$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa File: 3c3380ea-82d4-3054-9c73-9089c1d05edf.roa (raw, json) Hash identifier: a/THFWVxwNQjg8/oXQ2iZqB/8IVCFwA5gs//rKsuGMg= Subject key identifier: E4:A1:F6:5C:BE:D0:D2:97:0F:43:0E:A0:1A:C9:11:0D:72:6B:F5:4A Certificate issuer: /CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60 Certificate serial: 010D0C9F4328584D60E4FC0D10399F573D41E500 Authority key identifier: 30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 19116 IP address blocks: 104.245.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:fc:0d:10:39:9f:57:3d:41:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=b0ae0035-9397-4885-b0c6-46072ff6ec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:18:b8:e5:b3:ce:6d:33:a1:ab:4d:c4:8a: d8:95:09:96:74:bd:7d:d1:2a:19:db:67:ab:ef:25: bb:35:46:f6:5f:23:d6:73:9f:1b:55:1f:a7:5c:d2: 7c:3b:40:12:2a:ce:9b:c6:c1:cc:db:49:23:36:6c: ab:1f:8c:f6:f8:45:1a:08:1f:e3:f4:f0:87:ec:d5: 92:b8:af:ec:ea:b7:9f:db:9e:54:07:c3:83:35:aa: 65:4c:24:9e:a7:9b:d4:3a:fe:65:06:2d:f9:45:33: 21:36:00:90:40:4a:17:6d:78:3e:6a:f9:9c:1c:98: 5f:50:91:12:3a:9b:82:ba:ad:cd:92:a4:9f:19:18: 05:e8:6f:7b:93:fb:5e:00:4b:74:76:a0:cd:bd:60: 58:05:66:83:21:62:57:a4:39:cc:1c:47:6c:e0:96: 5d:cd:79:24:1c:5f:d4:89:72:0d:d1:4e:19:bb:86: cb:95:2c:5d:c3:d3:2b:02:b3:c1:20:ec:ab:0a:45: 58:34:6c:63:c5:38:31:a4:37:f8:b9:e0:db:40:f0: 15:73:64:d9:e8:7b:a4:dd:ff:d9:ce:ac:f8:c9:bc: 89:99:57:a5:9c:81:f4:ba:1a:ff:8e:aa:da:75:af: 2b:17:39:92:f7:dc:5c:de:f1:0c:4e:a9:5d:2a:94: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A1:F6:5C:BE:D0:D2:97:0F:43:0E:A0:1A:C9:11:0D:72:6B:F5:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3c3380ea-82d4-3054-9c73-9089c1d05edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl X509v3 Authority Key Identifier: keyid:30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer sbgp-ipAddrBlock: critical IPv4: 104.245.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:48:ce:ff:10:3c:5b:08:a9:6b:52:84:cd:11:9d:90:5f:1e: 42:97:58:9d:9a:73:c2:17:58:b7:44:98:f4:ff:f0:ad:50:b6: 8e:f7:f5:ba:e9:2f:a7:cc:60:b4:c5:20:5e:43:a6:6d:32:26: bf:c8:10:19:e8:9b:96:1b:c4:5e:e5:4c:18:1a:14:c3:2b:77: 2c:d5:73:d8:0e:b4:20:4c:e8:93:32:ae:85:73:dd:9a:e9:57: b6:0b:e2:e2:bb:8c:f8:74:f2:b0:81:40:7c:92:11:e1:76:cf: 4b:76:36:52:9f:03:31:2a:b2:3a:a7:e5:ec:58:6f:93:6f:75: 88:a7:84:49:a4:70:b9:ad:24:51:40:86:b7:98:5e:ca:70:60: e7:99:a4:ac:96:48:35:4c:c1:02:81:10:c2:30:2f:49:40:8e: 22:1c:44:dc:05:61:54:52:ee:76:73:ad:4a:18:8c:48:3e:4e: 7c:e9:88:25:f8:70:28:2e:2b:40:86:8a:75:bd:0a:11:63:60: bd:73:30:fc:ee:76:a6:ee:16:3f:82:36:36:69:42:e0:62:38: ef:bf:c5:8a:1e:6e:72:fd:bb:54:14:da:89:a1:ac:15:7a:a3: 40:db:77:dd:42:a1:af:d2:d1:90:7b:ed:13:9c:de:f5:2c:37: 26:50:0b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PwNEDmfVz1B5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E3NDNmZGMtZGQ4NC00ZWQyLTk2MTQtNGQ5MmQzMDZm YTYwMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YjBhZTAwMzUtOTM5Ny00ODg1LWIwYzYtNDYwNzJmZjZlYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAoYuOWzzm0zoatNxIrYlQmWdL190SoZ22er 7yW7NUb2XyPWc58bVR+nXNJ8O0ASKs6bxsHM20kjNmyrH4z2+EUaCB/j9PCH7NWS uK/s6ref255UB8ODNaplTCSep5vUOv5lBi35RTMhNgCQQEoXbXg+avmcHJhfUJES OpuCuq3NkqSfGRgF6G97k/teAEt0dqDNvWBYBWaDIWJXpDnMHEds4JZdzXkkHF/U iXIN0U4Zu4bLlSxdw9MrArPBIOyrCkVYNGxjxTgxpDf4ueDbQPAVc2TZ6Huk3f/Z zqz4ybyJmVelnIH0uhr/jqrada8rFzmS99xc3vEMTqldKpTUIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSh9ly+0NKXD0MOoBrJEQ1ya/VKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYTc0 M2ZkYy1kZDg0LTRlZDItOTYxNC00ZDkyZDMwNmZhNjAvM2MzMzgwZWEtODJkNC0z MDU0LTljNzMtOTA4OWMxZDA1ZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E3NDNmZGMtZGQ4NC00ZWQyLTk2 MTQtNGQ5MmQzMDZmYTYwLzNhNzQzZmRjLWRkODQtNGVkMi05NjE0LTRkOTJkMzA2 ZmE2MC5jcmwwHwYDVR0jBBgwFoAUMFk9zZsN2T/Z9wGFZt+rgY3E4eowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYTc0M2ZkYy1kZDg0LTRlZDItOTYxNC00ZDky ZDMwNmZhNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBIzv8QPFsIqWtShM0RnZBfHkKXWJ2ac8IXWLdEmPT/8K1Qto739brp L6fMYLTFIF5Dpm0yJr/IEBnom5YbxF7lTBgaFMMrdyzVc9gOtCBM6JMyroVz3Zrp V7YL4uK7jPh08rCBQHySEeF2z0t2NlKfAzEqsjqn5exYb5NvdYinhEmkcLmtJFFA hreYXspwYOeZpKyWSDVMwQKBEMIwL0lAjiIcRNwFYVRS7nZzrUoYjEg+TnzpiCX4 cCguK0CGinW9ChFjYL1zMPzudqbuFj+CNjZpQuBiOO+/xYoebnL9u1QU2omhrBV6 o0Dbd91Coa/S0ZB77ROc3vUsNyZQCyM= -----END CERTIFICATE-----Generated at Mon Apr 13 08:50:59 2026 by rpki-client