$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa File: 3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa (raw, json) Hash identifier: rCPSJytKphO4fEcJ+raC8bELbsFAQEs8Cv9z7b37a9Y= Subject key identifier: 1E:92:84:88:83:18:AB:B2:15:14:48:5D:99:D6:CF:7C:5B:69:8E:F2 Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Certificate serial: 010D0C9F4328584CDDCCEF1AFBAB79BAEE23C840 Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 13438 IP address blocks: 104.232.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:ef:1a:fb:ab:79:ba:ee:23:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=4475c017-a10d-41b1-87ef-8dee4d5bdf2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:59:3c:96:56:3d:38:15:7e:e9:06:ca:b3: 70:85:a1:e0:08:b8:4b:5e:83:e9:8d:06:bd:27:ac: bf:18:18:20:cf:6a:de:a2:f1:cb:a2:48:6d:0b:0c: 47:0f:ba:79:de:59:8a:be:db:8d:ea:68:02:25:9d: 3a:de:56:7a:ec:04:39:3c:71:e2:44:c8:06:45:44: 7e:f1:62:a7:40:c9:27:7b:a0:75:15:41:10:57:16: d5:87:f3:ab:fc:b6:bf:fb:39:ea:0d:04:18:a6:90: 02:8e:46:01:86:0b:2e:29:44:61:4a:52:88:d8:86: 13:51:76:27:fd:75:a8:ca:46:c9:b9:ed:0a:75:df: 28:d5:42:a3:8e:d7:6b:12:bd:d1:ab:5f:18:b0:c6: 50:77:32:fe:5f:56:7c:d2:ca:8a:6d:a4:a6:a7:b7: ae:04:be:63:e5:9d:2c:b8:21:40:27:fc:d4:3d:87: 59:26:03:60:74:25:3c:4e:4d:04:52:69:ed:33:5c: 85:21:e1:0f:f2:fb:0c:a4:e2:63:2b:b1:6a:10:f2: b4:a0:92:24:58:3c:af:9e:43:20:4f:48:5f:5d:0b: 0a:96:45:1c:ab:38:5c:16:c6:62:c5:63:d2:e2:e0: 6f:d8:d2:f9:b0:6e:0e:5a:54:b9:69:c2:7f:50:64: 77:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:84:88:83:18:AB:B2:15:14:48:5D:99:D6:CF:7C:5B:69:8E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/3e2fbd50-7212-31b5-b944-be9ef7c52b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl X509v3 Authority Key Identifier: keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer sbgp-ipAddrBlock: critical IPv4: 104.232.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0f:c9:29:59:34:97:32:3a:35:4b:04:53:52:d9:f8:59:9c: 47:e5:b0:2d:2d:59:84:95:e5:ef:9f:02:99:f3:a5:17:9c:06: 2d:8a:4d:00:a7:ec:9f:5a:50:7f:d0:19:59:9b:ee:f6:7e:c9: 52:17:46:a4:2d:67:3b:fd:d5:93:5b:c8:2c:bb:14:57:af:9b: f7:ae:52:e0:47:ad:42:7d:5e:c8:95:62:f2:ce:60:c6:3e:a5: 94:3c:e9:a9:69:f4:bf:96:fc:62:f7:7c:a6:bd:cf:84:be:38: 4d:d3:55:71:b0:46:ec:b3:49:eb:5a:19:97:e1:84:84:d9:eb: c7:60:ca:e2:d4:9f:4d:03:99:77:69:f1:cb:99:6b:42:2c:22: 4d:ef:32:ea:7c:2c:0f:1a:b2:b2:b4:98:7b:9e:de:11:18:9b: 00:b2:7e:b6:41:6a:66:71:ca:97:0d:ed:98:09:dd:44:1b:c9: 48:bb:9c:26:6a:41:5c:81:8a:2b:bc:20:62:c7:2c:c0:dc:e8: fc:c7:e0:3e:ce:05:e2:1a:e8:ef:e8:81:93:cc:8a:39:c5:5f: c5:12:f9:a0:03:dc:28:42:a0:4e:f2:e3:17:f9:3e:9d:61:a3: 9b:d7:62:1e:01:77:e2:a3:be:a0:a9:2a:9d:65:5c:4e:21:65: 89:47:f2:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzO8a+6t5uu4jyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjZDQ2MjUtNjAzNC00YjNiLTlkOGItNTQxN2NhOTdj ODM5MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk NDQ3NWMwMTctYTEwZC00MWIxLTg3ZWYtOGRlZTRkNWJkZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwstZPJZWPTgVfukGyrNwhaHgCLhLXoPpjQa9 J6y/GBggz2reovHLokhtCwxHD7p53lmKvtuN6mgCJZ063lZ67AQ5PHHiRMgGRUR+ 8WKnQMkne6B1FUEQVxbVh/Or/La/+znqDQQYppACjkYBhgsuKURhSlKI2IYTUXYn /XWoykbJue0Kdd8o1UKjjtdrEr3Rq18YsMZQdzL+X1Z80sqKbaSmp7euBL5j5Z0s uCFAJ/zUPYdZJgNgdCU8Tk0EUmntM1yFIeEP8vsMpOJjK7FqEPK0oJIkWDyvnkMg T0hfXQsKlkUcqzhcFsZixWPS4uBv2NL5sG4OWlS5acJ/UGR3AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6ShIiDGKuyFRRIXZnWz3xbaY7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jM2Nk NDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3Y2E5N2M4MzkvM2UyZmJkNTAtNzIxMi0z MWI1LWI5NDQtYmU5ZWY3YzUyYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzNjZDQ2MjUtNjAzNC00YjNiLTlk OGItNTQxN2NhOTdjODM5L2MzY2Q0NjI1LTYwMzQtNGIzYi05ZDhiLTU0MTdjYTk3 YzgzOS5jcmwwHwYDVR0jBBgwFoAUluTtbp4/i42uv7q7CCGjw5vRbtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jM2NkNDYyNS02MDM0LTRiM2ItOWQ4Yi01NDE3 Y2E5N2M4MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcPySlZNJcyOjVLBFNS2fhZnEflsC0tWYSV5e+fApnzpRecBi2KTQCn 7J9aUH/QGVmb7vZ+yVIXRqQtZzv91ZNbyCy7FFevm/euUuBHrUJ9XsiVYvLOYMY+ pZQ86alp9L+W/GL3fKa9z4S+OE3TVXGwRuyzSetaGZfhhITZ68dgyuLUn00DmXdp 8cuZa0IsIk3vMup8LA8asrK0mHue3hEYmwCyfrZBamZxypcN7ZgJ3UQbyUi7nCZq QVyBiiu8IGLHLMDc6PzH4D7OBeIa6O/ogZPMijnFX8US+aAD3ChCoE7y4xf5Pp1h o5vXYh4Bd+KjvqCpKp1lXE4hZYlH8j8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:20:41 2026 by rpki-client