$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa File: f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa (raw, json) Hash identifier: 4tYj9KvI02GPdIiI2g59tz0zrxhdYFXB8z4oYx/T99E= Subject key identifier: 7F:B9:14:2F:66:1F:20:0F:DA:1C:6F:84:57:B8:0A:B8:F1:B6:EE:8E Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584D492A6F3880A6D1AF1FE868E0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 5645 IP address blocks: 104.246.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6f:38:80:a6:d1:af:1f:e8:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=bb744c3f-32bc-41cf-8c1c-84181645b81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dd:d7:59:09:53:a5:87:a3:29:4d:79:db:91: 9e:f0:16:ac:ae:ea:f1:3c:89:62:7d:0b:a0:40:d2: 30:fe:7f:7c:22:b4:95:17:9e:4e:1e:d1:ad:ce:c1: 07:cd:2b:15:3f:4f:0e:83:2f:fd:dc:f9:15:70:87: f3:81:78:eb:e7:4c:09:f9:70:6a:01:f8:9a:74:59: 55:7b:20:31:bd:08:f0:7f:38:68:fb:9d:ad:d4:5a: 52:2c:32:ae:df:74:f9:6d:74:9e:c2:e1:e7:2b:f8: 6b:e8:f5:95:bc:27:df:f5:98:02:b2:52:e2:fa:47: d6:65:bd:89:c6:74:67:c0:98:52:a6:6c:9e:2d:2f: 6d:88:74:2e:bd:48:3b:82:21:ff:18:73:6e:a2:c2: 53:d4:27:60:d0:0d:49:e1:02:67:33:66:69:77:6f: 33:9e:a4:cd:08:5b:df:55:6c:ac:a4:f1:11:62:27: d0:89:ff:82:4a:cb:43:ba:ab:e5:43:69:24:4a:05: 42:5b:52:1e:48:ca:fe:6b:bd:ba:35:fa:ac:54:85: 78:da:bd:a0:60:f3:b9:e2:2c:77:ee:3b:2d:72:dd: a7:e1:a1:3b:03:d6:22:fe:33:f3:7f:ca:5b:48:ef: a7:19:14:d6:fe:bb:e3:97:f1:e8:dd:6b:e0:64:82: f3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:14:2F:66:1F:20:0F:DA:1C:6F:84:57:B8:0A:B8:F1:B6:EE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/f0bf09cb-0ba6-3f0d-85d9-d21a4cb85376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 104.246.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:70:20:f5:23:a0:0c:ec:10:fe:bf:8c:98:20:d9:02:e3:4d: c3:ca:d7:da:51:74:4c:d9:66:5e:79:cd:67:b6:a5:fc:64:79: 16:c9:26:43:d6:73:72:96:23:a3:f9:29:8d:3f:23:ec:a9:22: 9a:5f:ea:66:d2:ba:49:13:58:4d:c7:88:3a:1e:39:3c:53:c8: ef:ce:7d:c0:17:95:13:4e:b7:ef:b4:d6:60:a3:48:d5:a9:fa: 3e:ca:f7:ac:ff:74:70:04:44:c7:32:56:0d:98:d7:68:60:8e: 8b:94:7f:c5:0a:d0:92:46:3b:94:74:f3:82:49:ea:e4:8f:59: f8:92:7f:be:cc:c0:25:70:bb:cc:d5:fb:db:7d:58:f6:99:ad: 19:97:87:ae:66:9a:6b:ea:ec:43:30:55:68:b4:85:51:cf:5e: 36:f3:1e:2d:f1:f4:53:3b:60:c5:0f:aa:74:92:35:df:ce:07: 50:ef:86:44:00:6c:11:03:32:56:c3:89:e1:bd:bd:ff:03:b6: 81:66:78:8e:f6:36:21:aa:64:eb:e0:1a:4b:35:0b:66:7c:e9: 2f:cb:92:3a:30:89:75:bf:ad:7f:51:ed:79:0d:7e:a9:bc:dd: 3b:0e:30:5e:7b:ab:c4:e6:25:13:2b:7e:d4:37:91:8a:08:a9: 58:3f:0d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKm84gKbRrx/oaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YmI3NDRjM2YtMzJiYy00MWNmLThjMWMtODQxODE2NDViODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk93XWQlTpYejKU1525Ge8BasrurxPIlifQug QNIw/n98IrSVF55OHtGtzsEHzSsVP08Ogy/93PkVcIfzgXjr50wJ+XBqAfiadFlV eyAxvQjwfzho+52t1FpSLDKu33T5bXSewuHnK/hr6PWVvCff9ZgCslLi+kfWZb2J xnRnwJhSpmyeLS9tiHQuvUg7giH/GHNuosJT1Cdg0A1J4QJnM2Zpd28znqTNCFvf VWyspPERYifQif+CSstDuqvlQ2kkSgVCW1IeSMr+a726NfqsVIV42r2gYPO54ix3 7jstct2n4aE7A9Yi/jPzf8pbSO+nGRTW/rvjl/Ho3WvgZILzpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+5FC9mHyAP2hxvhFe4Crjxtu6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZjBiZjA5Y2ItMGJhNi0z ZjBkLTg1ZDktZDIxYTRjYjg1Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1wIPUjoAzsEP6/jJgg2QLjTcPK19pRdEzZZl55zWe2pfxkeRbJJkPW c3KWI6P5KY0/I+ypIppf6mbSukkTWE3HiDoeOTxTyO/OfcAXlRNOt++01mCjSNWp +j7K96z/dHAERMcyVg2Y12hgjouUf8UK0JJGO5R084JJ6uSPWfiSf77MwCVwu8zV +9t9WPaZrRmXh65mmmvq7EMwVWi0hVHPXjbzHi3x9FM7YMUPqnSSNd/OB1DvhkQA bBEDMlbDieG9vf8DtoFmeI72NiGqZOvgGks1C2Z86S/LkjowiXW/rX9R7XkNfqm8 3TsOMF57q8TmJRMrftQ3kYoIqVg/Dck= -----END CERTIFICATE-----Generated at Wed Mar 25 18:19:07 2026 by rpki-client