$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa File: 1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa (raw, json) Hash identifier: fM73+34kYWa0oUChonNxxDSuN14+iDllUOsB0BY8NWQ= Subject key identifier: 49:8E:8C:B1:10:DB:4A:C5:47:48:AB:B4:DB:6B:79:1A:6E:06:D0:53 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D925A82BCA77E22C479C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:92:5a:82:bc:a7:7e:22:c4:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=2ba6988b-9bac-4eb3-8209-8478f5035b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a8:59:6e:49:c1:0c:b8:81:30:f1:68:bd:40: ed:63:a3:7c:ba:23:1e:98:63:33:c7:07:4d:e4:d0: e4:90:f6:c4:00:46:75:df:18:d9:a2:c1:56:94:5d: b2:31:64:47:bb:df:9d:64:76:e9:04:80:7a:46:4e: 71:e9:c0:cc:2d:37:08:a5:bd:85:64:bc:a2:5e:1b: 70:56:09:53:85:ce:b5:80:20:fd:9e:8f:3f:d8:cc: 1e:3f:da:85:50:9f:74:fe:35:dc:29:d9:76:d4:5b: 3f:95:37:2b:9e:c5:03:5d:ff:80:96:b2:0e:62:b3: 20:f3:06:ad:8d:a9:ea:3b:84:b9:b3:3c:bc:73:6e: 5f:7b:03:16:fb:03:08:43:04:7e:b2:f1:a7:13:99: 26:42:60:c9:5a:00:fa:55:37:d2:d9:37:95:39:15: 73:78:17:9e:be:18:d6:3d:5f:e0:cc:f2:aa:74:bd: 0f:b7:32:c7:51:d1:c6:11:6f:40:00:fe:98:8c:70: bc:c4:a8:fa:28:f9:29:c2:81:51:f4:c4:61:36:97: bd:87:0a:12:fa:4d:9e:a2:8b:9a:32:0a:74:ca:a0: d6:77:fa:12:4f:7e:87:04:7c:ac:ae:c1:e9:a2:57: d6:bf:09:dc:d9:c4:74:86:17:a1:68:d3:4f:6b:12: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8E:8C:B1:10:DB:4A:C5:47:48:AB:B4:DB:6B:79:1A:6E:06:D0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1e4ed431-4b9a-3971-bd1e-4b20d5b3408e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7f:6a:69:40:3e:e0:57:5c:4a:ed:eb:0a:04:e0:65:9b:62: c5:66:bb:b4:42:fb:c9:70:1a:3d:71:16:75:26:1a:ac:ab:c1: 60:d6:4c:1d:79:24:9e:6f:97:e9:c9:53:57:25:a6:d9:e7:77: 18:9e:14:cb:dc:21:03:64:19:a8:3b:09:ea:2e:db:fd:7a:d1: 22:3d:dc:6b:e7:a1:17:81:33:04:a3:bf:34:0e:85:a9:99:e3: 34:00:3a:3a:73:1a:ce:b5:af:c6:e9:9d:ea:f0:3d:4c:29:f6: fe:84:47:28:48:14:9d:99:c8:47:74:e5:72:fb:d9:79:60:86: 71:bb:60:2a:f3:29:b4:6c:ad:05:92:18:ba:64:ce:1e:01:df: b7:8c:c1:d0:40:72:80:f7:d4:67:03:be:10:a3:a7:cb:f8:b1: da:66:cf:67:00:ae:f6:3c:d9:43:46:5d:af:69:3b:25:18:5e: f8:8e:97:06:78:70:a5:99:5e:dc:79:47:98:00:5c:a2:d9:ec: 5e:60:94:1b:c8:76:7e:90:b3:6e:08:e2:3c:59:a1:d2:9b:e8: a4:50:0e:bd:96:a7:c7:f2:14:0f:8c:da:4d:81:1d:2b:38:c5: 59:ae:84:27:9e:1b:2d:74:19:9f:64:91:ec:43:87:c9:a9:1d: fe:86:08:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZJagrynfiLEecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MmJhNjk4OGItOWJhYy00ZWIzLTgyMDktODQ3OGY1MDM1YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKhZbknBDLiBMPFovUDtY6N8uiMemGMzxwdN 5NDkkPbEAEZ13xjZosFWlF2yMWRHu9+dZHbpBIB6Rk5x6cDMLTcIpb2FZLyiXhtw VglThc61gCD9no8/2MweP9qFUJ90/jXcKdl21Fs/lTcrnsUDXf+AlrIOYrMg8wat janqO4S5szy8c25fewMW+wMIQwR+svGnE5kmQmDJWgD6VTfS2TeVORVzeBeevhjW PV/gzPKqdL0PtzLHUdHGEW9AAP6YjHC8xKj6KPkpwoFR9MRhNpe9hwoS+k2eooua Mgp0yqDWd/oST36HBHysrsHpolfWvwnc2cR0hhehaNNPaxLu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmOjLEQ20rFR0irtNtreRpuBtBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWU0ZWQ0MzEtNGI5YS0z OTcxLWJkMWUtNGIyMGQ1YjM0MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9/amlAPuBXXErt6woE4GWbYsVmu7RC+8lwGj1xFnUmGqyrwWDWTB15 JJ5vl+nJU1clptnndxieFMvcIQNkGag7Ceou2/160SI93GvnoReBMwSjvzQOhamZ 4zQAOjpzGs61r8bpnerwPUwp9v6ERyhIFJ2ZyEd05XL72XlghnG7YCrzKbRsrQWS GLpkzh4B37eMwdBAcoD31GcDvhCjp8v4sdpmz2cArvY82UNGXa9pOyUYXviOlwZ4 cKWZXtx5R5gAXKLZ7F5glBvIdn6Qs24I4jxZodKb6KRQDr2Wp8fyFA+M2k2BHSs4 xVmuhCeeGy10GZ9kkexDh8mpHf6GCHI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:49 2026 by rpki-client