$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa File: ddff14cf-541a-3e8a-a9fe-11e036c29959.roa (raw, json) Hash identifier: 1OAw7MU52+ux/fhB6SrebWQTK9TMiF1WnVtgykID9d0= Subject key identifier: 32:9B:5A:2D:06:96:6A:3C:E0:AA:F0:18:0C:B8:06:9F:CC:F6:5F:57 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F4328584D237A1482F68F52A23A9A6B80 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 400304 IP address blocks: 45.59.116.0/24 maxlen: 24 66.23.193.0/24 maxlen: 24 104.36.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:14:82:f6:8f:52:a2:3a:9a:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=993550db-0cee-49bb-8123-406d6b31b42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:28:77:c5:03:31:eb:3c:cc:dc:f2:5f:e7: c9:f2:28:5e:f6:15:6d:dd:46:85:83:b0:b5:8c:2a: 8b:8e:3f:e7:7d:4d:37:e5:c3:14:4a:87:18:a6:f4: 66:37:61:ee:eb:a6:eb:ea:03:ba:d4:6e:f9:9b:c7: 15:5b:53:52:8b:00:01:6b:40:45:4c:59:8c:b5:45: cb:73:3e:cc:ec:3b:35:f6:25:70:c2:a2:c0:63:0d: 30:53:78:48:f6:b5:8e:94:42:39:5f:03:04:ef:f3: 2a:d1:23:2c:7f:45:c8:f5:3d:6a:97:71:b8:72:9a: 77:67:c9:97:8b:cc:49:85:2e:5d:7e:27:a0:ec:6e: eb:8a:42:0b:81:74:1a:f8:99:88:bc:2b:ec:ef:8b: 93:63:1c:8d:68:c7:9b:7e:b3:6f:88:62:0e:4e:48: 95:26:7a:80:a7:2e:db:39:9b:17:0f:23:66:c8:9b: 31:e1:fd:ff:37:7a:7c:e5:a7:9e:d6:42:d2:93:16: 0d:52:c4:e2:6c:d3:99:36:55:e7:67:4b:52:5a:19: 62:09:05:22:24:a0:9c:68:10:1e:81:0c:cf:93:cf: 6f:81:4d:56:cb:45:01:5b:95:ed:05:fd:02:8f:62: 37:75:84:ec:5d:8b:1e:d4:73:5b:a5:d2:06:d6:a2: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:5A:2D:06:96:6A:3C:E0:AA:F0:18:0C:B8:06:9F:CC:F6:5F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.116.0/24 66.23.193.0/24 104.36.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:33:85:ab:20:3b:0c:f3:2d:3b:fc:88:99:fa:c0:ed:7b:54: 97:56:76:d4:2c:1e:97:02:ff:ee:1b:91:32:97:a7:a3:24:ff: 51:bc:6e:99:14:98:c8:97:be:70:e1:92:e4:d8:ad:8d:5c:a7: 07:22:7d:cc:23:eb:a9:67:13:cb:27:a2:41:f0:7f:35:a9:e3: 4a:86:0e:e5:5c:33:f6:64:ec:b8:17:e6:1d:66:b2:1e:7f:8f: 05:3b:08:85:e5:25:0d:d7:5c:0e:69:a4:4e:74:3b:c0:f5:6e: d7:93:1a:fb:7f:fc:b0:21:8c:f7:11:b1:2e:81:e6:49:d7:4e: e2:74:79:aa:c6:5b:38:bc:3f:75:3e:9f:0f:ca:72:cc:23:51: e7:de:8b:96:de:eb:92:a3:2a:3a:e4:10:75:16:0c:4a:66:f5: ad:d2:72:03:9a:fd:b5:51:15:df:36:be:a0:a3:21:e9:9a:d3: 2c:5a:d5:1c:c9:61:5b:f0:22:1b:c8:ab:85:82:65:02:28:5d: ee:3b:21:2f:2c:2f:3b:c0:d5:b3:a4:a2:59:09:e8:a8:0c:98: 95:e0:2c:ed:95:9f:fe:32:ae:fd:90:54:e6:2b:2c:57:44:b1: d3:b2:64:d6:a0:67:31:9a:20:3c:f5:01:3a:d8:1b:c1:e7:65: 73:6a:b6:21 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0jehSC9o9Sojqaa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTkzNTUwZGItMGNlZS00OWJiLTgxMjMtNDA2ZDZiMzFiNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ood8UDMes8zNzyX+fJ8ihe9hVt3UaFg7C1 jCqLjj/nfU035cMUSocYpvRmN2Hu66br6gO61G75m8cVW1NSiwABa0BFTFmMtUXL cz7M7Ds19iVwwqLAYw0wU3hI9rWOlEI5XwME7/Mq0SMsf0XI9T1ql3G4cpp3Z8mX i8xJhS5dfieg7G7rikILgXQa+JmIvCvs74uTYxyNaMebfrNviGIOTkiVJnqApy7b OZsXDyNmyJsx4f3/N3p85aee1kLSkxYNUsTibNOZNlXnZ0tSWhliCQUiJKCcaBAe gQzPk89vgU1Wy0UBW5XtBf0Cj2I3dYTsXYse1HNbpdIG1qLzawIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDKbWi0Glmo84KrwGAy4Bp/M9l9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGRmZjE0Y2YtNTQxYS0z ZThhLWE5ZmUtMTFlMDM2YzI5OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALTt0AwQA QhfBAwQCaCRUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFkzhasgOwzzLTv8iJn6wO17VJdWdtQsHpcC/+4b kTKXp6Mk/1G8bpkUmMiXvnDhkuTYrY1cpwcifcwj66lnE8snokHwfzWp40qGDuVc M/Zk7LgX5h1msh5/jwU7CIXlJQ3XXA5ppE50O8D1bteTGvt//LAhjPcRsS6B5knX TuJ0earGWzi8P3U+nw/KcswjUefei5be65KjKjrkEHUWDEpm9a3ScgOa/bVRFd82 vqCjIema0yxa1RzJYVvwIhvIq4WCZQIoXe47IS8sLzvA1bOkolkJ6KgMmJXgLO2V n/4yrv2QVOYrLFdEsdOyZNagZzGaIDz1ATrYG8HnZXNqtiE= -----END CERTIFICATE-----Generated at Fri Mar 13 00:17:53 2026 by rpki-client