$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa File: 3cff4f2a-68ad-3c28-8482-467530c2801c.roa (raw, json) Hash identifier: GeXCBo/5CLi4GS0OznChUNrqoE6ES3FGEHrbxGWmldg= Subject key identifier: 37:79:CF:C0:E4:45:82:76:95:33:52:0F:58:A4:06:3F:56:AC:F4:8C Certificate issuer: /CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Certificate serial: 010D0C9F4328584D746FCCA207BFBF7872D2D400 Authority key identifier: 9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 376 IP address blocks: 204.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:cc:a2:07:bf:bf:78:72:d2:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=da08a9c7-cb3d-404a-8820-675361de32a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5a:a2:3e:56:7f:77:9b:0c:97:97:57:73:7c: 84:73:6f:20:79:e0:04:90:86:db:61:69:38:b3:0e: 52:c0:8b:8f:e6:b3:d9:19:32:79:df:fe:81:f2:cc: db:b2:a4:45:4b:c8:8f:87:e9:c7:f5:d2:87:69:18: 4f:fe:b6:c6:d4:d9:a9:df:64:83:76:9e:30:42:30: c6:c9:8e:d7:cf:d1:e2:ae:b0:db:e6:9e:ad:f8:af: 73:70:23:b2:cd:02:66:9c:83:57:40:61:e6:dc:16: 74:56:d6:1d:49:2d:59:f2:43:1f:d5:7f:7d:b3:45: 37:99:f0:02:59:80:e2:4e:22:fa:44:6a:f7:d7:79: 43:f4:01:19:17:50:f7:45:66:82:46:01:f1:9b:81: b2:ff:fa:89:b3:6b:dd:d2:db:28:ad:49:79:15:5c: a1:2b:1c:36:b8:6a:c7:df:aa:a8:13:30:f5:97:1f: 42:20:1e:e5:10:db:be:2d:e4:40:f6:a5:00:a8:b5: 0c:0c:99:30:c3:6f:cc:73:0d:7b:96:c9:27:59:a3: 8e:30:eb:cb:92:67:ac:4a:52:7d:2c:9a:a6:8b:ab: d8:f5:ab:95:17:5d:21:ad:12:20:f0:39:35:f1:2f: 74:a1:d1:65:ad:9c:97:6c:82:eb:8a:bf:ff:a5:9d: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:79:CF:C0:E4:45:82:76:95:33:52:0F:58:A4:06:3F:56:AC:F4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl X509v3 Authority Key Identifier: keyid:9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer sbgp-ipAddrBlock: critical IPv4: 204.28.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:dc:b8:0f:e3:ac:a4:6c:c2:8f:c8:32:cd:fd:3b:52:32:36: a9:cb:e3:64:e6:01:77:a0:3e:88:b1:b8:d7:34:a3:5f:e3:d9: 14:9e:25:a4:34:76:82:17:42:d0:d9:6e:12:09:c4:1c:e8:72: f7:25:05:2d:a6:fb:0c:d2:7b:3c:18:11:e4:a8:dd:a6:2e:65: fc:35:18:e3:37:13:a1:33:f3:8d:c9:cb:ec:76:9f:06:d3:69: 77:ab:b4:b5:e2:d9:14:2b:cb:9e:00:7c:89:48:52:11:85:a9: cd:44:3e:7b:be:ca:b9:84:4d:23:f1:3b:5a:33:2e:91:d4:7f: 97:94:d6:f0:4b:15:9b:68:fb:da:35:f9:7f:9d:4a:a1:fe:74: 57:68:f9:cb:b3:bb:6b:54:1b:de:a0:0f:1c:3b:53:ab:7d:b4: d6:83:3f:b3:81:ac:18:07:5a:72:c3:e5:0b:02:ce:9f:a0:7f: 64:7d:f6:76:ec:21:99:ee:b2:99:22:88:27:0a:9e:73:3a:a9: ed:2b:94:22:07:45:10:25:07:bc:84:6a:e3:bf:a6:40:60:da: 16:20:cc:c8:e0:2e:f1:e5:ca:2f:e0:cc:0e:52:d1:f6:1c:4f: b8:c5:84:e5:0e:d3:0e:57:3c:85:31:ac:c7:eb:66:52:ab:8c: 91:30:df:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8yiB7+/eHLS1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjMzAwZWMtOTkyNy00OTFkLWJkNzctODEwN2NjODll NGYzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGEwOGE5YzctY2IzZC00MDRhLTg4MjAtNjc1MzYxZGUzMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81qiPlZ/d5sMl5dXc3yEc28geeAEkIbbYWk4 sw5SwIuP5rPZGTJ53/6B8szbsqRFS8iPh+nH9dKHaRhP/rbG1Nmp32SDdp4wQjDG yY7Xz9HirrDb5p6t+K9zcCOyzQJmnINXQGHm3BZ0VtYdSS1Z8kMf1X99s0U3mfAC WYDiTiL6RGr313lD9AEZF1D3RWaCRgHxm4Gy//qJs2vd0tsorUl5FVyhKxw2uGrH 36qoEzD1lx9CIB7lENu+LeRA9qUAqLUMDJkww2/Mcw17lsknWaOOMOvLkmesSlJ9 LJqmi6vY9auVF10hrRIg8Dk18S90odFlrZyXbILrir//pZ0ovQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDd5z8DkRYJ2lTNSD1ikBj9WrPSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Mz MDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3Y2M4OWU0ZjMvM2NmZjRmMmEtNjhhZC0z YzI4LTg0ODItNDY3NTMwYzI4MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNjMzAwZWMtOTkyNy00OTFkLWJk NzctODEwN2NjODllNGYzL2MzYzMwMGVjLTk5MjctNDkxZC1iZDc3LTgxMDdjYzg5 ZTRmMy5jcmwwHwYDVR0jBBgwFoAUnN0pukMWDSh68N69hu4dxDQ2cYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2MzMDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3 Y2M4OWU0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTcuA/jrKRswo/IMs39O1IyNqnL42TmAXegPoixuNc0o1/j2RSeJaQ0 doIXQtDZbhIJxBzocvclBS2m+wzSezwYEeSo3aYuZfw1GOM3E6Ez843Jy+x2nwbT aXertLXi2RQry54AfIlIUhGFqc1EPnu+yrmETSPxO1ozLpHUf5eU1vBLFZto+9o1 +X+dSqH+dFdo+cuzu2tUG96gDxw7U6t9tNaDP7OBrBgHWnLD5QsCzp+gf2R99nbs IZnuspkiiCcKnnM6qe0rlCIHRRAlB7yEauO/pkBg2hYgzMjgLvHlyi/gzA5S0fYc T7jFhOUO0w5XPIUxrMfrZlKrjJEw33Q= -----END CERTIFICATE-----Generated at Sat Apr 18 01:10:39 2026 by rpki-client