$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3fd8a7ad-0bf1-3168-aece-c67281664b11.roa File: 3fd8a7ad-0bf1-3168-aece-c67281664b11.roa (raw, json) Hash identifier: oX4beKVHVWY5RAocxz56WiQEEEfFlHN6eXYCTIXALiU= Subject key identifier: 1F:AE:E9:70:66:09:04:3E:13:3A:AC:8B:CB:AC:D4:DB:A9:93:C0:9D Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D6D94C8B1E61047C300E948C0 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3fd8a7ad-0bf1-3168-aece-c67281664b11.roa Signing time: Tue 07 Apr 2026 14:04:28 +0000 ROA not before: Tue 07 Apr 2026 14:04:28 +0000 ROA not after: Mon 06 Jul 2026 14:04:28 +0000 asID: 40352 IP address blocks: 104.241.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:94:c8:b1:e6:10:47:c3:00:e9:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Apr 7 14:04:28 2026 GMT Not After : Jul 6 14:04:28 2026 GMT Subject: CN=a049f5a9-5044-4d55-8686-9313665938bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:1a:16:ee:a1:08:f9:58:8e:89:dd:25:55: b9:f8:e9:ba:5b:24:e8:e1:7f:ea:bc:77:c2:f8:8f: dd:82:43:40:53:64:10:a0:02:91:f4:6d:ac:27:d1: 63:d7:ca:59:ef:0a:59:1a:d7:f9:7e:9e:b2:2d:58: a5:53:81:ed:df:04:05:bf:1d:f3:09:58:a2:0c:5a: 13:ab:36:84:60:94:a8:2d:fb:65:ff:4e:5c:a6:de: 2a:03:17:98:40:66:e5:38:a9:a8:ea:ba:6a:17:9e: d4:79:f8:47:2c:27:dc:f8:74:b6:f4:a0:13:00:56: 02:25:07:40:ab:3e:42:dc:00:aa:04:81:45:d8:f2: a8:5c:ec:4a:43:32:72:90:30:de:0f:fe:f0:c2:39: db:f9:d4:ad:22:f6:47:15:2c:39:2b:a0:35:ca:6f: 4b:cb:e8:79:1c:f5:e8:36:cd:3d:b0:e5:99:9c:50: 6b:01:06:8e:1b:3e:01:f8:f0:ed:06:99:d5:1b:7f: 64:df:4a:c2:e5:4c:d8:6a:c9:dc:97:60:7e:b4:f6: 92:d7:7d:dc:1e:df:52:ce:f3:73:ae:68:e7:8d:fc: e5:cf:51:b1:5a:15:a9:d2:da:95:4a:09:bf:e6:28: e0:6d:a1:55:89:d7:50:77:65:5c:ac:78:1b:82:83: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AE:E9:70:66:09:04:3E:13:3A:AC:8B:CB:AC:D4:DB:A9:93:C0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/3fd8a7ad-0bf1-3168-aece-c67281664b11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:54:e9:61:c8:85:7f:a4:10:e7:8a:dc:ac:26:de:8d:44:ce: 7b:15:ed:51:8c:d3:5b:dd:5d:8b:c3:c2:8a:b2:31:ed:f8:16: 4b:bf:71:d8:1a:50:63:b1:ce:62:2d:9e:90:f6:6e:2f:d4:e8: 31:3d:7e:aa:89:a5:c6:80:d1:bc:13:2f:c6:f3:97:c1:6d:b1: 7a:b5:84:8f:75:87:6c:f5:b0:95:9b:64:3c:a9:76:d6:71:16: 18:c9:8f:1d:0b:69:f8:aa:0b:ec:e5:97:53:1d:04:7a:f3:79: 74:f3:b3:ab:3b:b8:9e:6e:f7:d3:15:af:eb:af:75:9b:de:2e: c8:69:e0:5a:44:63:f4:ef:9a:aa:45:38:cd:06:d0:8f:06:fc: 23:c1:38:b7:a8:b7:81:ef:32:73:5c:03:be:b6:86:cf:f2:35: 38:8b:22:af:f7:30:ca:fd:8a:f8:7e:b5:e1:d3:78:c4:fa:9e: 97:02:0c:3e:75:49:ff:44:53:ff:75:9e:05:f3:25:68:36:0d: 69:af:a6:59:a7:c9:3e:6d:67:d3:d4:61:de:be:f5:05:c4:de: ef:33:bf:31:48:7e:c6:32:bf:93:f4:36:c9:91:32:1d:03:ca: a4:17:1d:50:20:17:f2:6e:d7:4b:32:d3:38:cf:6c:95:4c:54: 8b:51:b7:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1tlMix5hBHwwDpSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDQwNzE0MDQyOFoXDTI2MDcwNjE0MDQyOFowLzEtMCsGA1UEAxMk YTA0OWY1YTktNTA0NC00ZDU1LTg2ODYtOTMxMzY2NTkzOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy4aFu6hCPlYjondJVW5+Om6WyTo4X/qvHfC +I/dgkNAU2QQoAKR9G2sJ9Fj18pZ7wpZGtf5fp6yLVilU4Ht3wQFvx3zCViiDFoT qzaEYJSoLftl/05cpt4qAxeYQGblOKmo6rpqF57UefhHLCfc+HS29KATAFYCJQdA qz5C3ACqBIFF2PKoXOxKQzJykDDeD/7wwjnb+dStIvZHFSw5K6A1ym9Ly+h5HPXo Ns09sOWZnFBrAQaOGz4B+PDtBpnVG39k30rC5UzYasncl2B+tPaS133cHt9SzvNz rmjnjfzlz1GxWhWp0tqVSgm/5ijgbaFViddQd2VcrHgbgoOb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+u6XBmCQQ+Ezqsi8us1Nupk8CdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvM2ZkOGE3YWQtMGJmMS0z MTY4LWFlY2UtYzY3MjgxNjY0YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlU6WHIhX+kEOeK3Kwm3o1EznsV7VGM01vdXYvDwoqyMe34Fku/cdga UGOxzmItnpD2bi/U6DE9fqqJpcaA0bwTL8bzl8FtsXq1hI91h2z1sJWbZDypdtZx FhjJjx0LafiqC+zll1MdBHrzeXTzs6s7uJ5u99MVr+uvdZveLshp4FpEY/TvmqpF OM0G0I8G/CPBOLeot4HvMnNcA762hs/yNTiLIq/3MMr9ivh+teHTeMT6npcCDD51 Sf9EU/91ngXzJWg2DWmvplmnyT5tZ9PUYd6+9QXE3u8zvzFIfsYyv5P0NsmRMh0D yqQXHVAgF/Ju10sy0zjPbJVMVItRt5A= -----END CERTIFICATE-----Generated at Sat Apr 11 01:28:44 2026 by rpki-client