$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2314e5e3-0bb1-3c4a-b618-3a957a343a31.roa File: 2314e5e3-0bb1-3c4a-b618-3a957a343a31.roa (raw, json) Hash identifier: 0lHv7b9l8WD+lQFqR0F8uy8/uc5b3ad+UatYG4qMUz0= Subject key identifier: 7A:AF:33:DE:E3:17:D9:7F:C0:98:9E:64:91:66:16:26:62:AA:ED:FC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A59338CEC1D98381E9FC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2314e5e3-0bb1-3c4a-b618-3a957a343a31.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395973 IP address blocks: 104.134.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:59:33:8c:ec:1d:98:38:1e:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=19f2c1e7-039b-4299-bb67-0eef7ad16aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:87:10:fb:8d:ba:c3:df:26:85:6f:87:db:ad: c0:e5:12:73:3b:65:20:44:d1:41:4f:f3:ab:14:72: 9a:c1:47:1f:be:6e:92:06:ab:87:a3:e7:2b:cf:99: 3a:f1:13:83:8e:71:42:13:89:ae:0a:1c:fa:d8:cd: 2d:7f:15:a3:8d:2f:1e:a9:4d:bc:9d:de:c1:ae:b4: e3:9f:39:fb:60:4d:01:d2:74:7a:d6:a8:65:6b:ee: 83:67:27:65:d8:05:4a:d0:3f:a5:31:6b:af:7a:3e: 59:69:f9:77:ac:3f:e6:83:42:29:d8:a7:41:36:ee: 9c:32:a2:8e:5f:72:cd:c9:8a:c5:12:3c:d6:cd:cc: bd:a1:07:28:71:31:10:5f:55:4c:25:c3:57:14:1a: c4:fd:8d:4b:c9:9f:32:3a:ee:fa:8e:7b:9d:9d:5e: 44:9a:bc:3c:66:7c:7b:f9:03:59:51:46:83:c5:f1: b7:9d:24:8f:b7:f9:fa:8c:b1:f1:f6:3e:a8:31:a7: d4:aa:3b:a2:eb:9d:05:05:94:b4:34:3d:65:03:8a: a8:f3:fc:a1:f5:02:f3:6e:36:be:0d:ae:6d:1f:a3: 62:29:0a:95:d4:8c:40:26:68:6d:33:36:9d:fe:7c: 6c:bd:66:8f:33:8e:c4:bd:64:20:d7:86:d7:b9:15: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AF:33:DE:E3:17:D9:7F:C0:98:9E:64:91:66:16:26:62:AA:ED:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2314e5e3-0bb1-3c4a-b618-3a957a343a31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3a:6d:bc:78:68:c6:9a:6d:68:75:5a:f2:ba:4f:48:fb:21: d7:75:09:aa:cb:07:18:fe:06:0d:2d:71:ac:64:37:dc:5e:3a: 00:ac:12:2f:2f:e9:2c:e5:e0:40:da:13:1f:92:82:8f:86:05: 4a:a2:64:44:cb:9b:11:72:a9:d7:45:f9:f8:3a:ac:be:72:51: b0:ca:b6:88:1c:a1:08:71:db:40:52:60:b0:d4:f2:6e:41:5c: df:9b:28:0e:81:9f:e6:90:94:68:dc:ed:46:55:4a:1c:ef:4f: 77:a5:c8:bf:9f:60:72:98:39:da:d3:07:ac:50:b7:fd:50:ef: 39:92:08:e8:69:7b:71:65:56:f8:1c:13:b5:04:92:74:56:49: 97:10:45:38:e7:41:9e:59:d7:f0:b4:06:e6:38:1c:86:c0:5e: c9:a5:87:bf:e5:03:d6:68:61:fe:57:ae:47:57:17:e4:bf:44: 06:d1:5b:64:45:7d:1c:b0:5e:ed:0a:b3:b7:b7:42:4b:9e:12: ad:5b:c8:d5:ba:25:30:8d:0a:0f:a0:6f:04:dd:e3:7e:e2:65: bf:9a:e1:42:36:cb:d6:25:69:2f:11:8d:d3:84:90:58:19:84: 93:92:d0:34:42:b5:cb:11:47:34:2b:14:56:d6:d1:1b:35:04: dc:e7:e0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlkzjOwdmDgen8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MTlmMmMxZTctMDM5Yi00Mjk5LWJiNjctMGVlZjdhZDE2YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ocQ+426w98mhW+H263A5RJzO2UgRNFBT/Or FHKawUcfvm6SBquHo+crz5k68RODjnFCE4muChz62M0tfxWjjS8eqU28nd7BrrTj nzn7YE0B0nR61qhla+6DZydl2AVK0D+lMWuvej5Zafl3rD/mg0Ip2KdBNu6cMqKO X3LNyYrFEjzWzcy9oQcocTEQX1VMJcNXFBrE/Y1LyZ8yOu76jnudnV5Emrw8Znx7 +QNZUUaDxfG3nSSPt/n6jLHx9j6oMafUqjui650FBZS0ND1lA4qo8/yh9QLzbja+ Da5tH6NiKQqV1IxAJmhtMzad/nxsvWaPM47EvWQg14bXuRVqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqvM97jF9l/wJieZJFmFiZiqu38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjMxNGU1ZTMtMGJiMS0z YzRhLWI2MTgtM2E5NTdhMzQzYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI6bbx4aMaabWh1WvK6T0j7Idd1CarLBxj+Bg0tcaxkN9xeOgCsEi8v 6Szl4EDaEx+Sgo+GBUqiZETLmxFyqddF+fg6rL5yUbDKtogcoQhx20BSYLDU8m5B XN+bKA6Bn+aQlGjc7UZVShzvT3elyL+fYHKYOdrTB6xQt/1Q7zmSCOhpe3FlVvgc E7UEknRWSZcQRTjnQZ5Z1/C0BuY4HIbAXsmlh7/lA9ZoYf5XrkdXF+S/RAbRW2RF fRywXu0Ks7e3QkueEq1byNW6JTCNCg+gbwTd437iZb+a4UI2y9YlaS8RjdOEkFgZ hJOS0DRCtcsRRzQrFFbW0Rs1BNzn4ME= -----END CERTIFICATE-----Generated at Thu Mar 26 18:00:59 2026 by rpki-client