$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa File: 77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa (raw, json) Hash identifier: tHJ6OQtPLNJb7wJzYcXJUMUNbzHrJA1v8Y2KwlqaiXk= Subject key identifier: B2:AD:0B:E6:40:2D:E4:34:80:42:32:46:9A:7B:5D:E8:5A:3A:67:98 Certificate issuer: /CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8 Certificate serial: 010D0C9F4328584D1F4A20ED3CF21B08BF040F00 Authority key identifier: B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 3128 IP address blocks: 137.104.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:20:ed:3c:f2:1b:08:bf:04:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=b7f01737-bfe8-43ca-896c-d7666a95531b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5b:e9:97:6d:b1:23:5b:fd:77:0a:0e:7f:68: 2d:0f:66:df:4c:7a:2a:9b:bf:72:0f:36:1c:b6:a8: 27:c0:99:d2:2a:68:79:02:14:29:c4:96:fb:fe:a2: 3b:93:42:e9:50:e9:b1:2e:84:65:25:20:9e:9c:ea: 6c:c9:55:75:07:b9:7e:90:94:de:84:41:04:36:10: 20:f4:fe:2c:64:79:c4:d3:a5:79:b4:d8:43:1b:f8: f0:e1:b7:63:56:57:80:37:5a:d3:ae:17:1d:c8:35: a0:d0:f8:5e:cf:06:ac:5e:5b:09:ed:eb:65:45:91: 8f:2b:5a:ed:1d:23:42:72:36:65:5f:78:b8:9a:a8: 4c:2a:14:68:ac:9d:1e:33:63:05:a6:0a:34:73:7c: 51:50:6b:2c:82:6c:df:ea:ff:7c:f3:04:18:d4:aa: 46:be:02:e6:93:6e:c8:f3:3a:04:98:a5:b5:42:05: 9c:5c:41:d5:ae:4b:51:70:ae:cf:3c:b6:a1:fa:e7: f5:25:de:90:f7:e2:cb:58:13:ac:c2:b8:02:09:ae: 15:98:eb:1f:f5:f8:8b:be:c7:4e:c8:a1:2e:d9:25: a0:ee:37:d1:9e:29:d2:e6:be:54:2b:be:5f:35:68: 84:fd:3e:22:b9:d4:bc:bc:32:ce:91:4e:12:1a:7b: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AD:0B:E6:40:2D:E4:34:80:42:32:46:9A:7B:5D:E8:5A:3A:67:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.crl X509v3 Authority Key Identifier: keyid:B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer sbgp-ipAddrBlock: critical IPv4: 137.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:eb:1d:03:9f:d2:72:3c:a2:6d:f6:c6:30:55:c4:4e:d6:df: bd:6f:9c:d8:db:e9:08:bc:57:6c:b3:55:0a:04:13:51:43:ac: fe:6a:86:0e:07:91:f6:16:db:1e:c7:16:e4:57:a3:de:b2:d8: 9e:77:64:9e:9b:60:e3:37:c2:2e:1a:4c:20:1c:dc:dd:f2:f4: 39:8a:e0:43:85:be:64:d4:e8:fb:c7:c1:27:3a:94:a6:fc:51: 26:36:5d:0e:30:d2:eb:4a:f5:69:de:f6:99:5c:07:3e:e7:a3: 7e:5f:90:f6:16:7f:10:40:f1:8a:1a:f1:49:c6:d4:1e:e6:c4: 04:23:08:4b:69:52:09:38:d5:98:9f:bf:17:4b:27:7a:7b:91: d4:ac:2e:1b:a9:c4:45:b5:42:20:cc:55:d5:35:d7:b6:35:39: 31:d4:cd:67:8b:67:53:76:62:b7:a4:d7:fc:13:3f:3c:da:79: 01:07:5a:ea:95:ef:90:77:7d:08:9a:fe:77:91:49:4f:97:3a: 32:91:71:9e:81:0e:e3:bc:b6:94:09:d5:91:93:37:e7:dc:ad: f1:31:af:79:33:79:cb:24:91:4c:4c:37:8b:bd:63:3a:12:e0: 7f:37:e0:16:db:56:e1:4f:01:d2:28:1c:0a:67:f5:99:de:4a: 8b:b7:52:fe -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0fSiDtPPIbCL8EDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ3YWNiNjktMjFlYS00ZmQyLWEyNWQtZmZjYmVkMmFm OGQ4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YjdmMDE3MzctYmZlOC00M2NhLTg5NmMtZDc2NjZhOTU1MzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklvpl22xI1v9dwoOf2gtD2bfTHoqm79yDzYc tqgnwJnSKmh5AhQpxJb7/qI7k0LpUOmxLoRlJSCenOpsyVV1B7l+kJTehEEENhAg 9P4sZHnE06V5tNhDG/jw4bdjVleAN1rTrhcdyDWg0PhezwasXlsJ7etlRZGPK1rt HSNCcjZlX3i4mqhMKhRorJ0eM2MFpgo0c3xRUGssgmzf6v988wQY1KpGvgLmk27I 8zoEmKW1QgWcXEHVrktRcK7PPLah+uf1Jd6Q9+LLWBOswrgCCa4VmOsf9fiLvsdO yKEu2SWg7jfRninS5r5UK75fNWiE/T4iudS8vDLOkU4SGnvKVwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLKtC+ZALeQ0gEIyRpp7XehaOmeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZDdh Y2I2OS0yMWVhLTRmZDItYTI1ZC1mZmNiZWQyYWY4ZDgvNzdmYTcwZmUtMjljOC0z ZWI4LWJiYTItOGRmYTg5MGQ5MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmQ3YWNiNjktMjFlYS00ZmQyLWEy NWQtZmZjYmVkMmFmOGQ4LzJkN2FjYjY5LTIxZWEtNGZkMi1hMjVkLWZmY2JlZDJh ZjhkOC5jcmwwHwYDVR0jBBgwFoAUs4G1dZQ1drj1JChM98XBvBht9b0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZDdhY2I2OS0yMWVhLTRmZDItYTI1ZC1mZmNi ZWQyYWY4ZDguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiWgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMesdA5/ScjyibfbGMFXETtbfvW+c2NvpCLxXbLNVCgQTUUOs/mqGDgeR 9hbbHscW5Fej3rLYnndknptg4zfCLhpMIBzc3fL0OYrgQ4W+ZNTo+8fBJzqUpvxR JjZdDjDS60r1ad72mVwHPuejfl+Q9hZ/EEDxihrxScbUHubEBCMIS2lSCTjVmJ+/ F0snenuR1KwuG6nERbVCIMxV1TXXtjU5MdTNZ4tnU3Zit6TX/BM/PNp5AQda6pXv kHd9CJr+d5FJT5c6MpFxnoEO47y2lAnVkZM359yt8TGveTN5yySRTEw3i71jOhLg fzfgFttW4U8B0igcCmf1md5Ki7dS/g== -----END CERTIFICATE-----Generated at Mon Mar 16 13:50:56 2026 by rpki-client