$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa File: 034976f2-b73d-31c2-a41d-907be371012c.roa (raw, json) Hash identifier: JW217W4l4tMYAdNvutahQvKlVWPjwKeOsM7LUwCwtkk= Subject key identifier: B2:AE:CF:9A:F6:46:98:E5:60:4C:71:91:09:DE:25:4E:B4:07:7B:AC Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584E04360850419E38B7D952E480 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 49791 IP address blocks: 104.167.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:08:50:41:9e:38:b7:d9:52:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=f2643cbb-5cbc-48a1-abe7-f9a201d0947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:0f:e6:10:29:e9:2d:da:28:35:b1:3f:42: e8:c3:45:c4:b7:76:51:8a:49:2c:b2:7c:6b:1b:0c: d7:1b:fa:a6:0f:56:44:d5:b4:b0:8e:98:21:a8:37: b9:a9:58:ef:0e:c4:13:8a:c6:f3:f9:55:66:c3:5f: 89:87:3d:7d:be:9f:69:0b:73:af:11:c5:eb:0f:9a: 90:6b:61:4e:68:03:6c:e8:61:d4:ca:ca:97:66:31: eb:98:3f:62:73:e9:5b:86:c4:d5:df:51:2d:cb:b8: 4a:34:c2:86:69:52:b8:fd:98:b7:58:55:c0:da:69: 91:e6:52:c5:96:82:98:4b:4f:1d:64:ec:08:7c:11: e5:e0:b9:cb:e2:4c:39:a0:a3:6f:80:cb:87:87:18: 8f:15:4e:de:af:71:ee:f7:27:63:0e:d7:ed:25:9e: b0:8f:8d:12:b4:fd:bd:80:47:51:50:20:a0:f3:2d: 93:b2:28:3b:a4:ed:c0:4e:5a:27:ae:75:24:fd:e7: 46:1c:c2:bc:c3:3a:1b:fa:12:24:c5:36:64:69:5a: 96:cf:36:87:2d:b2:29:36:3e:3a:21:42:7b:8f:fd: 14:6c:14:b2:be:54:51:35:f5:57:57:3b:38:d0:bc: 02:cc:d8:85:f7:cc:99:3d:37:58:10:5e:69:9d:c2: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AE:CF:9A:F6:46:98:E5:60:4C:71:91:09:DE:25:4E:B4:07:7B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv4: 104.167.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:0e:51:4c:e6:61:7d:ea:5d:31:65:84:cb:29:60:7a:26:e1: 63:3a:f3:12:16:e5:84:38:4c:f8:82:47:af:64:ac:cc:ad:be: c7:72:07:85:75:7b:d7:4c:81:60:a6:28:d5:22:90:ca:4b:4d: 65:b2:84:68:65:7a:b5:58:c8:53:1b:bf:d1:3c:79:46:94:cb: 34:37:39:e0:c2:bb:f1:4a:fb:14:58:ad:a3:d8:15:b5:14:66: f4:fc:69:28:fc:a4:ca:5f:77:3a:8d:4d:f6:70:e0:d8:7a:ac: 8a:cf:02:b2:69:01:90:df:d6:f4:57:f3:33:a9:0c:d7:cd:16: 73:b0:c9:39:f3:fe:ce:c6:d5:4c:ee:2a:cc:80:8f:c0:01:4c: 47:86:8b:6a:1b:3c:3d:31:6e:c4:8e:a1:62:4b:88:d7:59:76: ab:6b:be:77:91:a6:a6:53:d6:8c:81:e9:c4:0f:80:df:62:09: ed:46:c2:ad:30:9c:f9:4a:52:5b:a9:88:f7:59:b6:4e:60:5a: 20:57:4d:c0:84:d9:84:c7:c3:0b:60:fb:70:e5:73:25:bf:e1: 3c:00:21:2f:0c:c0:2a:d4:75:75:a2:17:9d:40:56:52:b3:5f: ef:a8:10:3b:b6:0e:97:a7:fa:af:ee:85:af:3b:72:87:c8:54: a7:98:a7:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENghQQZ44t9lS5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZjI2NDNjYmItNWNiYy00OGExLWFiZTctZjlhMjAxZDA5NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3EP5hAp6S3aKDWxP0Low0XEt3ZRikkssnxr GwzXG/qmD1ZE1bSwjpghqDe5qVjvDsQTisbz+VVmw1+Jhz19vp9pC3OvEcXrD5qQ a2FOaANs6GHUysqXZjHrmD9ic+lbhsTV31Ety7hKNMKGaVK4/Zi3WFXA2mmR5lLF loKYS08dZOwIfBHl4LnL4kw5oKNvgMuHhxiPFU7er3Hu9ydjDtftJZ6wj40StP29 gEdRUCCg8y2Tsig7pO3ATlonrnUk/edGHMK8wzob+hIkxTZkaVqWzzaHLbIpNj46 IUJ7j/0UbBSyvlRRNfVXVzs40LwCzNiF98yZPTdYEF5pncLb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKuz5r2RpjlYExxkQneJU60B3usMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMDM0OTc2ZjItYjczZC0z MWMyLWE0MWQtOTA3YmUzNzEwMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcOUUzmYX3qXTFlhMspYHom4WM68xIW5YQ4TPiCR69krMytvsdyB4V1 e9dMgWCmKNUikMpLTWWyhGhlerVYyFMbv9E8eUaUyzQ3OeDCu/FK+xRYraPYFbUU ZvT8aSj8pMpfdzqNTfZw4Nh6rIrPArJpAZDf1vRX8zOpDNfNFnOwyTnz/s7G1Uzu KsyAj8ABTEeGi2obPD0xbsSOoWJLiNdZdqtrvneRpqZT1oyB6cQPgN9iCe1Gwq0w nPlKUlupiPdZtk5gWiBXTcCE2YTHwwtg+3DlcyW/4TwAIS8MwCrUdXWiF51AVlKz X++oEDu2Dpen+q/uha87cofIVKeYp1I= -----END CERTIFICATE-----Generated at Thu Jun 11 12:02:40 2026 by rpki-client