$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/bb955220-0f5d-30f8-ac95-539c7effc165.roa File: bb955220-0f5d-30f8-ac95-539c7effc165.roa (raw, json) Hash identifier: g4esfwh6wDh4isF+eV3bzt6QCGYhQ3NDqJtmcTzibJ8= Subject key identifier: 50:95:D9:7D:8B:E9:E8:42:6C:95:3A:41:F8:42:F4:B4:E6:1E:9F:E5 Certificate issuer: /CN=9cc872db-b713-439a-b9ef-c97cff0cbfae Certificate serial: 010D0C9F4328584D4D5A5A70FA3B2E1BC3363680 Authority key identifier: 37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/bb955220-0f5d-30f8-ac95-539c7effc165.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 40555 IP address blocks: 204.174.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5a:70:fa:3b:2e:1b:c3:36:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc872db-b713-439a-b9ef-c97cff0cbfae Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=da828307-afde-4291-83ed-7fddf64b1231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:c6:0b:6c:f1:2d:42:ed:0b:9e:6d:b1:ad: bf:93:ef:f1:bd:33:6c:f2:89:ef:28:c1:ec:46:54: 0f:4e:34:e1:e4:86:40:b4:38:41:91:cc:f9:ae:58: fc:20:73:8b:d1:1d:0d:84:26:e9:25:af:d0:fd:4d: f4:bb:1a:53:8e:6e:6c:69:de:5c:f9:53:5c:3e:de: e1:ce:81:ef:5c:1c:5b:47:cb:67:30:bc:4b:68:6e: 65:df:ae:98:ac:cf:00:f1:93:3a:30:44:41:cb:17: 7b:36:a1:7c:59:fe:fb:fe:71:bd:de:6e:25:10:63: b5:4f:ee:a3:03:a6:1b:10:68:48:b1:3b:83:12:be: 5a:a0:1d:6c:84:be:a5:15:f4:80:2c:cf:c8:3d:54: 3b:49:3d:41:31:c8:6a:38:92:a7:28:b8:f1:cd:d7: b7:27:3f:13:89:57:b6:8c:48:1c:5c:72:83:e4:5a: 1e:e8:5a:27:d2:4f:33:ab:46:d4:c6:b6:58:5d:b4: fb:11:0e:cf:b1:9b:60:db:00:68:08:9e:3e:b5:0f: 70:cc:0e:c0:e4:35:9a:80:4d:ad:19:96:3a:6b:27: 77:be:58:1c:41:c7:31:28:aa:e7:83:93:28:84:6b: f1:38:ba:02:da:14:f0:5a:09:b2:c4:f9:69:35:d8: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:95:D9:7D:8B:E9:E8:42:6C:95:3A:41:F8:42:F4:B4:E6:1E:9F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/bb955220-0f5d-30f8-ac95-539c7effc165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae/9cc872db-b713-439a-b9ef-c97cff0cbfae.crl X509v3 Authority Key Identifier: keyid:37:73:36:12:7A:51:BA:E7:AD:9A:14:65:A2:74:03:F7:3F:96:C2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc872db-b713-439a-b9ef-c97cff0cbfae.cer sbgp-ipAddrBlock: critical IPv4: 204.174.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2c:e1:b1:7d:ab:d1:4b:bb:90:c6:a7:1e:92:cd:b7:de:70: d7:fe:44:d6:12:5e:74:c9:6e:b3:c0:cc:14:06:85:6b:50:8f: 11:e1:9a:d5:9f:23:2a:f4:e7:04:15:8c:3f:f0:24:73:df:6f: f7:4a:09:72:55:41:bc:6c:6e:af:ea:30:06:96:f7:7d:eb:85: ef:2e:42:2a:13:5e:10:65:a8:38:fe:ee:fa:51:9f:52:77:4d: 4f:2f:05:80:73:01:3f:21:d3:38:e5:24:fd:67:53:df:09:0b: 5f:a6:1b:ba:03:b8:72:ed:ea:9a:00:6a:55:5b:54:b3:a1:2f: b8:75:06:d4:6b:a9:ac:2b:f5:8e:cf:8b:e4:cb:7e:f9:76:66: 5a:85:a4:cd:fc:88:fc:9d:01:6f:ad:b9:f9:ad:4e:51:5c:84: 38:93:30:bc:41:4a:bf:a5:97:0c:5b:4f:d7:1a:28:5f:91:2f: 25:b2:31:f3:1c:ea:bd:81:a9:69:e2:e9:4e:ab:85:00:ac:ca: 4e:23:e3:e5:e4:6b:35:cf:90:9c:97:85:c6:11:01:98:b8:19: 11:73:42:e9:d5:31:66:1d:1f:f4:37:e9:73:fd:40:0b:52:1a: a4:db:be:e7:82:14:d7:20:85:02:cc:c0:37:49:46:db:78:d0: b0:0e:a7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlpw+jsuG8M2NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNjODcyZGItYjcxMy00MzlhLWI5ZWYtYzk3Y2ZmMGNi ZmFlMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZGE4MjgzMDctYWZkZS00MjkxLTgzZWQtN2ZkZGY2NGIxMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqXGC2zxLULtC55tsa2/k+/xvTNs8onvKMHs RlQPTjTh5IZAtDhBkcz5rlj8IHOL0R0NhCbpJa/Q/U30uxpTjm5sad5c+VNcPt7h zoHvXBxbR8tnMLxLaG5l366YrM8A8ZM6MERByxd7NqF8Wf77/nG93m4lEGO1T+6j A6YbEGhIsTuDEr5aoB1shL6lFfSALM/IPVQ7ST1BMchqOJKnKLjxzde3Jz8TiVe2 jEgcXHKD5Foe6Fon0k8zq0bUxrZYXbT7EQ7PsZtg2wBoCJ4+tQ9wzA7A5DWagE2t GZY6ayd3vlgcQccxKKrng5MohGvxOLoC2hTwWgmyxPlpNdjybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCV2X2L6ehCbJU6QfhC9LTmHp/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M4 NzJkYi1iNzEzLTQzOWEtYjllZi1jOTdjZmYwY2JmYWUvYmI5NTUyMjAtMGY1ZC0z MGY4LWFjOTUtNTM5YzdlZmZjMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWNjODcyZGItYjcxMy00MzlhLWI5 ZWYtYzk3Y2ZmMGNiZmFlLzljYzg3MmRiLWI3MTMtNDM5YS1iOWVmLWM5N2NmZjBj YmZhZS5jcmwwHwYDVR0jBBgwFoAUN3M2EnpRuuetmhRlonQD9z+WwgYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85Y2M4NzJkYi1iNzEzLTQzOWEtYjllZi1jOTdj ZmYwY2JmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzK5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQs4bF9q9FLu5DGpx6SzbfecNf+RNYSXnTJbrPAzBQGhWtQjxHhmtWf Iyr05wQVjD/wJHPfb/dKCXJVQbxsbq/qMAaW933rhe8uQioTXhBlqDj+7vpRn1J3 TU8vBYBzAT8h0zjlJP1nU98JC1+mG7oDuHLt6poAalVbVLOhL7h1BtRrqawr9Y7P i+TLfvl2ZlqFpM38iPydAW+tufmtTlFchDiTMLxBSr+llwxbT9caKF+RLyWyMfMc 6r2BqWni6U6rhQCsyk4j4+XkazXPkJyXhcYRAZi4GRFzQunVMWYdH/Q36XP9QAtS GqTbvueCFNcghQLMwDdJRtt40LAOp7M= -----END CERTIFICATE-----Generated at Fri Apr 17 19:51:47 2026 by rpki-client