$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa File: 2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa (raw, json) Hash identifier: 4SpctSrqgX+Hs72BKStlJJkCrRtPdCtiDp2F6RbA8jA= Subject key identifier: 1F:22:2E:04:72:0C:6C:24:40:C1:15:1B:25:50:BC:16:7D:95:00:67 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D90E473B5034D235E9F50 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:90:e4:73:b5:03:4d:23:5e:9f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=c73d0d13-81ca-4b2e-94aa-9d428293951d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:aa:8e:dd:1b:71:d8:0a:aa:33:83:dd:0e: f0:2e:2e:9e:26:bf:30:98:96:0c:84:c3:0a:0c:c5: d7:d6:e6:88:b7:41:d2:43:e4:46:bb:bd:02:cf:4f: 34:f3:37:ae:d0:ba:41:2c:31:6e:3f:eb:b7:80:10: 92:a8:d9:87:60:4c:d1:39:97:01:00:12:4e:b3:36: e7:53:46:2e:3f:70:c2:f2:94:bb:0f:f5:37:89:d9: cb:f7:c0:e7:e8:94:5b:4d:92:0b:10:74:7a:fa:cc: 3b:3e:91:52:27:3c:ef:14:ac:20:1f:e2:3d:40:de: 39:14:c9:65:74:a2:3a:08:7c:36:fc:bb:40:dd:55: 26:44:66:4b:93:5f:3b:d9:9e:89:c0:44:2c:cc:fc: 9b:ff:81:55:88:29:8a:e2:02:1c:46:b4:41:dc:d3: 85:e3:3b:3c:83:21:fd:a7:72:71:01:38:77:dc:11: 85:ca:35:81:49:8b:ee:cb:35:56:34:44:7d:b3:b9: 1e:46:52:b0:6a:bc:85:1a:3f:31:58:7e:d9:39:07: 11:23:da:bf:74:23:5c:b1:57:0d:d6:9d:b6:19:57: 50:7f:1b:b2:45:61:37:66:52:65:3b:e4:af:13:e3: 7b:f4:62:44:b9:a7:e4:8d:c0:7e:ca:da:19:7c:b4: 8d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:22:2E:04:72:0C:6C:24:40:C1:15:1B:25:50:BC:16:7D:95:00:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:80:e3:10:0b:80:6c:03:c3:fa:33:e4:c8:86:e9:e4:b8:21: fe:aa:30:df:44:6d:52:e4:30:06:3f:4e:a9:a9:41:d5:34:88: ee:1f:b6:df:18:0f:0f:c8:be:47:52:1e:f5:79:e9:db:72:01: 98:1b:db:3d:a3:32:4b:e8:c0:7c:27:ff:b4:c3:c0:fa:81:67: 56:5c:86:e6:95:14:16:cc:22:1d:15:63:1b:4e:08:18:d2:72: 79:0f:e2:6d:2d:cc:d6:af:96:29:d0:6c:e9:8f:9f:dc:e3:f3: 28:3a:34:74:f2:22:d8:de:c1:bb:62:d2:86:a8:43:40:67:de: 3a:cd:f2:d0:da:18:9f:c1:a1:9d:70:c8:48:f9:67:dc:55:09: 9b:13:3b:a6:56:60:f3:6d:48:08:60:38:a0:98:1a:cb:f5:3b: c0:93:54:6e:9a:4b:0e:20:f7:ce:46:c8:34:2b:f6:99:d5:ff: 8f:d5:e7:8a:f7:04:7d:7a:c1:18:f6:ee:55:c3:ec:c7:b2:db: 66:20:7d:54:84:53:bd:55:f7:93:43:05:86:0a:94:83:c8:aa: 85:27:d1:5a:e5:19:c7:b9:85:d5:86:9e:60:51:fc:6e:9b:59: e2:97:49:7b:42:55:71:13:af:f9:8f:67:b3:84:98:3a:70:3a: ec:cf:8e:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZDkc7UDTSNen1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YzczZDBkMTMtODFjYS00YjJlLTk0YWEtOWQ0MjgyOTM5NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZWqjt0bcdgKqjOD3Q7wLi6eJr8wmJYMhMMK DMXX1uaIt0HSQ+RGu70Cz0808zeu0LpBLDFuP+u3gBCSqNmHYEzROZcBABJOszbn U0YuP3DC8pS7D/U3idnL98Dn6JRbTZILEHR6+sw7PpFSJzzvFKwgH+I9QN45FMll dKI6CHw2/LtA3VUmRGZLk1872Z6JwEQszPyb/4FViCmK4gIcRrRB3NOF4zs8gyH9 p3JxATh33BGFyjWBSYvuyzVWNER9s7keRlKwaryFGj8xWH7ZOQcRI9q/dCNcsVcN 1p22GVdQfxuyRWE3ZlJlO+SvE+N79GJEuafkjcB+ytoZfLSNdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8iLgRyDGwkQMEVGyVQvBZ9lQBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmM0ZWE2ODMtNjU3NS0z ZjVlLWI3MmYtMzk1ZWQzZDY4ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2A4xALgGwDw/oz5MiG6eS4If6qMN9EbVLkMAY/TqmpQdU0iO4ftt8Y Dw/IvkdSHvV56dtyAZgb2z2jMkvowHwn/7TDwPqBZ1ZchuaVFBbMIh0VYxtOCBjS cnkP4m0tzNavlinQbOmPn9zj8yg6NHTyItjewbti0oaoQ0Bn3jrN8tDaGJ/BoZ1w yEj5Z9xVCZsTO6ZWYPNtSAhgOKCYGsv1O8CTVG6aSw4g985GyDQr9pnV/4/V54r3 BH16wRj27lXD7Mey22YgfVSEU71V95NDBYYKlIPIqoUn0VrlGce5hdWGnmBR/G6b WeKXSXtCVXETr/mPZ7OEmDpwOuzPjjo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:37 2026 by rpki-client