$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa File: a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa (raw, json) Hash identifier: Mj+1iflrWU+crvoL6qRZ0EbmWevtLN+xX+WXyLDrCVE= Subject key identifier: 6D:BE:7B:B0:5A:E7:32:D2:EB:2C:22:2D:1F:C8:39:C8:8B:56:E4:2B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584D55BA4BBBB169764F14EE6500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 54004 IP address blocks: 104.37.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4b:bb:b1:69:76:4f:14:ee:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=81bace21-e4c0-4cde-9a72-5ce42c317a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f7:6d:95:60:aa:7f:d2:d5:cb:b4:ce:c9:3f: 2b:17:6d:ee:af:54:6b:88:f1:5c:cf:10:ea:6f:55: dd:a1:51:5e:73:8f:67:00:60:65:83:fa:9f:e2:7e: e6:3c:09:e0:2d:a8:7e:34:8f:db:8a:91:1b:f6:48: 9e:ff:43:76:e2:93:f1:ae:87:70:b1:f9:a6:06:30: 88:5f:7a:9a:0a:0c:3b:50:15:5d:6a:d9:bd:f0:db: 9b:49:b4:5b:5c:11:71:5f:67:ea:b6:3d:eb:58:98: 69:88:32:5a:7f:74:32:64:85:2f:fd:2a:f6:24:47: 16:a3:59:fc:69:68:fb:01:71:26:a0:88:e9:76:a5: 21:0c:9b:35:3d:6e:70:d2:87:0c:60:2c:4c:7b:d5: ab:5e:a1:3b:ee:46:ed:cd:96:f0:1e:b0:c4:4b:46: 23:58:98:00:29:b8:5b:b3:97:cd:03:3e:97:ff:57: 99:df:09:3c:c3:71:a8:ff:5d:ff:2f:1d:44:d8:8c: e4:65:13:81:bf:dc:a3:61:35:ae:44:0a:c5:fc:03: 65:2e:dd:20:d2:32:26:e1:e4:e0:1e:69:90:07:c1: e4:e1:9d:8f:45:56:c9:66:c2:e7:1c:41:bc:b4:30: bb:98:50:46:58:bd:b3:7a:04:78:89:26:d5:3a:22: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BE:7B:B0:5A:E7:32:D2:EB:2C:22:2D:1F:C8:39:C8:8B:56:E4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a2a39460-990c-3c6f-ad15-9ca7b2d11030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ab:49:e5:e3:2f:ba:03:ef:19:8f:6a:c7:33:94:58:b3:02: 9e:6a:63:6a:53:ec:7e:e5:6e:61:da:b5:af:e8:cb:8f:92:84: d6:08:a5:65:5d:13:72:f5:8b:ac:ce:bd:a5:10:aa:05:1e:7c: 49:38:df:8d:ab:b0:1f:23:cd:43:39:ca:44:85:9e:42:c7:a3: 24:df:d8:8c:9a:2a:db:a8:c2:9c:b4:14:48:90:08:ec:ca:c4: 59:30:ea:dd:e0:ed:f7:de:5d:4b:83:a9:0a:83:87:b0:b6:09: 12:fe:7b:ba:14:2f:f4:e2:f2:68:00:52:03:ee:66:60:4f:1a: 7c:db:24:1d:f4:28:18:0c:1a:d8:3d:a6:fd:24:89:8a:bf:5e: b8:aa:14:e9:66:4b:0e:6e:89:33:89:ce:5c:ac:31:d4:e1:cc: 97:49:69:21:96:51:9d:4d:ac:d9:df:22:1d:77:f9:a9:08:18: 3c:58:d4:63:06:4e:be:ae:3f:d4:4c:8f:a0:b5:0a:cd:8d:c7: 6a:6e:06:86:07:34:e4:2e:17:b8:4f:1b:4d:f5:8a:54:ab:a9: 68:ce:a0:4a:cd:77:ac:72:23:fc:7d:d9:80:93:1f:76:2d:8c: 57:90:42:f6:39:62:b3:1d:9c:8a:5c:9b:aa:46:7c:28:b3:7c: f3:ba:32:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuku7sWl2TxTuZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODFiYWNlMjEtZTRjMC00Y2RlLTlhNzItNWNlNDJjMzE3YTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfdtlWCqf9LVy7TOyT8rF23ur1RriPFczxDq b1XdoVFec49nAGBlg/qf4n7mPAngLah+NI/bipEb9kie/0N24pPxrodwsfmmBjCI X3qaCgw7UBVdatm98NubSbRbXBFxX2fqtj3rWJhpiDJaf3QyZIUv/Sr2JEcWo1n8 aWj7AXEmoIjpdqUhDJs1PW5w0ocMYCxMe9WrXqE77kbtzZbwHrDES0YjWJgAKbhb s5fNAz6X/1eZ3wk8w3Go/13/Lx1E2IzkZROBv9yjYTWuRArF/ANlLt0g0jIm4eTg HmmQB8Hk4Z2PRVbJZsLnHEG8tDC7mFBGWL2zegR4iSbVOiIKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2+e7Ba5zLS6ywiLR/IOciLVuQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTJhMzk0NjAtOTkwYy0z YzZmLWFkMTUtOWNhN2IyZDExMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2rSeXjL7oD7xmPasczlFizAp5qY2pT7H7lbmHata/oy4+ShNYIpWVd E3L1i6zOvaUQqgUefEk4342rsB8jzUM5ykSFnkLHoyTf2IyaKtuowpy0FEiQCOzK xFkw6t3g7ffeXUuDqQqDh7C2CRL+e7oUL/Ti8mgAUgPuZmBPGnzbJB30KBgMGtg9 pv0kiYq/XriqFOlmSw5uiTOJzlysMdThzJdJaSGWUZ1NrNnfIh13+akIGDxY1GMG Tr6uP9RMj6C1Cs2Nx2puBoYHNOQuF7hPG031ilSrqWjOoErNd6xyI/x92YCTH3Yt jFeQQvY5YrMdnIpcm6pGfCizfPO6Mh0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:42:32 2026 by rpki-client