$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28e909f8-532d-3ec0-b563-9a81d16d85fe.roa File: 28e909f8-532d-3ec0-b563-9a81d16d85fe.roa (raw, json) Hash identifier: 2Cfo72cT63KTDa565jh9Fipk2Ipffawk9OPUt4fo838= Subject key identifier: 1A:C9:EF:2B:F0:64:A6:2B:66:63:9F:A9:F5:C4:7B:05:10:88:5F:45 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7CDDA9C3F901D98311500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28e909f8-532d-3ec0-b563-9a81d16d85fe.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cd:da:9c:3f:90:1d:98:31:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=d1eb041b-4992-4f65-a9f1-8a49f7f6dc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1f:2e:87:55:e4:2f:ae:f0:db:48:eb:6f:c9: 41:56:f3:1f:4a:2d:cd:bb:13:52:fa:49:24:13:94: b5:d9:2a:2f:08:e8:79:8a:a7:a0:ee:68:a3:30:c6: a0:47:e0:82:04:33:61:a9:c3:a3:61:79:af:a6:ac: 71:e3:5c:be:7a:f4:34:f0:6e:47:38:4f:47:9f:44: 1a:47:12:22:2a:8d:77:e4:7c:e0:89:4e:52:20:86: c9:bd:fb:6b:46:c5:a7:8a:2e:49:e1:86:2a:36:e2: eb:ad:5c:37:6f:50:68:06:70:99:a4:bc:38:de:f1: e5:a1:e3:53:2a:d4:95:d7:86:4a:6d:bb:4a:d4:70: 3a:ec:89:f7:e2:33:22:45:75:5d:8a:1c:cb:e3:4d: 0c:c0:01:80:1a:5d:f6:e6:4d:aa:f9:0c:26:8a:8b: e0:0a:ab:76:dd:39:04:6f:e1:f2:e4:84:8a:0b:ee: f7:a2:63:5c:1a:9c:21:24:4b:40:24:32:7e:44:36: 6c:c3:a1:5d:29:0b:40:b1:30:5b:d6:2e:2f:c1:72: 9d:29:2a:66:13:bb:82:0c:87:0d:f5:9f:a4:57:53: d1:39:ae:80:31:f4:6e:f8:e4:90:87:16:2b:aa:42: 1d:e3:db:e7:7e:d3:9f:60:cd:db:f2:08:9c:de:dc: 93:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C9:EF:2B:F0:64:A6:2B:66:63:9F:A9:F5:C4:7B:05:10:88:5F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28e909f8-532d-3ec0-b563-9a81d16d85fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ec:29:83:f4:4d:4f:07:36:b8:64:8d:48:4c:08:79:ce:d2: a5:dc:4c:fb:3b:f9:49:39:ca:4c:b7:67:3c:8d:da:c6:c0:a9: f3:63:b7:8f:2a:68:fe:95:07:33:9e:92:95:df:32:14:d8:87: ec:a3:30:76:1f:25:95:d1:a7:95:7a:c9:8b:71:45:c5:07:ac: cf:42:27:82:01:e9:89:8e:a4:0a:cd:15:12:97:b6:e0:cc:44: ac:ff:83:f8:6f:5a:e9:fd:94:30:c7:d0:98:3b:ee:1d:3c:59: e2:10:07:00:4f:88:12:ce:25:6a:81:a4:05:9d:76:e1:09:75: b6:01:eb:97:09:24:6e:04:1e:b9:0e:69:0e:fe:dd:6b:ab:61: d3:84:e7:e2:e0:7b:82:bc:ec:cd:17:7d:df:13:30:1d:c5:cd: 3b:6e:3b:16:a1:51:02:cd:f7:d0:d7:d7:9e:c2:51:9e:3c:b2: ea:16:aa:76:76:ee:2f:00:bd:b5:4d:02:de:e4:35:d7:0d:51: f0:9c:c4:32:16:7c:f1:d8:03:b0:3e:eb:1f:1e:33:bb:be:5f: 18:02:53:fa:28:4e:69:96:96:0b:ed:28:39:d3:48:d3:ec:97: 16:21:45:c6:0e:91:00:cd:45:4e:61:4b:a5:98:7c:66:56:36: 78:7e:f6:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op83anD+QHZgxFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZDFlYjA0MWItNDk5Mi00ZjY1LWE5ZjEtOGE0OWY3ZjZkYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih8uh1XkL67w20jrb8lBVvMfSi3NuxNS+kkk E5S12SovCOh5iqeg7mijMMagR+CCBDNhqcOjYXmvpqxx41y+evQ08G5HOE9Hn0Qa RxIiKo135HzgiU5SIIbJvftrRsWnii5J4YYqNuLrrVw3b1BoBnCZpLw43vHloeNT KtSV14ZKbbtK1HA67In34jMiRXVdihzL400MwAGAGl325k2q+QwmiovgCqt23TkE b+Hy5ISKC+73omNcGpwhJEtAJDJ+RDZsw6FdKQtAsTBb1i4vwXKdKSpmE7uCDIcN 9Z+kV1PROa6AMfRu+OSQhxYrqkId49vnftOfYM3b8gic3tyTYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrJ7yvwZKYrZmOfqfXEewUQiF9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjhlOTA5ZjgtNTMyZC0z ZWMwLWI1NjMtOWE4MWQxNmQ4NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvsKYP0TU8HNrhkjUhMCHnO0qXcTPs7+Uk5yky3ZzyN2sbAqfNjt48q aP6VBzOekpXfMhTYh+yjMHYfJZXRp5V6yYtxRcUHrM9CJ4IB6YmOpArNFRKXtuDM RKz/g/hvWun9lDDH0Jg77h08WeIQBwBPiBLOJWqBpAWdduEJdbYB65cJJG4EHrkO aQ7+3WurYdOE5+Lge4K87M0Xfd8TMB3FzTtuOxahUQLN99DX157CUZ48suoWqnZ2 7i8AvbVNAt7kNdcNUfCcxDIWfPHYA7A+6x8eM7u+XxgCU/ooTmmWlgvtKDnTSNPs lxYhRcYOkQDNRU5hS6WYfGZWNnh+9hI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:50 2026 by rpki-client