$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa File: dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa (raw, json) Hash identifier: LsXAE3V70R4jgpBoSQN5VOibCUugJ3CNfRhe4YPZFMA= Subject key identifier: 04:D8:DF:B2:ED:43:15:7A:C3:FA:6D:A3:C2:7D:69:C0:AD:61:BA:39 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F4328584CEE8CCC8CBD277EFB45F85B80 Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa Signing time: Sat 21 Feb 2026 02:00:32 +0000 ROA not before: Sat 21 Feb 2026 02:00:32 +0000 ROA not after: Fri 22 May 2026 01:00:32 +0000 asID: 40545 IP address blocks: 104.255.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:8c:cc:8c:bd:27:7e:fb:45:f8:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Feb 21 02:00:32 2026 GMT Not After : May 22 01:00:32 2026 GMT Subject: CN=34fc27d8-1d8a-4844-a982-45eee7f2e0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:4b:c5:f7:7b:25:fd:c5:75:9f:52:12:cb: ad:f5:57:7a:14:0c:e8:d9:cb:fd:70:ed:3b:30:cb: 9e:43:6c:73:33:12:66:2f:7f:59:df:2a:ee:5a:d7: 4f:a5:81:16:a0:68:6b:bf:d7:a9:8d:17:25:a4:ea: 48:ff:a6:01:27:b8:f1:66:ba:2c:4e:df:25:ff:16: cd:33:5c:a6:28:c9:3b:60:ab:47:8b:e4:d2:d6:3d: 03:e4:bd:29:ed:1c:ef:90:ae:41:e1:15:b5:01:b0: 47:c6:b2:e5:bd:80:78:0b:a7:31:4b:29:54:30:25: b1:97:ed:58:48:73:75:b0:e7:79:51:e8:4f:7c:ff: 65:49:8b:d2:91:8a:a7:d7:c6:bc:a0:17:02:05:c0: 1f:aa:1a:49:e2:12:15:5f:45:09:cc:bb:2f:15:7e: da:f7:fb:e2:36:4d:d4:4f:83:05:43:b6:72:30:db: ed:db:a5:a8:36:23:02:35:ca:e1:6c:32:c0:e3:95: 25:a4:3f:dc:b8:4d:d6:b4:54:43:f1:0d:10:cf:57: 9c:05:a1:ca:72:ce:de:f6:43:b7:3b:55:77:fb:1c: 95:a5:e1:71:91:9c:62:23:d5:d2:54:e8:73:bd:cb: c4:aa:02:13:36:8e:45:32:c0:4a:5d:54:bd:12:f5: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D8:DF:B2:ED:43:15:7A:C3:FA:6D:A3:C2:7D:69:C0:AD:61:BA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 104.255.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cf:6b:f7:21:c6:94:5f:de:33:3d:3d:bd:4f:b2:e7:ea:d2: d5:d2:b7:01:0d:c2:92:b5:5f:7a:06:e2:44:05:cd:c2:8b:50: a3:06:d6:76:82:6f:05:31:ce:70:38:d2:74:d2:9b:b0:a2:d0: 76:a2:34:58:af:cc:e7:e6:c8:6f:dc:7d:5f:8b:34:64:08:4b: 3e:7a:ef:1a:a3:c0:a4:bb:fa:12:c5:c9:13:e2:6c:76:17:c3: 25:7e:03:4b:ce:72:ee:99:71:c3:6b:c9:17:f7:0b:7a:4a:06: 67:7b:6e:45:ab:ad:db:9e:db:50:5a:85:1e:88:ec:81:bc:13: 4f:2e:bd:e6:2b:1b:c1:e0:25:be:08:f6:9f:88:66:e9:6b:18: 3b:5d:fc:39:87:46:44:e4:5d:ae:32:ad:30:72:b3:2c:ce:06: 55:cf:50:5b:75:d2:14:f0:80:c6:dd:61:9f:ff:9d:40:90:90: 99:05:6c:21:23:1f:04:f5:39:71:9c:28:cf:93:85:82:58:34: 07:45:28:ca:f7:65:35:3c:82:9f:92:df:b2:d0:50:13:37:d8: 2d:6d:a2:d0:16:f7:22:17:ee:c3:ca:32:be:58:dc:b0:d6:f1: ab:f9:36:fe:e4:c0:99:27:f7:69:f6:f0:26:ec:40:2a:62:37: b5:51:57:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujMyMvSd++0X4W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk MzRmYzI3ZDgtMWQ4YS00ODQ0LWE5ODItNDVlZWU3ZjJlMGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzztLxfd7Jf3FdZ9SEsut9Vd6FAzo2cv9cO07 MMueQ2xzMxJmL39Z3yruWtdPpYEWoGhrv9epjRclpOpI/6YBJ7jxZrosTt8l/xbN M1ymKMk7YKtHi+TS1j0D5L0p7RzvkK5B4RW1AbBHxrLlvYB4C6cxSylUMCWxl+1Y SHN1sOd5UehPfP9lSYvSkYqn18a8oBcCBcAfqhpJ4hIVX0UJzLsvFX7a9/viNk3U T4MFQ7ZyMNvt26WoNiMCNcrhbDLA45UlpD/cuE3WtFRD8Q0Qz1ecBaHKcs7e9kO3 O1V3+xyVpeFxkZxiI9XSVOhzvcvEqgITNo5FMsBKXVS9EvVnywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATY37LtQxV6w/pto8J9acCtYbo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvZGFiYjViNWEtZTFjMS0z MDZmLTg0NjUtZjdmMGE4MDBmZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Pa/chxpRf3jM9Pb1Psufq0tXStwENwpK1X3oG4kQFzcKLUKMG1naC bwUxznA40nTSm7Ci0HaiNFivzOfmyG/cfV+LNGQISz567xqjwKS7+hLFyRPibHYX wyV+A0vOcu6ZccNryRf3C3pKBmd7bkWrrdue21BahR6I7IG8E08uveYrG8HgJb4I 9p+IZulrGDtd/DmHRkTkXa4yrTBysyzOBlXPUFt10hTwgMbdYZ//nUCQkJkFbCEj HwT1OXGcKM+ThYJYNAdFKMr3ZTU8gp+S37LQUBM32C1totAW9yIX7sPKMr5Y3LDW 8av5Nv7kwJkn92n28CbsQCpiN7VRV6M= -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:15 2026 by rpki-client