$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa File: 388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa (raw, json) Hash identifier: DQIDeUe8TrAgYTXzTbdNpxRXm2Yq4G9X98mhqJcvi0k= Subject key identifier: 0E:25:70:B5:60:8B:23:3D:4A:D1:E3:37:74:34:87:72:92:21:D1:8F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9386D50690B74BAB3B00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:93:86:d5:06:90:b7:4b:ab:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=aa7bee61-740a-43bf-8827-953d7389ee63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f1:17:b6:ac:7a:79:b0:cd:88:bb:cf:42:ec: 54:e1:37:40:2d:11:8e:5d:66:58:97:50:c2:91:75: 18:0e:55:33:a1:ba:28:2c:67:19:b4:d6:fa:93:54: db:ab:56:6b:76:85:ab:0a:c5:fa:02:e8:f7:9b:b7: cc:98:98:dd:33:29:c5:d7:a5:16:2b:41:30:f2:16: 5f:d5:75:08:e9:7a:c0:a7:b6:78:b1:84:aa:b4:32: 42:b6:c2:04:48:13:e4:bc:86:7e:fb:73:80:ee:fd: 2d:14:b5:81:84:b4:97:70:71:3e:a0:0c:fe:47:00: 37:b8:12:4e:4c:4f:35:1b:78:49:05:9e:7e:21:a6: 80:75:7f:4f:e9:68:25:34:ae:e6:8f:5e:c4:8d:67: 9e:71:4a:98:b6:6e:00:a1:9c:5a:f6:57:2c:75:0b: cf:f9:20:48:8d:67:8a:cb:27:eb:57:f8:f2:80:03: ec:ac:20:29:fc:c7:40:a7:9b:ef:9c:ae:3f:7b:77: 70:6e:c7:0b:09:73:e3:95:f1:ea:31:55:94:9b:09: b0:33:da:a2:a1:a2:36:b2:6d:57:7b:3f:04:6b:cd: af:d7:76:87:e9:f7:d9:40:b6:18:69:a5:1c:2f:0f: 2a:ab:5f:b0:f5:21:71:84:3f:ac:13:48:fd:9a:4d: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:70:B5:60:8B:23:3D:4A:D1:E3:37:74:34:87:72:92:21:D1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:35:38:5d:01:df:c4:2f:f9:54:3e:b0:26:c1:73:f5:1e:bf: 82:71:20:ba:da:7b:e9:12:c1:19:80:46:87:da:cf:ad:64:02: 83:de:26:71:9c:6b:3e:5f:b1:75:0e:35:62:8b:85:ae:5e:3e: 11:be:5b:20:e0:1d:d6:44:85:19:61:7b:87:3a:82:17:ef:29: 5f:ff:fd:ce:91:0d:57:a7:30:8c:57:ae:eb:8c:ed:ba:32:72: 1c:6f:91:6f:0c:a3:de:5f:9f:b2:86:01:a6:25:df:49:d4:31: e0:cc:bf:56:54:f9:d8:29:96:5c:2b:22:25:db:60:75:d7:17: 67:57:52:c6:80:dc:21:c3:28:0f:44:82:2e:00:7e:b2:aa:a7: 7c:11:9d:79:55:f6:db:23:b1:84:65:66:a6:79:37:2e:9c:e5: 62:13:4c:65:35:a2:76:f9:db:d3:8d:96:da:44:6d:b4:87:ea: e4:55:89:4f:4c:fc:8f:28:a4:7c:d0:69:41:fe:cc:5f:f6:67: 1c:79:dd:d9:31:e3:e5:b8:8c:fb:a5:cb:89:a7:ee:c1:43:77: fb:90:c4:bc:96:ba:eb:64:8d:03:26:f5:ba:c0:6d:22:3a:74: 3c:cb:f8:aa:59:80:d2:75:a5:eb:a5:60:20:71:09:fe:d8:41: 2d:da:31:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZOG1QaQt0urOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YWE3YmVlNjEtNzQwYS00M2JmLTg4MjctOTUzZDczODllZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifEXtqx6ebDNiLvPQuxU4TdALRGOXWZYl1DC kXUYDlUzobooLGcZtNb6k1Tbq1ZrdoWrCsX6Auj3m7fMmJjdMynF16UWK0Ew8hZf 1XUI6XrAp7Z4sYSqtDJCtsIESBPkvIZ++3OA7v0tFLWBhLSXcHE+oAz+RwA3uBJO TE81G3hJBZ5+IaaAdX9P6WglNK7mj17EjWeecUqYtm4AoZxa9lcsdQvP+SBIjWeK yyfrV/jygAPsrCAp/MdAp5vvnK4/e3dwbscLCXPjlfHqMVWUmwmwM9qioaI2sm1X ez8Ea82v13aH6ffZQLYYaaUcLw8qq1+w9SFxhD+sE0j9mk0lawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4lcLVgiyM9StHjN3Q0h3KSIdGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzg4YTA0ODMtNGUzMC0z YmEzLWI2ZTYtNGI0OGIzNzM0MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMI1OF0B38Qv+VQ+sCbBc/Uev4JxILrae+kSwRmARofaz61kAoPeJnGc az5fsXUONWKLha5ePhG+WyDgHdZEhRlhe4c6ghfvKV///c6RDVenMIxXruuM7boy chxvkW8Mo95fn7KGAaYl30nUMeDMv1ZU+dgpllwrIiXbYHXXF2dXUsaA3CHDKA9E gi4AfrKqp3wRnXlV9tsjsYRlZqZ5Ny6c5WITTGU1onb529ONltpEbbSH6uRViU9M /I8opHzQaUH+zF/2Zxx53dkx4+W4jPuly4mn7sFDd/uQxLyWuutkjQMm9brAbSI6 dDzL+KpZgNJ1peulYCBxCf7YQS3aMfI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:58 2026 by rpki-client