$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa File: 1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa (raw, json) Hash identifier: bDiTWIIzNJ6kdHoLOupNlmvzLC3ntdfWRxl2sy/CvUk= Subject key identifier: 51:2F:F5:3D:39:D4:78:F8:BD:A8:01:91:9B:2F:EC:3F:FE:E8:AE:0C Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584CAB8C4A07AFCAAEE579815280 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 62874 IP address blocks: 104.37.24.0/22 maxlen: 22 104.37.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:4a:07:af:ca:ae:e5:79:81:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=53c0e8c8-1429-4a1f-b36e-e9e9d0f8564f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:23:4a:0a:60:04:6f:ef:de:d5:ce:60:81:e4: 21:0d:ff:56:ed:8f:97:aa:ce:9d:3b:b7:88:c4:3e: 1a:37:6b:ca:ed:23:50:24:6a:66:1e:df:f9:64:f5: 85:95:db:89:92:b5:21:93:95:b3:0e:4b:7e:49:08: c6:0c:fa:2e:bb:cd:a4:5e:37:32:21:32:f2:a7:89: 10:52:5e:55:e1:17:29:8a:08:cb:ca:a6:3b:5a:3b: 23:0c:24:fa:eb:c6:b6:dc:9b:6a:59:a6:5c:5c:22: 6b:eb:85:46:1d:a1:cd:4e:85:4c:b6:51:a6:bc:0f: c3:7a:54:d6:51:ac:f5:25:12:fe:96:a8:57:d4:14: ce:c2:b0:a0:3f:15:8b:f1:6f:e7:2f:2c:f5:31:e2: ac:67:4a:77:e0:5d:20:93:e9:ba:f7:ae:4d:3e:8a: d1:c9:ea:d9:48:f8:f4:e2:af:4d:0f:ef:d8:af:65: 50:b9:bb:c8:02:e4:8e:93:46:11:5c:48:8d:af:77: f1:68:ef:19:df:f6:db:bd:c4:96:71:d3:ef:96:ff: 68:a9:65:8a:7e:80:74:15:31:ca:01:ee:17:53:3d: e3:6f:7f:cf:b7:6a:7e:99:35:27:df:62:0d:50:31: 7f:27:44:e8:78:86:90:77:d0:67:70:54:e1:f7:09: d0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2F:F5:3D:39:D4:78:F8:BD:A8:01:91:9B:2F:EC:3F:FE:E8:AE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 104.37.24.0-104.37.28.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:55:21:0c:fb:d3:4c:a5:11:0c:fe:a5:b4:53:cb:13:dc:41: 35:f9:0b:1b:dc:67:76:e0:da:c2:51:96:2d:3f:af:a3:87:fb: 82:4e:9e:9f:f6:e8:4c:80:9a:f7:98:9c:ea:c1:e7:a8:fb:d1: c4:fc:87:1f:d0:3a:d3:5f:cf:2f:3d:0e:92:7a:8c:e8:17:17: 54:43:a2:f8:bb:c1:a4:f5:5c:83:2d:6e:8f:39:cb:16:00:94: 65:93:f1:c5:f9:ce:c5:92:84:80:0f:2e:b1:79:b7:0b:17:c7: ad:3e:0f:b8:44:d5:e3:b9:a0:71:ff:27:4f:2c:c1:8f:5d:9e: 1c:a6:28:c1:ee:ae:66:56:bd:e0:ae:3d:30:23:9f:bd:44:ab: 64:a7:65:e7:05:9b:33:f1:72:bb:a2:ec:6a:a0:67:8b:19:5a: 70:5d:68:53:ff:4e:bd:50:e1:80:78:5f:5f:63:e1:98:68:22: 6c:f5:7c:b1:8e:7c:27:07:b0:03:bf:50:2e:95:7d:b0:3f:fe: 05:17:de:05:44:7f:f9:d9:12:9e:9d:d0:dc:fc:7e:54:7d:aa: 60:f0:b9:10:c8:5e:cf:3c:2f:25:81:78:d8:8f:51:0a:f6:d7: 67:73:d9:73:63:01:00:fc:46:b9:33:aa:fb:f7:5f:0b:1e:73: 2a:c0:81:62 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyrjEoHr8qu5XmBUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk NTNjMGU4YzgtMTQyOS00YTFmLWIzNmUtZTllOWQwZjg1NjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiNKCmAEb+/e1c5ggeQhDf9W7Y+Xqs6dO7eI xD4aN2vK7SNQJGpmHt/5ZPWFlduJkrUhk5WzDkt+SQjGDPouu82kXjcyITLyp4kQ Ul5V4RcpigjLyqY7WjsjDCT668a23JtqWaZcXCJr64VGHaHNToVMtlGmvA/DelTW Uaz1JRL+lqhX1BTOwrCgPxWL8W/nLyz1MeKsZ0p34F0gk+m6965NPorRyerZSPj0 4q9ND+/Yr2VQubvIAuSOk0YRXEiNr3fxaO8Z3/bbvcSWcdPvlv9oqWWKfoB0FTHK Ae4XUz3jb3/Pt2p+mTUn32INUDF/J0ToeIaQd9BncFTh9wnQywIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFEv9T051Hj4vagBkZsv7D/+6K4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvMWIxYzMyZmYtYTg4Ny0z N2U5LTljZTItYjI4MmU1N2RmN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANoJRgD BABoJRwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARlUhDPvTTKURDP6ltFPLE9xBNfkLG9xnduDawlGWLT+v o4f7gk6en/boTICa95ic6sHnqPvRxPyHH9A601/PLz0OknqM6BcXVEOi+LvBpPVc gy1ujznLFgCUZZPxxfnOxZKEgA8usXm3CxfHrT4PuETV47mgcf8nTyzBj12eHKYo we6uZla94K49MCOfvUSrZKdl5wWbM/Fyu6LsaqBnixlacF1oU/9OvVDhgHhfX2Ph mGgibPV8sY58JwewA79QLpV9sD/+BRfeBUR/+dkSnp3Q3Px+VH2qYPC5EMhezzwv JYF42I9RCvbXZ3PZc2MBAPxGuTOq+/dfCx5zKsCBYg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:37:33 2026 by rpki-client