$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa File: a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa (raw, json) Hash identifier: eDuXKejNjatQPATbYnFX4LtJ88Flq6e2oW5CgkJWvoA= Subject key identifier: 2B:68:38:4B:D3:D3:4A:E1:08:B8:58:CB:D0:C4:C5:37:D5:4C:80:DF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D65153DF60823882919A75A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 104.201.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3d:f6:08:23:88:29:19:a7:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=418e3bb0-a91b-44e8-9cc4-00250d5ab639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:10:b0:30:f0:f8:87:25:68:95:35:bb:f9: dc:a1:c7:2d:a6:84:ba:36:f7:01:f7:15:b9:56:26: b6:22:4e:58:62:0f:62:04:01:3c:b9:55:89:bf:4a: df:33:4f:3e:6e:fb:40:0a:55:25:7c:7a:52:ab:ce: 61:c6:14:51:78:a0:79:9d:52:ff:e2:36:31:c7:de: 4f:fb:7b:7e:20:47:fa:22:e8:7d:12:6d:ed:98:ed: a1:2b:79:4b:60:08:a9:6d:59:fa:40:23:27:24:98: 50:e2:f6:b2:97:e0:c0:5e:68:09:38:e0:d5:11:ff: 23:24:55:96:aa:1c:47:0a:26:b0:de:28:a8:ac:aa: 49:08:70:f8:90:69:64:de:9c:4d:a2:4f:66:4a:f3: ab:dc:6e:e1:fc:3d:c1:5d:de:3e:94:28:f3:6b:de: d2:c0:ea:3e:41:83:fc:c7:b7:83:7c:bf:bd:5f:7a: 31:91:20:64:34:0b:77:13:c4:1e:6a:64:f6:19:72: 8a:2e:ae:45:fe:02:c1:5f:c3:21:58:79:a2:53:36: 33:f5:5a:a1:32:10:ee:d9:d8:c4:81:42:56:6a:40: 12:a8:3b:02:7f:08:f7:57:04:75:9c:07:52:10:df: 3a:16:77:8d:94:e8:38:c5:2f:4a:bf:2b:86:24:44: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:68:38:4B:D3:D3:4A:E1:08:B8:58:CB:D0:C4:C5:37:D5:4C:80:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c0:61:b6:ab:6a:c5:1d:3c:46:47:8d:30:f7:86:b1:5c:5a: 89:45:86:0a:88:e7:53:e6:43:7c:a2:07:76:c0:01:f0:c0:1b: 08:f4:cd:30:87:8e:58:c4:7f:5e:38:73:d9:69:ab:86:6d:a0: c3:53:d6:ab:be:8f:0d:01:cb:ae:a5:13:c0:95:a6:9a:08:f2: ad:d8:74:c0:a4:e0:6f:ed:80:cf:65:e7:c1:48:f2:a5:de:a3: 84:bb:97:4f:3e:20:50:d8:fd:52:ad:87:9d:2d:8f:4d:a1:b6: 1a:01:03:ac:28:9a:de:ed:0d:c6:f5:fc:df:f8:96:3c:4e:c9: 56:c0:2d:74:53:30:17:8b:ca:98:f6:42:5e:89:3c:29:61:11: 95:06:05:f3:a5:40:5b:49:9b:6b:a3:16:57:6b:2a:2f:3c:73: 40:09:24:27:f7:54:90:02:ef:d9:45:49:b3:a7:3d:67:0e:a6: 8c:4e:a3:bf:68:05:ac:94:b9:95:b1:24:cb:60:bb:f8:a3:09: 63:73:54:1f:ca:9e:0f:91:87:5b:ee:17:77:f1:73:89:d2:18: 58:61:4f:96:73:8a:c1:83:ee:90:aa:51:21:90:bf:dc:93:ae: 5b:2a:23:d4:89:c1:8f:d6:a8:b5:61:bc:9e:4c:16:1d:ab:34: 3b:fc:46:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFT32CCOIKRmnWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NDE4ZTNiYjAtYTkxYi00NGU4LTljYzQtMDAyNTBkNWFiNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6gQsDDw+IclaJU1u/ncocctpoS6NvcB9xW5 Via2Ik5YYg9iBAE8uVWJv0rfM08+bvtAClUlfHpSq85hxhRReKB5nVL/4jYxx95P +3t+IEf6Iuh9Em3tmO2hK3lLYAipbVn6QCMnJJhQ4vayl+DAXmgJOODVEf8jJFWW qhxHCiaw3iiorKpJCHD4kGlk3pxNok9mSvOr3G7h/D3BXd4+lCjza97SwOo+QYP8 x7eDfL+9X3oxkSBkNAt3E8QeamT2GXKKLq5F/gLBX8MhWHmiUzYz9VqhMhDu2djE gUJWakASqDsCfwj3VwR1nAdSEN86FneNlOg4xS9KvyuGJET/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtoOEvT00rhCLhYy9DExTfVTIDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNlNmJiNzAtNjYxMS0z NTMwLTliOTgtMTMwZjJlYzZkM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrAYbarasUdPEZHjTD3hrFcWolFhgqI51PmQ3yiB3bAAfDAGwj0zTCH jljEf144c9lpq4ZtoMNT1qu+jw0By66lE8CVppoI8q3YdMCk4G/tgM9l58FI8qXe o4S7l08+IFDY/VKth50tj02hthoBA6womt7tDcb1/N/4ljxOyVbALXRTMBeLypj2 Ql6JPClhEZUGBfOlQFtJm2ujFldrKi88c0AJJCf3VJAC79lFSbOnPWcOpoxOo79o BayUuZWxJMtgu/ijCWNzVB/Kng+Rh1vuF3fxc4nSGFhhT5ZzisGD7pCqUSGQv9yT rlsqI9SJwY/WqLVhvJ5MFh2rNDv8Roc= -----END CERTIFICATE-----Generated at Fri Apr 17 12:23:13 2026 by rpki-client