$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa File: 3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa (raw, json) Hash identifier: Ie0xXEkjOKoOn9xCwOgRkH3KowJUP7QggjxwNgstMKI= Subject key identifier: AD:5D:83:40:0C:78:23:19:F3:76:E5:04:FA:8B:C7:8C:4D:CA:25:6E Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584C6B56ACF49E9CD1B7C1170940 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 20127 IP address blocks: 104.152.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:ac:f4:9e:9c:d1:b7:c1:17:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=f7ad6d6b-085a-4c7c-8e1e-2500f0ad846c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:38:33:b1:f5:19:a1:46:34:a4:a1:eb:86: cb:46:66:26:8a:87:18:be:03:88:f6:20:8c:f5:e9: fe:2a:2e:7b:26:5f:2d:36:c7:38:40:29:5a:59:d0: 14:5a:df:1e:76:1c:37:14:eb:5d:fe:21:de:8c:a2: 46:e3:4e:24:e7:c7:09:d8:69:f6:f7:1f:db:0e:34: 01:81:a3:af:da:e3:50:3d:fc:96:3b:dc:bd:51:48: 2d:1e:33:4a:ec:aa:1d:4a:c5:27:18:9c:72:bc:12: 00:36:ca:05:8f:cc:fc:c4:e1:dd:ae:81:4f:33:eb: e0:6e:4f:e6:2c:72:43:c2:97:6f:db:49:a1:39:29: ed:99:9e:5b:4c:5f:e6:ee:4e:ef:a5:0f:8f:6f:33: 27:7c:5c:bb:8b:d1:6e:94:fc:4f:20:d0:6a:b2:db: ce:3f:a7:44:de:14:92:44:4b:70:42:ae:65:22:d8: 01:8f:c1:96:ed:7a:9b:57:03:31:95:65:50:11:ef: 63:d2:59:00:e3:77:31:c0:9e:9b:77:01:c3:ba:e1: 43:d5:b1:10:9a:f0:40:3f:34:0c:20:7a:69:f8:b4: c1:43:fc:58:51:76:d1:1f:2a:b9:d7:90:5a:b8:0a: 7a:b2:b8:08:36:66:40:f6:88:b3:cb:50:63:8f:97: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5D:83:40:0C:78:23:19:F3:76:E5:04:FA:8B:C7:8C:4D:CA:25:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3ffe2b76-e774-3c56-aae6-c2359820c5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:eb:3a:30:71:ca:a0:fc:e4:d8:c4:d0:4c:8f:ef:50:ac:1e: 5d:6b:e9:c1:4a:a1:c2:32:67:99:8d:85:ff:bc:4d:d8:7f:40: e7:67:8f:5b:0d:c2:7f:72:53:b1:36:72:ec:4f:14:14:59:b3: 44:36:07:8a:2c:7b:21:26:e9:65:30:75:45:5b:e4:e5:8f:4c: fc:53:7e:20:22:e9:f3:f3:c9:01:e8:30:51:fa:a8:a1:a1:1a: 24:c2:9a:5c:21:46:7d:1f:21:5a:67:47:54:19:69:14:00:fe: b3:55:d4:4a:26:c1:97:de:21:63:7e:fd:1f:61:4f:f9:39:f8: 28:c7:e5:6a:54:85:a2:1c:af:e3:87:f5:c8:df:15:06:70:d9: e4:b8:78:43:cc:16:88:6f:6b:bc:7e:a8:ef:82:a2:49:aa:59: b0:76:7a:54:c8:4c:13:ba:c8:a5:24:ad:4e:22:1a:c3:fe:5e: c2:e0:b8:33:82:4f:a8:1a:01:ba:24:4a:0b:74:7e:5f:6d:8a: bd:7f:1a:52:0d:7a:19:d2:4d:63:4c:4c:2f:5d:f2:9b:88:a2: 3e:dc:f7:f8:7b:dc:12:6d:1b:e5:01:53:be:a6:82:5e:65:6a: b3:24:72:8c:6b:32:93:73:13:96:8b:ae:ae:a3:71:57:24:77: f8:6d:67:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExrVqz0npzRt8EXCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjdhZDZkNmItMDg1YS00YzdjLThlMWUtMjUwMGYwYWQ4NDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHI4M7H1GaFGNKSh64bLRmYmiocYvgOI9iCM 9en+Ki57Jl8tNsc4QClaWdAUWt8edhw3FOtd/iHejKJG404k58cJ2Gn29x/bDjQB gaOv2uNQPfyWO9y9UUgtHjNK7KodSsUnGJxyvBIANsoFj8z8xOHdroFPM+vgbk/m LHJDwpdv20mhOSntmZ5bTF/m7k7vpQ+PbzMnfFy7i9FulPxPINBqstvOP6dE3hSS REtwQq5lItgBj8GW7XqbVwMxlWVQEe9j0lkA43cxwJ6bdwHDuuFD1bEQmvBAPzQM IHpp+LTBQ/xYUXbRHyq515BauAp6srgINmZA9oizy1Bjj5eK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1dg0AMeCMZ83blBPqLx4xNyiVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2ZmZTJiNzYtZTc3NC0z YzU2LWFhZTYtYzIzNTk4MjBjNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjrOjBxyqD85NjE0EyP71CsHl1r6cFKocIyZ5mNhf+8Tdh/QOdnj1sN wn9yU7E2cuxPFBRZs0Q2B4oseyEm6WUwdUVb5OWPTPxTfiAi6fPzyQHoMFH6qKGh GiTCmlwhRn0fIVpnR1QZaRQA/rNV1EomwZfeIWN+/R9hT/k5+CjH5WpUhaIcr+OH 9cjfFQZw2eS4eEPMFohva7x+qO+CokmqWbB2elTITBO6yKUkrU4iGsP+XsLguDOC T6gaAbokSgt0fl9tir1/GlINehnSTWNMTC9d8puIoj7c9/h73BJtG+UBU76mgl5l arMkcoxrMpNzE5aLrq6jcVckd/htZ/k= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:03 2026 by rpki-client