$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa File: 034976f2-b73d-31c2-a41d-907be371012c.roa (raw, json) Hash identifier: 3eN5b60pObZuBuKOlJa63rpijwq6LLMq8DHA/XAu2W0= Subject key identifier: 75:BE:CC:B5:0C:6B:0A:03:4F:16:B2:C6:B8:3C:85:3D:A9:17:A4:04 Certificate issuer: /CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Certificate serial: 010D0C9F4328584D237A3092E649F3F4611FE580 Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 49791 IP address blocks: 104.167.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:30:92:e6:49:f3:f4:61:1f:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d7d06678-66bd-4cba-9336-0084aa471b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:4b:73:40:c0:6d:5f:72:d3:54:6f:26:fc: bf:13:ff:e0:4e:92:90:0d:3a:80:50:f2:23:06:3c: 64:7d:c3:e0:42:93:fa:4b:f1:5d:2a:56:84:d1:51: 24:da:63:53:b3:98:70:50:ef:48:91:bc:27:c6:52: 9c:a8:37:ad:2e:64:47:c1:66:41:cb:dc:8e:93:cb: 8b:8d:f7:d2:3f:f4:34:02:80:d4:ba:98:72:fd:83: 09:ec:cd:b4:36:50:b9:37:8b:3a:1f:20:25:15:b9: 79:8b:43:0e:dc:ee:15:97:d9:aa:4d:9d:4c:f6:a9: f5:a8:4c:a7:d3:2d:92:0c:a9:d8:26:e0:a9:07:5d: 50:26:dc:1f:ef:52:c3:39:4c:59:0c:9a:e5:7f:3c: a6:82:c8:8d:26:fc:72:be:7f:4a:66:75:a5:49:e9: 21:65:5f:6a:67:bb:25:0b:86:9f:be:0c:70:5d:2f: 42:12:7d:49:48:e8:81:e1:e0:30:a1:6c:72:a3:0a: 4f:da:6a:b3:5c:d1:c4:5e:04:2f:cb:42:34:f1:2f: 68:c0:7f:b4:97:31:11:a1:ff:37:c7:e1:b2:ae:29: 39:78:cf:12:7e:b7:ec:52:90:ca:e2:17:08:90:29: 88:6d:fb:6f:18:f3:cd:39:b1:a3:dd:ef:a7:20:64: 8e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BE:CC:B5:0C:6B:0A:03:4F:16:B2:C6:B8:3C:85:3D:A9:17:A4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/034976f2-b73d-31c2-a41d-907be371012c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl X509v3 Authority Key Identifier: keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer sbgp-ipAddrBlock: critical IPv4: 104.167.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d2:e4:73:3a:2a:42:2b:30:63:98:ac:71:1a:f3:38:1c:0e: 2c:92:4a:8f:f9:94:3e:7f:b0:00:da:76:06:ae:60:c2:94:d4: ef:ba:62:a1:56:7e:b4:e3:be:bd:7d:09:ad:5d:67:97:a3:12: 6a:a0:f1:d7:b8:ae:8f:41:f2:27:f7:b2:81:4a:8d:88:37:f4: 4b:78:ca:e8:e4:06:e4:af:33:9e:c3:b9:3c:64:6b:35:1e:0d: 4a:d6:5c:a4:fc:5d:8c:96:f7:2d:3d:65:8d:e7:6e:ae:28:8d: 42:90:20:2d:85:60:20:45:29:a9:66:2c:61:8c:6f:d2:a5:c1: 66:9f:c7:96:af:ae:71:83:fd:85:46:fe:90:17:99:f4:1d:bc: 7f:b5:95:ae:c5:1b:53:86:99:66:4a:0e:a3:14:fe:6b:eb:4e: 86:e8:a5:e4:a7:b2:8a:2d:aa:96:a7:2c:45:15:5e:50:55:88: 21:23:9a:db:b9:ab:25:c2:a9:1e:4d:59:ed:c3:09:45:82:15: ee:35:6f:1e:d5:82:06:1b:53:68:3f:a5:7e:99:55:35:9e:0f: f7:0a:97:a2:03:10:44:fa:93:b1:08:01:24:25:b4:4b:74:ea: d5:24:7e:36:c8:f5:ee:39:a0:b7:f0:af:f7:9f:f7:58:bf:84: ab:30:65:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejCS5knz9GEf5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1 ODU0MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDdkMDY2NzgtNjZiZC00Y2JhLTkzMzYtMDA4NGFhNDcxYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlBLc0DAbV9y01RvJvy/E//gTpKQDTqAUPIj BjxkfcPgQpP6S/FdKlaE0VEk2mNTs5hwUO9IkbwnxlKcqDetLmRHwWZBy9yOk8uL jffSP/Q0AoDUuphy/YMJ7M20NlC5N4s6HyAlFbl5i0MO3O4Vl9mqTZ1M9qn1qEyn 0y2SDKnYJuCpB11QJtwf71LDOUxZDJrlfzymgsiNJvxyvn9KZnWlSekhZV9qZ7sl C4afvgxwXS9CEn1JSOiB4eAwoWxyowpP2mqzXNHEXgQvy0I08S9owH+0lzERof83 x+Gyrik5eM8SfrfsUpDK4hcIkCmIbftvGPPNObGj3e+nIGSOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW+zLUMawoDTxayxrg8hT2pF6QEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvMDM0OTc2ZjItYjczZC0z MWMyLWE0MWQtOTA3YmUzNzEwMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3 NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3 MmFkNzU4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnS5HM6KkIrMGOYrHEa8zgcDiySSo/5lD5/sADadgauYMKU1O+6YqFW frTjvr19Ca1dZ5ejEmqg8de4ro9B8if3soFKjYg39Et4yujkBuSvM57DuTxkazUe DUrWXKT8XYyW9y09ZY3nbq4ojUKQIC2FYCBFKalmLGGMb9KlwWafx5avrnGD/YVG /pAXmfQdvH+1la7FG1OGmWZKDqMU/mvrTobopeSnsootqpanLEUVXlBViCEjmtu5 qyXCqR5NWe3DCUWCFe41bx7VggYbU2g/pX6ZVTWeD/cKl6IDEET6k7EIASQltEt0 6tUkfjbI9e45oLfwr/ef91i/hKswZdU= -----END CERTIFICATE-----Generated at Thu Mar 12 18:41:40 2026 by rpki-client