$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa File: b96fa30c-800a-3f27-bbe0-a0466bba322b.roa (raw, json) Hash identifier: 2ZKBSsWgdtwS1J3oRq4tuTaPf/1nBH50jxQochrFWqU= Subject key identifier: 30:B0:F6:9E:53:77:A0:39:EA:66:34:46:FC:D2:93:A5:13:53:9F:CB Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584D59EA54458055880D822BE800 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 398993 IP address blocks: 104.219.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:54:45:80:55:88:0d:82:2b:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=863eb1fc-9a26-4a33-b7e0-429021d4dca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:39:dd:00:c6:d5:ab:80:47:79:7a:b4:08: eb:db:18:13:b2:62:fb:f9:2d:60:7d:14:fb:85:81: 7d:57:75:75:ac:9c:7a:cc:70:6c:e2:1a:b2:f8:4a: 68:c1:95:96:76:88:e4:8a:04:cf:52:7d:bb:f0:58: 2e:97:29:bd:ed:d2:87:b8:10:92:40:47:9f:91:1b: c0:33:fd:54:77:6c:a1:71:c6:71:27:f0:ec:d9:cf: 23:d0:3b:dd:9b:f6:67:76:7e:5f:6b:0b:cd:8a:5d: fe:4f:45:60:c6:03:a9:8b:d2:c2:ef:bf:78:56:4f: 1d:67:da:e1:65:47:af:b3:7f:41:b9:2c:01:06:e1: f0:36:ea:e3:fa:53:71:eb:e2:66:bc:ab:32:9d:ac: 8f:bc:2b:df:2a:f5:a7:26:94:0c:2b:f3:27:5c:e4: a5:58:f6:2c:79:a0:86:22:aa:dd:ac:1d:81:07:2c: 9e:da:28:e0:b4:6e:f7:f6:b6:51:28:6c:a1:bf:12: a6:e5:67:55:58:c2:99:11:60:72:1a:37:aa:01:b6: 2e:e0:6d:13:a4:6d:f3:dc:ee:fe:b5:ef:08:c8:a7: ce:67:38:46:bf:0c:43:8f:92:9b:83:20:9e:68:3b: 8d:a8:f8:68:46:65:3f:aa:bb:43:bc:b4:39:ee:16: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B0:F6:9E:53:77:A0:39:EA:66:34:46:FC:D2:93:A5:13:53:9F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/b96fa30c-800a-3f27-bbe0-a0466bba322b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:47:00:b8:5e:96:3f:03:bc:50:2d:2e:3c:21:4e:d2:59:33: 1c:ab:b9:19:dd:0f:5b:68:03:67:ad:e7:d8:e7:c9:f4:6a:cf: 02:5d:80:9e:a4:1f:42:60:47:42:1c:84:ae:96:0b:46:c2:d6: 02:f4:d6:d3:bc:c5:03:39:33:a5:96:8e:b5:72:ea:70:bf:e8: ed:0a:e4:f7:07:53:8b:74:f1:2c:19:b2:16:1a:49:0a:a5:b3: c9:2b:4b:13:db:61:46:56:4a:fb:4f:c6:82:67:ba:a4:ce:17: 07:18:46:cb:28:28:5b:e0:b8:76:53:9e:ff:63:b3:ad:25:f9: 42:53:47:56:86:f9:c6:82:c6:cf:ee:f9:43:09:52:09:43:ea: fe:16:05:04:4c:a7:79:e1:45:e5:2b:d1:36:a8:64:6e:21:85: 49:5e:4e:f7:d8:ae:fd:cc:4a:86:d5:15:58:17:6e:76:45:35: 90:f4:73:81:42:fc:51:d4:f2:6a:95:d2:7b:2a:2d:01:12:83: e0:8f:fd:73:cc:3b:c2:77:74:4e:4f:52:3a:85:18:e8:da:29: b7:35:76:12:27:c7:91:75:3d:80:a7:cd:e9:79:a0:6a:f4:8d: d3:48:c7:ec:e3:39:09:03:40:0d:47:e5:3f:ae:a4:69:84:fa: 74:4f:a0:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lRFgFWIDYIr6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ODYzZWIxZmMtOWEyNi00YTMzLWI3ZTAtNDI5MDIxZDRkY2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3s53QDG1auAR3l6tAjr2xgTsmL7+S1gfRT7 hYF9V3V1rJx6zHBs4hqy+EpowZWWdojkigTPUn278Fgulym97dKHuBCSQEefkRvA M/1Ud2yhccZxJ/Ds2c8j0Dvdm/Zndn5fawvNil3+T0VgxgOpi9LC7794Vk8dZ9rh ZUevs39BuSwBBuHwNurj+lNx6+JmvKsynayPvCvfKvWnJpQMK/MnXOSlWPYseaCG IqrdrB2BByye2ijgtG739rZRKGyhvxKm5WdVWMKZEWByGjeqAbYu4G0TpG3z3O7+ te8IyKfOZzhGvwxDj5KbgyCeaDuNqPhoRmU/qrtDvLQ57hatywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCw9p5Td6A56mY0RvzSk6UTU5/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvYjk2ZmEzMGMtODAwYS0z ZjI3LWJiZTAtYTA0NjZiYmEzMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxHALhelj8DvFAtLjwhTtJZMxyruRndD1toA2et59jnyfRqzwJdgJ6k H0JgR0IchK6WC0bC1gL01tO8xQM5M6WWjrVy6nC/6O0K5PcHU4t08SwZshYaSQql s8krSxPbYUZWSvtPxoJnuqTOFwcYRssoKFvguHZTnv9js60l+UJTR1aG+caCxs/u +UMJUglD6v4WBQRMp3nhReUr0TaoZG4hhUleTvfYrv3MSobVFVgXbnZFNZD0c4FC /FHU8mqV0nsqLQESg+CP/XPMO8J3dE5PUjqFGOjaKbc1dhInx5F1PYCnzel5oGr0 jdNIx+zjOQkDQA1H5T+upGmE+nRPoKQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:59 2026 by rpki-client