$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/7d2df7c2-e0df-36d2-a404-74bdce5efa3d.roa File: 7d2df7c2-e0df-36d2-a404-74bdce5efa3d.roa (raw, json) Hash identifier: AhjWkb3dfW42cH3VBOxzzq0xpynnH2DQBEEiTyOQH5g= Subject key identifier: 59:2A:25:AA:36:73:6A:F3:50:BC:F3:DE:1E:21:DA:28:B7:C3:46:F4 Certificate issuer: /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Certificate serial: 010D0C9F4328584D4C51EABE0478D7344C3C67C0 Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/7d2df7c2-e0df-36d2-a404-74bdce5efa3d.roa Signing time: Thu 26 Mar 2026 16:08:04 +0000 ROA not before: Thu 26 Mar 2026 16:08:04 +0000 ROA not after: Wed 24 Jun 2026 16:08:04 +0000 asID: 398478 IP address blocks: 104.219.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:51:ea:be:04:78:d7:34:4c:3c:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d Validity Not Before: Mar 26 16:08:04 2026 GMT Not After : Jun 24 16:08:04 2026 GMT Subject: CN=a055791c-b05c-4a9e-b889-7ad96ec6b977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:61:a2:ae:c5:a0:00:a3:de:68:cd:55:75: 82:8b:29:9d:7d:c8:1c:90:80:ba:2a:73:a6:a4:1c: d0:0b:27:be:b3:ed:be:7a:0c:05:8a:7e:c0:cf:38: 1f:b2:11:3a:dc:a7:d9:8a:78:a9:9c:08:0c:00:65: a3:79:c0:31:a3:6c:78:28:f6:c8:5e:c1:c6:dc:ce: cb:a3:5c:c8:23:36:b1:89:ce:b6:25:42:78:a1:11: cf:63:a0:52:f5:87:d7:ac:91:12:ea:a9:68:51:6b: 69:13:d0:33:9b:63:0e:7e:7b:e6:91:a8:27:42:37: f4:ed:31:9c:42:8e:49:4d:95:dc:38:95:fd:4d:9b: b8:76:70:5d:54:69:e2:ec:14:dc:bd:3f:30:20:3c: 1d:09:08:aa:39:3b:b2:23:7f:95:53:60:01:aa:f2: 99:d8:b6:05:c1:8e:43:b1:26:61:17:16:17:27:0e: d9:cc:e1:29:93:e4:bc:a6:61:b4:f5:97:2e:50:b4: 19:4f:a3:36:ba:87:c1:86:ee:09:2e:d8:7c:5a:70: 77:a6:a4:33:b6:cc:a4:1d:3e:ef:51:db:41:d2:1b: 0b:66:ff:72:93:69:88:3d:77:42:cd:13:17:c7:70: 77:17:7b:db:24:e5:b0:9b:f5:23:e8:7e:e6:46:ac: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2A:25:AA:36:73:6A:F3:50:BC:F3:DE:1E:21:DA:28:B7:C3:46:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/7d2df7c2-e0df-36d2-a404-74bdce5efa3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl X509v3 Authority Key Identifier: keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer sbgp-ipAddrBlock: critical IPv4: 104.219.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5e:bd:37:81:72:b6:2e:3f:53:fe:b1:9f:2f:14:09:74:47: aa:da:5e:71:ef:64:5f:ca:f9:c2:b7:e0:4a:90:8a:90:9e:e1: 30:32:d5:d2:22:fb:6f:28:19:c4:03:d2:34:95:c1:02:65:71: 38:d2:aa:5d:59:fb:f4:1f:a6:0e:fc:19:5d:fc:1d:83:47:50: 20:34:c8:e4:32:89:4a:1a:55:f8:d1:c4:29:bf:18:02:19:44: 78:cd:26:c7:89:5b:e8:2e:ca:83:07:c1:60:21:5e:fd:27:d3: d4:8c:2d:4a:78:08:13:ca:e2:37:81:9e:01:4f:d2:46:03:70: b9:a0:6d:7c:9e:85:ba:bc:22:b0:cb:bb:31:63:b6:dc:7d:cb: 74:71:dc:9a:23:f6:ad:31:ab:6b:f4:ac:28:10:5b:c5:f0:68: bb:43:4c:59:7e:99:26:aa:05:10:4e:b5:0a:9b:a6:93:12:de: ac:bd:01:a8:f3:16:fd:c4:88:ba:ec:b3:02:c5:4d:5b:07:68: 43:cb:2a:a8:43:8e:17:58:cf:df:6e:0b:c2:e1:d1:c6:99:36: 14:19:48:2f:89:42:e8:a0:3c:68:e6:c0:f7:be:f7:db:0a:b8: 45:fb:b1:f2:59:df:d6:70:df:de:7c:8f:13:51:e7:30:1a:7b: cd:b8:d2:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1MUeq+BHjXNEw8Z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNiM2ZjZDktZjkwZC00ZjIwLTk2ZWMtZDRkMzI4NTE3 YzBkMB4XDTI2MDMyNjE2MDgwNFoXDTI2MDYyNDE2MDgwNFowLzEtMCsGA1UEAxMk YTA1NTc5MWMtYjA1Yy00YTllLWI4ODktN2FkOTZlYzZiOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeZhoq7FoACj3mjNVXWCiymdfcgckIC6KnOm pBzQCye+s+2+egwFin7AzzgfshE63KfZinipnAgMAGWjecAxo2x4KPbIXsHG3M7L o1zIIzaxic62JUJ4oRHPY6BS9YfXrJES6qloUWtpE9Azm2MOfnvmkagnQjf07TGc Qo5JTZXcOJX9TZu4dnBdVGni7BTcvT8wIDwdCQiqOTuyI3+VU2ABqvKZ2LYFwY5D sSZhFxYXJw7ZzOEpk+S8pmG09ZcuULQZT6M2uofBhu4JLth8WnB3pqQztsykHT7v UdtB0hsLZv9yk2mIPXdCzRMXx3B3F3vbJOWwm/Uj6H7mRqygdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkqJao2c2rzULzz3h4h2ii3w0b0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82M2Iz ZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQzMjg1MTdjMGQvN2QyZGY3YzItZTBkZi0z NmQyLWE0MDQtNzRiZGNlNWVmYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjNiM2ZjZDktZjkwZC00ZjIwLTk2 ZWMtZDRkMzI4NTE3YzBkLzYzYjNmY2Q5LWY5MGQtNGYyMC05NmVjLWQ0ZDMyODUx N2MwZC5jcmwwHwYDVR0jBBgwFoAU85szvqOxj6FrnsAlnz3NKvxiOA0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82M2IzZmNkOS1mOTBkLTRmMjAtOTZlYy1kNGQz Mjg1MTdjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1evTeBcrYuP1P+sZ8vFAl0R6raXnHvZF/K+cK34EqQipCe4TAy1dIi +28oGcQD0jSVwQJlcTjSql1Z+/Qfpg78GV38HYNHUCA0yOQyiUoaVfjRxCm/GAIZ RHjNJseJW+guyoMHwWAhXv0n09SMLUp4CBPK4jeBngFP0kYDcLmgbXyehbq8IrDL uzFjttx9y3Rx3Joj9q0xq2v0rCgQW8XwaLtDTFl+mSaqBRBOtQqbppMS3qy9Aajz Fv3EiLrsswLFTVsHaEPLKqhDjhdYz99uC8Lh0caZNhQZSC+JQuigPGjmwPe+99sK uEX7sfJZ39Zw3958jxNR5zAae8240mk= -----END CERTIFICATE-----Generated at Sat Mar 28 06:08:18 2026 by rpki-client