$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa File: 2fa8ec23-64f5-30f3-8286-eea4d237e288.roa (raw, json) Hash identifier: ScW5wCj6CoEc0e3PDDYpazT5+cOHVoSx5o/hNnrQydk= Subject key identifier: AD:1D:25:66:26:6B:E8:F3:45:94:93:48:F5:DD:35:E6:9D:9A:AE:FD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8963458D5D871E6F0D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:89:63:45:8d:5d:87:1e:6f:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=d7dd8aa7-0b7a-4838-ba96-47c95c879766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:a8:4b:2e:34:b7:e4:d0:42:c3:13:57:ca: 7c:15:44:04:46:62:bf:b3:62:56:55:19:d1:ff:50: 5c:0e:5b:b6:d1:27:1e:41:c2:31:03:dd:38:af:02: b2:7b:2d:67:f1:b3:2d:72:f9:5a:7f:24:a5:08:02: 31:f2:a4:7f:98:be:74:56:61:09:1b:44:6a:00:1e: 8b:36:b5:23:93:1d:e4:f6:6e:69:b7:33:89:6d:15: 92:fc:29:ee:5c:08:ef:ba:3c:7c:a5:8b:c4:36:6b: 40:06:7a:2c:8f:6f:61:13:57:42:4d:63:42:77:b3: 24:b9:5c:17:12:4a:d7:ef:03:3d:a3:0d:aa:be:fa: 03:f6:66:ff:62:26:e1:dc:b3:e9:d6:3d:57:cf:03: af:0e:fe:34:25:17:0b:80:c5:dc:00:09:c7:b3:49: 2e:64:4a:02:d2:37:84:17:77:c8:9a:fa:31:1e:41: bd:b6:f0:a8:c2:35:4e:0a:7b:78:61:c1:41:cd:71: b9:dd:58:63:ea:a5:2a:9d:11:5d:74:54:bc:6c:94: 10:75:a7:1e:ad:f4:ea:e7:fe:11:dc:33:b0:94:00: 73:e7:e4:a0:9b:6c:08:37:b4:c4:db:04:1a:ef:6d: 85:ae:8a:97:f6:17:55:09:3d:92:f6:9b:0e:f2:a8: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1D:25:66:26:6B:E8:F3:45:94:93:48:F5:DD:35:E6:9D:9A:AE:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2fa8ec23-64f5-30f3-8286-eea4d237e288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:88:0d:75:65:79:b6:7f:f1:bf:c7:18:1d:9e:8c:3d:8c:a0: c3:3e:68:71:da:fa:d1:5d:8a:b5:61:c7:ae:2f:0e:0f:06:dc: 53:d1:54:1e:b8:94:28:c5:dd:24:dc:dd:8b:b8:83:7e:f2:da: 30:c1:8d:38:02:a6:b4:58:80:1b:8f:3d:f2:e3:b9:31:fd:32: 9b:28:0d:26:63:c5:2a:56:d3:97:53:ae:cc:ee:79:0c:4f:1e: 3c:e0:2d:4e:8c:5d:4c:cc:96:8f:24:be:1c:71:9d:ce:55:a9: 13:ae:30:94:b7:f6:67:33:ab:95:61:ae:48:c5:1b:84:8b:ce: 03:08:e2:3e:71:ea:3f:29:b6:52:61:c6:b1:06:7b:1e:e6:ea: e2:24:0c:4a:0e:58:d3:33:bf:e2:45:be:34:22:30:5f:eb:52: ca:e5:8d:c0:72:53:28:84:72:ab:ab:1b:65:a5:d0:f6:cb:83: fd:c3:38:66:79:1f:e7:ea:3f:c2:5e:0d:cf:e9:e0:bc:2c:d7: 38:34:4e:4b:00:f3:39:26:3d:e4:2a:57:fd:70:95:4c:9d:19: 86:03:fa:03:0b:57:eb:48:a1:0c:12:ed:42:3f:ac:f5:ee:62: b8:d1:fd:1f:4b:66:40:1b:b4:13:04:a9:32:44:99:4f:c3:7c: 07:a5:53:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYljRY1dhx5vDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDdkZDhhYTctMGI3YS00ODM4LWJhOTYtNDdjOTVjODc5NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KeoSy40t+TQQsMTV8p8FUQERmK/s2JWVRnR /1BcDlu20SceQcIxA904rwKyey1n8bMtcvlafySlCAIx8qR/mL50VmEJG0RqAB6L NrUjkx3k9m5ptzOJbRWS/CnuXAjvujx8pYvENmtABnosj29hE1dCTWNCd7MkuVwX EkrX7wM9ow2qvvoD9mb/Yibh3LPp1j1XzwOvDv40JRcLgMXcAAnHs0kuZEoC0jeE F3fImvoxHkG9tvCowjVOCnt4YcFBzXG53Vhj6qUqnRFddFS8bJQQdacerfTq5/4R 3DOwlABz5+Sgm2wIN7TE2wQa722FroqX9hdVCT2S9psO8qj00wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0dJWYma+jzRZSTSPXdNeadmq79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmZhOGVjMjMtNjRmNS0z MGYzLTgyODYtZWVhNGQyMzdlMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeIDXVlebZ/8b/HGB2ejD2MoMM+aHHa+tFdirVhx64vDg8G3FPRVB64 lCjF3STc3Yu4g37y2jDBjTgCprRYgBuPPfLjuTH9MpsoDSZjxSpW05dTrszueQxP HjzgLU6MXUzMlo8kvhxxnc5VqROuMJS39mczq5VhrkjFG4SLzgMI4j5x6j8ptlJh xrEGex7m6uIkDEoOWNMzv+JFvjQiMF/rUsrljcByUyiEcqurG2Wl0PbLg/3DOGZ5 H+fqP8JeDc/p4Lws1zg0TksA8zkmPeQqV/1wlUydGYYD+gMLV+tIoQwS7UI/rPXu YrjR/R9LZkAbtBMEqTJEmU/DfAelUzk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:50 2026 by rpki-client