$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa File: 3a434729-cac5-3196-b991-47e7685c7e69.roa (raw, json) Hash identifier: BFZVTu7GxiGLXXzYYO1b3Nj5ON4sLS5t1gGO/v7GRL0= Subject key identifier: B7:31:6D:57:62:69:E7:98:B4:76:E3:C8:53:85:B8:97:5C:18:7D:A6 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584D1F4A73A6EBA672E626E2CF20 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36040 IP address blocks: 104.237.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:73:a6:eb:a6:72:e6:26:e2:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5824cde5-b669-441b-87ac-c61c64085d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fb:84:e7:f1:06:e5:d4:6d:7f:6f:e0:70:72: 1e:c9:04:03:a2:23:1f:73:e9:d5:ad:32:41:35:f8: 3d:3b:31:72:ff:35:c3:a8:5f:ac:fe:14:b0:0c:cc: 5c:1e:ba:f3:53:a8:66:c2:c4:1f:8d:95:8c:8c:b1: 0c:ee:bd:3b:d8:72:4f:77:2c:ed:91:92:29:8b:db: 33:3f:22:51:08:19:b0:9d:6a:9d:dc:94:cc:44:ff: aa:17:20:e2:84:c4:45:dd:0f:78:48:44:0e:e2:ca: 6d:83:e1:66:80:5d:7c:97:c5:cc:60:7f:e0:b2:91: 89:6a:a9:fd:68:3b:00:a3:a5:8f:25:56:d1:02:8d: 9b:1c:06:ea:6a:b5:7d:30:71:d7:4b:2c:f3:74:33: 3f:a7:f8:98:c2:17:49:59:ed:97:09:6a:31:96:40: 8d:18:48:45:42:1f:9b:34:1f:b2:57:e8:9c:28:d3: ce:d8:1b:28:9e:40:ec:42:42:79:cb:a9:85:32:39: b2:32:62:e4:5b:2e:0f:b5:f2:10:12:ea:0d:84:8f: fc:95:1b:0d:3e:29:f5:6d:5a:4b:f4:22:86:9e:56: 0e:25:f3:f2:e0:c5:4f:0d:fd:f3:52:c2:45:1d:3f: a0:86:8f:3c:ee:5d:2c:da:fd:e6:05:d1:5a:e6:f3: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:31:6D:57:62:69:E7:98:B4:76:E3:C8:53:85:B8:97:5C:18:7D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9e:f2:aa:c4:44:fb:e5:4b:6c:b5:a3:af:fb:a3:df:ea:f1: 18:7a:6f:b3:17:0a:b6:2e:0b:0d:27:e0:65:f3:a8:a4:a8:5b: 37:29:63:24:d4:03:82:98:6d:c8:7e:c9:8c:8b:5b:6c:ed:49: 81:b7:6d:f3:99:9b:84:7c:d0:2c:dc:31:da:1f:39:5c:d5:2f: 3f:1e:2a:bd:8c:8a:20:b2:9a:4e:a5:b2:7b:fc:9c:c3:34:49: 6f:8f:46:8a:61:21:c8:29:45:6a:4b:5e:82:93:52:63:71:bb: a0:2d:44:8b:b9:52:8a:ee:01:63:bc:aa:68:32:a6:f2:b9:d5: 44:62:cd:c1:31:7f:3c:54:ea:92:44:95:9f:f1:fd:a1:26:14: c6:93:7c:7a:62:cf:45:43:fd:4f:5a:df:19:d1:a9:4e:85:ad: d3:8e:9e:55:25:93:15:3a:06:01:db:da:07:33:e2:97:d1:ef: fc:58:92:e5:1d:04:fa:92:5f:9a:11:d2:d7:af:06:76:87:36: 68:92:0c:e8:ad:9d:90:2f:28:5d:d2:ce:ec:e4:07:b4:37:94: ae:4f:92:8f:6b:75:32:85:18:84:4c:7c:ea:f0:3d:d1:f9:df: bf:87:f3:f6:21:32:4f:d2:59:7d:32:4b:8f:4f:fd:90:1b:fb: b4:64:b7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnOm66Zy5ibizyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NTgyNGNkZTUtYjY2OS00NDFiLTg3YWMtYzYxYzY0MDg1ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPuE5/EG5dRtf2/gcHIeyQQDoiMfc+nVrTJB Nfg9OzFy/zXDqF+s/hSwDMxcHrrzU6hmwsQfjZWMjLEM7r072HJPdyztkZIpi9sz PyJRCBmwnWqd3JTMRP+qFyDihMRF3Q94SEQO4sptg+FmgF18l8XMYH/gspGJaqn9 aDsAo6WPJVbRAo2bHAbqarV9MHHXSyzzdDM/p/iYwhdJWe2XCWoxlkCNGEhFQh+b NB+yV+icKNPO2BsonkDsQkJ5y6mFMjmyMmLkWy4PtfIQEuoNhI/8lRsNPin1bVpL 9CKGnlYOJfPy4MVPDf3zUsJFHT+gho887l0s2v3mBdFa5vM+EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcxbVdiaeeYtHbjyFOFuJdcGH2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvM2E0MzQ3MjktY2FjNS0z MTk2LWI5OTEtNDdlNzY4NWM3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqe8qrERPvlS2y1o6/7o9/q8Rh6b7MXCrYuCw0n4GXzqKSoWzcpYyTU A4KYbch+yYyLW2ztSYG3bfOZm4R80CzcMdofOVzVLz8eKr2MiiCymk6lsnv8nMM0 SW+PRophIcgpRWpLXoKTUmNxu6AtRIu5UoruAWO8qmgypvK51URizcExfzxU6pJE lZ/x/aEmFMaTfHpiz0VD/U9a3xnRqU6FrdOOnlUlkxU6BgHb2gcz4pfR7/xYkuUd BPqSX5oR0tevBnaHNmiSDOitnZAvKF3SzuzkB7Q3lK5Pko9rdTKFGIRMfOrwPdH5 37+H8/YhMk/SWX0yS49P/ZAb+7RktyQ= -----END CERTIFICATE-----Generated at Thu Mar 19 01:57:25 2026 by rpki-client