$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa File: a45363ac-38b7-3765-9fd2-71955777f847.roa (raw, json) Hash identifier: SqJlJhYIrof/cq5pfR4U27zFT1Gc/xRsqCBSvuxYXxA= Subject key identifier: 48:87:08:C3:74:85:79:76:66:9E:32:07:E9:86:0C:53:71:2D:CC:A6 Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584CB981F9E7B03FB708E54CE840 Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 401927 IP address blocks: 104.204.192.0/21 maxlen: 21 2604:1d20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:f9:e7:b0:3f:b7:08:e5:4c:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=cee32f7d-45eb-4069-a32b-10d01d2a8f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:a8:39:2c:80:9c:94:cc:ba:4f:22:39:9e: 36:7d:cd:4e:0e:dd:cb:e0:93:1d:f2:b5:47:db:5d: 2b:9c:77:59:9a:b1:ab:e9:cc:71:65:b2:a0:10:98: f6:e5:9d:63:9d:b4:43:e8:91:6c:4c:f9:5f:ad:61: d7:3a:5f:a9:a1:62:35:ce:6c:0d:dd:d9:a3:98:cc: 75:10:22:9c:96:1d:ea:fd:e8:ff:81:b4:08:0e:5f: 45:06:15:bd:84:0d:30:56:29:c6:e7:f4:93:ab:9c: 49:9e:e8:fc:c2:a4:6c:82:16:7b:e4:d6:21:5b:a5: 40:4a:f4:33:3a:7e:cb:19:9d:46:74:54:2f:40:c4: 56:35:77:ca:db:2e:fe:76:f0:bd:4e:6c:f0:e1:7a: b7:d2:d7:d7:ad:a1:73:ba:67:21:eb:58:7f:ba:90: 01:b3:cb:7b:2c:33:63:1b:b6:a7:8b:30:f3:ca:6d: e2:e7:52:af:0b:a6:cb:81:00:6c:e8:13:5a:e4:b5: 15:51:84:65:a5:ab:7a:20:9c:4f:91:d4:14:2c:1e: 13:d1:5b:20:8b:fc:23:56:bc:1f:54:ea:66:20:89: 48:3c:a6:3f:1c:ce:0d:e2:c3:7f:b3:5e:06:05:07: 37:3a:8a:09:8f:b0:00:a4:83:6a:cd:31:b6:0f:5a: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:87:08:C3:74:85:79:76:66:9E:32:07:E9:86:0C:53:71:2D:CC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: 104.204.192.0/21 IPv6: 2604:1d20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d3:5b:f9:44:64:37:fe:8c:fb:e6:af:3c:0a:da:f9:7f:cc: 16:63:33:53:37:5f:c3:a6:84:50:bd:f4:ef:20:c2:f0:30:97: 2f:ab:93:3e:76:8e:52:0c:59:af:5e:3d:3e:a4:81:db:46:34: 00:ba:bf:b5:6c:88:d1:8d:2d:45:19:0c:7d:58:6e:dd:82:de: e0:78:cd:0c:0f:1a:3e:24:57:89:b2:d0:c1:1f:b9:bd:51:82: 30:df:e7:26:e6:23:93:a5:57:81:20:3c:10:78:a8:f3:de:fa: 6a:76:0b:05:b7:ab:cc:f7:4e:5f:5d:c0:4b:6e:d4:d7:c5:08: a3:eb:d1:0e:ec:0b:56:4f:8d:b9:5f:fa:b9:0c:4e:62:d2:3c: 27:e3:25:91:6a:d0:41:98:38:5a:51:02:af:a7:a3:b5:4c:fe: 7d:85:fe:73:88:f5:e4:6f:e2:52:f9:a8:c5:05:84:09:55:2a: 00:65:80:d9:15:4e:8f:30:da:9c:31:b1:d8:26:12:eb:5f:e7: 42:c5:f2:c4:5c:33:38:de:c2:da:26:13:f7:8d:6d:bc:55:d7: b1:b2:d3:b3:be:07:5b:cb:08:06:d2:a3:2c:f6:50:22:17:6e: af:66:66:8b:35:c2:5e:19:f5:79:91:35:bc:ab:3c:72:5e:59: 52:f1:b8:a0 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEy5gfnnsD+3COVM6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk Y2VlMzJmN2QtNDVlYi00MDY5LWEzMmItMTBkMDFkMmE4ZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1OoOSyAnJTMuk8iOZ42fc1ODt3L4JMd8rVH 210rnHdZmrGr6cxxZbKgEJj25Z1jnbRD6JFsTPlfrWHXOl+poWI1zmwN3dmjmMx1 ECKclh3q/ej/gbQIDl9FBhW9hA0wVinG5/STq5xJnuj8wqRsghZ75NYhW6VASvQz On7LGZ1GdFQvQMRWNXfK2y7+dvC9Tmzw4Xq30tfXraFzumch61h/upABs8t7LDNj G7anizDzym3i51KvC6bLgQBs6BNa5LUVUYRlpat6IJxPkdQULB4T0Vsgi/wjVrwf VOpmIIlIPKY/HM4N4sN/s14GBQc3OooJj7AApINqzTG2D1p6WQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEiHCMN0hXl2Zp4yB+mGDFNxLcymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvYTQ1MzYzYWMtMzhiNy0z NzY1LTlmZDItNzE5NTU3NzdmODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaMzAMA0E AgACMAcDBQAmBB0gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEvTW/lEZDf+jPvmrzwK2vl/zBZjM1M3X8Om hFC99O8gwvAwly+rkz52jlIMWa9ePT6kgdtGNAC6v7VsiNGNLUUZDH1Ybt2C3uB4 zQwPGj4kV4my0MEfub1RgjDf5ybmI5OlV4EgPBB4qPPe+mp2CwW3q8z3Tl9dwEtu 1NfFCKPr0Q7sC1ZPjblf+rkMTmLSPCfjJZFq0EGYOFpRAq+no7VM/n2F/nOI9eRv 4lL5qMUFhAlVKgBlgNkVTo8w2pwxsdgmEutf50LF8sRcMzjewtomE/eNbbxV17Gy 07O+B1vLCAbSoyz2UCIXbq9mZos1wl4Z9XmRNbyrPHJeWVLxuKA= -----END CERTIFICATE-----Generated at Mon Mar 2 12:20:17 2026 by rpki-client