$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa File: bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa (raw, json) Hash identifier: JOKSkbG0T7nzEGqtqv1Hg2wNyD5a04u3g4wpOWKQ8CE= Subject key identifier: F2:A2:9A:19:5D:27:60:E4:B7:B0:10:CD:61:11:F5:26:F6:DC:D2:2E Certificate issuer: /CN=0b77bb3c-d132-4e1d-adee-58a5fd374e08 Certificate serial: 010D0C9F4328584D0A77BF6A780EBB0517E41000 Authority key identifier: 03:46:7C:16:39:4A:2F:1F:C7:C9:5B:B1:29:ED:4F:07:F8:61:48:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 401710 IP address blocks: 104.204.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:bf:6a:78:0e:bb:05:17:e4:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b77bb3c-d132-4e1d-adee-58a5fd374e08 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=4b07f8e2-edd7-4d10-88fb-1e803631b970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:aa:5d:63:77:85:af:88:6d:5b:e8:fa:7a: 62:7f:59:6a:62:b9:0d:31:b5:e1:51:f5:89:65:5c: f0:8a:de:b3:a1:7e:fc:02:d8:a0:f6:78:c7:1a:1a: 36:98:8f:4d:7e:84:ce:fa:68:e1:4c:61:3f:f4:ca: 0e:63:71:fe:8a:ca:67:89:7a:45:5c:a0:a8:ab:5e: 40:de:50:30:c6:5f:cf:0d:2e:06:df:2e:5e:2b:cc: ba:3c:f4:90:54:63:49:07:f3:a7:d0:39:aa:11:30: a9:4b:35:08:7e:00:25:97:88:65:50:44:f2:57:83: 05:ed:12:fc:25:60:28:e4:39:29:00:de:f5:84:c3: aa:d5:ad:72:2a:44:67:b8:8f:15:8c:32:e6:1c:31: 14:ee:d5:64:68:70:f8:29:33:f0:ef:43:61:82:92: e5:2a:96:ca:4d:06:05:18:af:2f:40:62:2e:cc:d5: ef:ad:dd:04:84:08:f1:ae:26:9d:79:e5:09:4c:27: 85:37:c5:6c:99:87:de:a4:f3:6e:4a:0d:a0:b2:06: a0:9b:e5:9f:06:4e:56:0a:b2:7a:17:77:6f:76:98: 9b:59:06:79:81:3e:ae:5d:9d:ef:42:a5:4b:05:97: 05:f7:78:2b:7d:2e:8d:8a:d9:2d:6e:8f:0f:d2:67: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:9A:19:5D:27:60:E4:B7:B0:10:CD:61:11:F5:26:F6:DC:D2:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/bc28aea9-4f7b-3ffb-a223-8fc9b43f6513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.crl X509v3 Authority Key Identifier: keyid:03:46:7C:16:39:4A:2F:1F:C7:C9:5B:B1:29:ED:4F:07:F8:61:48:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer sbgp-ipAddrBlock: critical IPv4: 104.204.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:77:6e:e0:80:66:0c:51:8f:22:b2:51:ae:33:48:78:2e:fc: 87:dc:30:33:56:00:40:f4:05:10:37:77:a0:ad:5b:f6:f8:bf: a8:84:ad:ad:ed:24:2f:cd:a5:33:f6:05:3e:2f:3f:f8:ee:b4: 66:d0:4d:4d:2f:3f:44:bd:fa:ec:ad:49:ae:1d:34:68:4e:e1: 5f:38:aa:80:3c:30:cd:61:a0:c1:51:0b:72:8c:cb:27:b1:21: 83:56:14:8a:55:10:02:0a:be:b2:d9:18:9e:d5:88:2f:82:3c: 9a:78:bd:b4:14:74:30:d2:b2:23:e1:71:47:1b:f9:1f:dc:19: 97:a2:a6:61:2e:65:b1:d4:de:af:7f:46:01:2d:7c:93:e1:18: 3a:18:0d:e5:c9:1c:14:ff:57:4a:7b:ed:ac:40:9f:eb:dd:1d: 08:7a:1d:c4:0e:a3:12:4a:5b:b5:a3:84:54:6e:b9:5d:e2:10: a9:68:d8:63:a2:04:bc:0b:58:e8:3e:be:01:9f:64:09:d3:2c: 6f:53:41:34:06:a7:79:8f:65:d7:13:33:67:fb:4b:49:f4:f0: e0:e1:a8:4c:3b:a7:03:23:3d:02:73:0c:e6:2a:6e:26:25:6a: 79:35:91:85:c5:82:fc:fe:0d:32:9d:67:6a:aa:5a:bb:78:02: bd:94:ec:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd79qeA67BRfkEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI3N2JiM2MtZDEzMi00ZTFkLWFkZWUtNThhNWZkMzc0 ZTA4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NGIwN2Y4ZTItZWRkNy00ZDEwLTg4ZmItMWU4MDM2MzFiOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrmqXWN3ha+IbVvo+npif1lqYrkNMbXhUfWJ ZVzwit6zoX78Atig9njHGho2mI9NfoTO+mjhTGE/9MoOY3H+ispniXpFXKCoq15A 3lAwxl/PDS4G3y5eK8y6PPSQVGNJB/On0DmqETCpSzUIfgAll4hlUETyV4MF7RL8 JWAo5DkpAN71hMOq1a1yKkRnuI8VjDLmHDEU7tVkaHD4KTPw70NhgpLlKpbKTQYF GK8vQGIuzNXvrd0EhAjxriadeeUJTCeFN8VsmYfepPNuSg2gsgagm+WfBk5WCrJ6 F3dvdpibWQZ5gT6uXZ3vQqVLBZcF93grfS6Nitktbo8P0mcKlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKimhldJ2Dkt7AQzWER9Sb23NIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYjc3 YmIzYy1kMTMyLTRlMWQtYWRlZS01OGE1ZmQzNzRlMDgvYmMyOGFlYTktNGY3Yi0z ZmZiLWEyMjMtOGZjOWI0M2Y2NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGI3N2JiM2MtZDEzMi00ZTFkLWFk ZWUtNThhNWZkMzc0ZTA4LzBiNzdiYjNjLWQxMzItNGUxZC1hZGVlLTU4YTVmZDM3 NGUwOC5jcmwwHwYDVR0jBBgwFoAUA0Z8FjlKLx/HyVuxKe1PB/hhSF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYjc3YmIzYy1kMTMyLTRlMWQtYWRlZS01OGE1 ZmQzNzRlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB3buCAZgxRjyKyUa4zSHgu/IfcMDNWAED0BRA3d6CtW/b4v6iEra3t JC/NpTP2BT4vP/jutGbQTU0vP0S9+uytSa4dNGhO4V84qoA8MM1hoMFRC3KMyyex IYNWFIpVEAIKvrLZGJ7ViC+CPJp4vbQUdDDSsiPhcUcb+R/cGZeipmEuZbHU3q9/ RgEtfJPhGDoYDeXJHBT/V0p77axAn+vdHQh6HcQOoxJKW7WjhFRuuV3iEKlo2GOi BLwLWOg+vgGfZAnTLG9TQTQGp3mPZdcTM2f7S0n08ODhqEw7pwMjPQJzDOYqbiYl ank1kYXFgvz+DTKdZ2qqWrt4Ar2U7Gc= -----END CERTIFICATE-----Generated at Wed Mar 11 13:47:09 2026 by rpki-client