$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa File: 512d584a-aed4-3b6a-9c59-eb585416fe6e.roa (raw, json) Hash identifier: rXZAM0atZBkOpFui7MgFMRVYYiU4oCmNEDflyIFNwJE= Subject key identifier: 09:B5:85:AF:ED:D8:11:AE:5A:B9:A8:22:B7:3B:96:45:75:64:BD:B5 Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584D59EA5B97869F78B13A99D9E0 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 399195 IP address blocks: 104.37.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5b:97:86:9f:78:b1:3a:99:d9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e09664b5-feb2-499b-a2be-925b43d4970d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:4b:69:c9:ee:98:b7:ea:60:29:97:09:bb: 98:d3:cc:7a:76:59:42:c4:0e:b0:a1:27:c7:73:12: 9c:52:9c:7b:eb:07:4e:ae:b2:71:39:3d:37:fc:42: 99:48:61:3f:49:ed:ba:26:00:94:05:4e:68:17:fc: a9:46:ea:ad:e8:34:5d:eb:5b:d1:e3:4a:f9:1e:de: d2:d5:d0:4c:0e:8c:b6:82:f4:eb:b6:a0:a2:59:d1: e4:be:c4:00:50:d3:6d:ea:cf:aa:72:ef:25:b9:fe: 15:26:a8:15:ee:b5:7a:12:56:30:6e:df:90:9e:5b: 79:c0:e2:f8:36:f0:eb:fd:56:42:c5:f0:a5:36:b1: 6a:6f:97:c0:14:e0:35:04:ca:97:34:e6:96:cb:b3: 29:43:9e:6a:70:70:af:5e:d0:0f:ff:6c:18:1e:cf: 4e:45:99:b4:aa:d0:c9:c4:91:d8:70:d3:5e:86:e6: 96:c4:a3:59:39:02:94:67:e5:98:cc:1c:3e:9e:9a: 77:45:a8:50:ce:13:08:d7:75:5a:ce:5a:cd:44:8c: 5c:06:b1:0b:cf:2e:d5:3f:6c:a5:e3:93:a1:fa:e5: e7:eb:a1:ad:f1:89:ea:16:10:2c:f2:c0:12:5a:d2: a2:48:7f:20:2d:89:7d:ed:23:52:9d:68:40:0d:a1: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B5:85:AF:ED:D8:11:AE:5A:B9:A8:22:B7:3B:96:45:75:64:BD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:06:8f:1f:95:1c:13:56:80:13:a3:93:c6:c3:8c:58:b1:9b: 8b:56:16:23:eb:10:de:74:28:81:61:ca:1e:e2:ff:00:4b:d7: a6:8a:a1:6f:8a:7a:d7:5a:bc:d2:e6:17:a1:cc:65:d9:8c:3c: df:a9:6c:46:54:f3:33:87:56:59:73:97:43:65:20:e8:70:27: 28:0a:02:b0:67:03:fc:51:54:f3:bc:34:c4:95:0f:f2:3c:7b: 0a:df:de:6e:ac:80:22:cc:b8:fc:35:61:33:74:fc:59:e0:e3: fe:9e:12:3d:ac:67:26:a3:62:38:6d:47:c1:67:77:48:35:df: 56:cb:09:51:dc:d1:10:f8:40:e0:00:7a:da:15:7b:9e:6b:e4: a9:c2:dc:16:16:43:0e:b6:21:4d:b0:e2:fb:66:26:c9:03:f6: 88:02:9f:bf:3f:04:82:8d:99:ba:e3:d4:a4:b9:60:08:8d:ab: e0:cc:f2:d3:2b:ac:56:16:9c:f7:97:62:db:38:29:c2:53:ad: 7c:85:26:d5:c5:66:2a:46:31:42:a5:50:18:16:86:5a:d1:b0: c2:88:99:e2:d2:23:7a:be:f8:2e:93:bf:e4:4b:9c:4f:2a:cf: 96:c6:4a:5c:ea:6d:3d:92:53:ac:c3:19:15:61:ee:2e:0f:d1: b0:30:b6:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6luXhp94sTqZ2eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTA5NjY0YjUtZmViMi00OTliLWEyYmUtOTI1YjQzZDQ5NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnVLacnumLfqYCmXCbuY08x6dllCxA6woSfH cxKcUpx76wdOrrJxOT03/EKZSGE/Se26JgCUBU5oF/ypRuqt6DRd61vR40r5Ht7S 1dBMDoy2gvTrtqCiWdHkvsQAUNNt6s+qcu8luf4VJqgV7rV6ElYwbt+Qnlt5wOL4 NvDr/VZCxfClNrFqb5fAFOA1BMqXNOaWy7MpQ55qcHCvXtAP/2wYHs9ORZm0qtDJ xJHYcNNehuaWxKNZOQKUZ+WYzBw+npp3RahQzhMI13VazlrNRIxcBrELzy7VP2yl 45Oh+uXn66Gt8YnqFhAs8sASWtKiSH8gLYl97SNSnWhADaHBIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm1ha/t2BGuWrmoIrc7lkV1ZL21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvNTEyZDU4NGEtYWVkNC0z YjZhLTljNTktZWI1ODU0MTZmZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEGjx+VHBNWgBOjk8bDjFixm4tWFiPrEN50KIFhyh7i/wBL16aKoW+K etdavNLmF6HMZdmMPN+pbEZU8zOHVllzl0NlIOhwJygKArBnA/xRVPO8NMSVD/I8 ewrf3m6sgCLMuPw1YTN0/Fng4/6eEj2sZyajYjhtR8Fnd0g131bLCVHc0RD4QOAA etoVe55r5KnC3BYWQw62IU2w4vtmJskD9ogCn78/BIKNmbrj1KS5YAiNq+DM8tMr rFYWnPeXYts4KcJTrXyFJtXFZipGMUKlUBgWhlrRsMKImeLSI3q++C6Tv+RLnE8q z5bGSlzqbT2SU6zDGRVh7i4P0bAwthM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:50:18 2026 by rpki-client