$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json) Hash identifier: GOSHGnJ+aH+cZshe8zFq4kNfIKQqopF3HytI/ZMwaoI= Subject key identifier: 05:AB:EC:57:D8:C1:8B:A0:37:F8:CF:2F:87:4E:AA:F4:2F:62:1D:36 Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Certificate serial: 010D0C9F4328584CF42234388F0FEBB86BDC2100 Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 9712 IP address blocks: 104.251.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:34:38:8f:0f:eb:b8:6b:dc:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=9b10b515-b02d-4970-ad89-67eff851bd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:2f:8f:4a:52:ea:80:ec:a8:a2:78:c7:6f: ab:a5:92:0f:8e:55:b3:57:98:e3:65:d3:27:ce:d4: 5e:37:41:ea:1a:13:28:16:db:d1:0c:c5:62:27:23: 57:50:0d:0b:2b:47:8f:7c:2a:2c:5d:12:7a:84:35: f1:13:9d:de:13:5f:16:11:8b:b9:cb:1a:96:38:da: 4a:1b:c3:19:71:2a:f6:bc:ed:ea:a5:c5:ae:f8:0b: 39:7e:31:c1:38:3e:3c:ce:09:cf:d8:5e:7a:55:54: 85:f3:c9:1b:6c:d8:23:72:66:7b:0b:b4:1f:dc:0c: 68:bd:f8:2d:60:9a:54:2a:c5:56:20:a6:d1:88:32: c3:4c:db:c8:0d:2d:ec:db:ac:f6:6b:14:b8:5b:6a: 04:94:c6:54:5d:61:88:d1:0d:df:c4:d8:64:98:28: 0f:cc:84:91:ca:42:17:8d:e6:23:7a:71:1d:e3:12: 3e:95:ed:ae:5a:ef:3a:cb:87:a6:d0:61:4f:08:2e: 6a:a2:1b:f4:2e:ff:25:80:0e:1f:b9:c7:a1:d1:79: 0f:4b:61:7b:bf:19:38:49:87:ad:9b:aa:8d:5e:3d: 13:5d:c8:f2:d8:a1:3e:e4:67:e1:4b:cc:e6:01:41: ec:a3:2f:00:bb:53:c3:2e:55:f0:d9:5e:01:0b:cd: d3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AB:EC:57:D8:C1:8B:A0:37:F8:CF:2F:87:4E:AA:F4:2F:62:1D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl X509v3 Authority Key Identifier: keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer sbgp-ipAddrBlock: critical IPv4: 104.251.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:fd:fa:ba:89:b5:38:16:6b:3d:78:4a:8e:c5:85:41:9d:9a: aa:76:c0:a8:78:53:18:19:c2:eb:31:6d:91:52:80:e5:b9:f9: 8f:e3:b6:58:4c:3b:6e:2a:94:1e:fa:41:c6:a9:04:5e:36:6f: c7:94:82:52:a4:d1:18:64:34:b7:4b:a4:df:24:f3:e9:c8:90: 70:11:25:3b:dc:4a:75:f9:af:d9:5f:7d:e1:0b:ef:93:e5:34: 1c:04:c6:8a:22:ab:0a:8f:f3:92:22:36:77:a2:e8:35:c4:1f: 18:4f:45:3a:65:a5:b4:75:44:1d:05:a4:c6:32:10:5c:ba:29: fd:83:62:a2:a3:ec:29:83:2c:71:7d:8a:a9:51:c2:7d:32:9e: 89:f8:71:d0:ff:e3:0c:60:10:86:c9:ff:d0:c4:f2:3e:79:1d: d1:1d:e8:55:4d:45:70:96:50:de:40:d0:20:8b:5d:58:ce:2d: c3:5e:bb:27:c6:74:e3:7e:be:fb:d9:51:15:3a:db:76:28:e3: 70:19:c9:2e:42:00:de:d4:38:5b:f9:35:81:93:8a:1a:cf:5a: 98:a8:b8:87:fd:42:08:ef:cc:05:2f:12:bc:c6:d8:be:76:56: 9d:c7:b9:41:19:34:dc:4a:66:1a:2d:96:00:5d:d7:fa:f5:93: 70:fa:6e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IjQ4jw/ruGvcIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh MTJhMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk OWIxMGI1MTUtYjAyZC00OTcwLWFkODktNjdlZmY4NTFiZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ0vj0pS6oDsqKJ4x2+rpZIPjlWzV5jjZdMn ztReN0HqGhMoFtvRDMViJyNXUA0LK0ePfCosXRJ6hDXxE53eE18WEYu5yxqWONpK G8MZcSr2vO3qpcWu+As5fjHBOD48zgnP2F56VVSF88kbbNgjcmZ7C7Qf3Axovfgt YJpUKsVWIKbRiDLDTNvIDS3s26z2axS4W2oElMZUXWGI0Q3fxNhkmCgPzISRykIX jeYjenEd4xI+le2uWu86y4em0GFPCC5qohv0Lv8lgA4fuceh0XkPS2F7vxk4SYet m6qNXj0TXcjy2KE+5GfhS8zmAUHsoy8Au1PDLlXw2V4BC83TrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWr7FfYwYugN/jPL4dOqvQvYh02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvM2ExNDAzZjEtMDFiYy0z MmY5LTk3MzQtYjFkZmM2ZGNkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/9+rqJtTgWaz14So7FhUGdmqp2wKh4UxgZwusxbZFSgOW5+Y/jtlhM O24qlB76QcapBF42b8eUglKk0RhkNLdLpN8k8+nIkHARJTvcSnX5r9lffeEL75Pl NBwExooiqwqP85IiNnei6DXEHxhPRTplpbR1RB0FpMYyEFy6Kf2DYqKj7CmDLHF9 iqlRwn0ynon4cdD/4wxgEIbJ/9DE8j55HdEd6FVNRXCWUN5A0CCLXVjOLcNeuyfG dON+vvvZURU623Yo43AZyS5CAN7UOFv5NYGTihrPWpiouIf9QgjvzAUvErzG2L52 Vp3HuUEZNNxKZhotlgBd1/r1k3D6bt4= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:54 2026 by rpki-client