc:b8:8e:d4:db:5c: 44:e7:6a:d3:01:22:56:8a:b2:60:40:2b:2d:cc:07: 90:58:aa:4a:47:03:e0:90:12:93:4d:22:cb:10:68: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:24:70:22:4B:6D:43:19:86:04:36:71:26:3C:02:AE:DF:DA:77:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/1fb97d52-90b2-3f47-b40b-69c650bf9738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl X509v3 Authority Key Identifier: keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer sbgp-ipAddrBlock: critical IPv4: 104.128.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b5:31:a6:ec:44:81:37:f0:e5:3c:8c:49:89:24:e8:49:26: cf:13:d7:41:8f:0f:04:67:d5:eb:6a:2a:40:fa:e4:91:3d:31: 53:9e:d4:4f:eb:d9:5b:8d:2e:30:2a:51:dc:aa:10:31:46:66: ed:96:bb:97:98:63:96:b0:a4:32:d6:94:b7:e8:f1:d7:b3:5f: c2:c7:4e:40:c8:37:03:f6:77:87:33:28:28:34:03:fe:4a:e7: 67:b6:6a:5f:0b:8b:57:e4:e0:b5:ac:4e:8e:a7:e7:95:7d:cb: cb:4b:70:b6:c4:68:a5:b1:23:46:0c:39:b3:03:60:16:52:6c: 20:c1:cd:5e:c5:96:60:6d:bf:c8:76:d6:c1:63:35:92:9a:ca: bd:71:66:ba:7a:d6:39:41:f5:b8:43:d6:da:a9:11:a7:7f:e6: be:f5:14:b9:e3:71:80:48:ec:06:56:22:de:87:1e:c7:d9:96: 63:85:8c:6a:0f:6b:b0:69:86:95:b4:55:18:3b:97:5c:d0:8e: 87:3a:3a:65:1c:1a:2a:d4:d5:6a:88:d6:0f:da:c3:97:1d:1d: 62:02:0c:26:f3:ce:4b:84:b7:41:b2:c5:8f:ff:16:70:b2:3e: 9a:59:92:b1:a6:a4:8a:18:0b:f7:d7:b0:82:b3:d8:e6:96:02: e9:78:c3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/Fyk6y3k8DXoTz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiOTg2MTYtZTRmOC00Yzc2LTg0MTAtY2I0YjZkOTNj ODVmMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk MjMwYmI2MWEtMzVjYi00NjEzLWFkMWMtNmJlNDJhYTIxNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w5LHEGko1oijJQxHy6yI694myahnLC6muq7 whQxEmXnLqHjHukur8VZ6ik6cmDf9Iv5hAzT7ZtRQ4lIUpkVeuRvHQSxFeDXBj6f +q9KxX1wTg3zX0GQndJj1Ka96rgnX1cwwiCFlaLnwV5reID9J+P3FTmXBDyUMfGy Ew6DflWGcdfgWqh7iR+N9v7jyvIH6vatJc7OzVAMkqqv8m1+MV05OFKN6a9xTeN8 uD+nJzqH9rjlT/GG5PemyiI2YbRUdPYjQ+DxGgqmAXEXc2IcXU/r5p/K3xcytnLM uI7U21xE52rTASJWirJgQCstzAeQWKpKRwPgkBKTTSLLEGj2AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMkcCJLbUMZhgQ2cSY8Aq7f2ndaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5 ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRiNmQ5M2M4NWYvMWZiOTdkNTItOTBiMi0z ZjQ3LWI0MGItNjljNjUwYmY5NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNiOTg2MTYtZTRmOC00Yzc2LTg0 MTAtY2I0YjZkOTNjODVmL2EzYjk4NjE2LWU0ZjgtNGM3Ni04NDEwLWNiNGI2ZDkz Yzg1Zi5jcmwwHwYDVR0jBBgwFoAUO+HB9azWjjCuxozloUMTYHSe2F4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2I5ODYxNi1lNGY4LTRjNzYtODQxMC1jYjRi NmQ5M2M4NWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIC/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW1MabsRIE38OU8jEmJJOhJJs8T10GPDwRn1etqKkD65JE9MVOe1E/r 2VuNLjAqUdyqEDFGZu2Wu5eYY5awpDLWlLfo8dezX8LHTkDINwP2d4czKCg0A/5K 52e2al8Li1fk4LWsTo6n55V9y8tLcLbEaKWxI0YMObMDYBZSbCDBzV7FlmBtv8h2 1sFjNZKayr1xZrp61jlB9bhD1tqpEad/5r71FLnjcYBI7AZWIt6HHsfZlmOFjGoP a7BphpW0VRg7l1zQjoc6OmUcGirU1WqI1g/aw5cdHWICDCbzzkuEt0GyxY//FnCy PppZkrGmpIoYC/fXsIKz2OaWAul4wzU= -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:06 2026 by rpki-client