$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa File: 3b98884f-6544-3561-9a52-f8ff6f884f01.roa (raw, json) Hash identifier: QJrBr7NnRTf2N6MCQgyF92Fke+BIFp1U6ZKRPrBtK7s= Subject key identifier: F6:C7:95:37:88:6F:99:88:B0:C8:39:F7:5E:78:AE:2E:A1:F6:EB:E1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A83F7CFFDD1041752EF20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395973 IP address blocks: 104.134.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:83:f7:cf:fd:d1:04:17:52:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a008f432-9d43-4263-a3b9-6ca689267e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4b:38:8a:df:16:e8:02:a4:e4:9a:96:c9:59: 90:dd:1b:ee:5c:bc:74:12:57:d2:74:92:24:b7:93: 98:ba:bc:aa:a5:1f:ea:55:9a:ad:3a:8a:19:53:f2: 85:9d:44:9b:55:cf:ec:95:c0:05:43:c3:f1:62:ac: a8:a2:e1:39:b8:c9:f4:88:1d:c8:a4:46:ce:d8:ad: 58:20:fc:ea:49:95:93:3e:74:73:9f:4a:a4:7f:be: 06:71:e1:84:54:4d:c7:69:ab:ab:87:9a:ee:4b:8b: b4:ea:b7:43:b6:f5:18:fe:9c:49:05:f6:b5:c0:38: 8e:8f:2c:e6:82:28:50:81:9f:22:d8:9d:75:ab:d8: 8f:a8:63:70:71:31:12:e5:78:b0:34:c6:91:8e:7e: 6c:17:92:4e:e3:5f:bd:5c:32:0d:4f:da:0a:9e:b8: 50:05:8b:4c:03:66:da:17:5e:a8:5a:b7:6d:39:0e: 15:01:fb:0c:08:e9:b8:35:02:af:53:47:8e:de:c8: 8d:fd:50:76:9d:39:3c:f2:cf:36:00:bf:69:f9:dc: 31:8e:7d:b7:f1:9a:cf:db:99:d8:27:7b:18:4f:ad: 7b:68:ce:6a:1a:f3:42:ee:6b:bc:e7:59:88:44:a1: 8e:52:76:e9:94:fc:e0:18:5f:83:29:8e:9e:12:be: 1c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:95:37:88:6F:99:88:B0:C8:39:F7:5E:78:AE:2E:A1:F6:EB:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:29:01:35:12:a1:bc:eb:da:7f:c3:93:88:84:42:34:f4:7a: 73:54:71:50:50:d0:0b:e5:f1:e6:6f:72:98:46:f5:09:4e:09: 60:ed:b2:e5:c9:81:81:47:2b:e0:77:91:07:88:bb:da:66:09: 17:8e:03:e8:be:64:cb:a6:ae:0f:ec:db:2d:01:3d:a2:92:4d: 00:2f:76:d7:c6:bf:0e:65:7a:5b:f0:ae:91:f9:99:21:97:9e: 4e:59:62:57:92:cf:d4:e4:d9:40:18:3d:a2:81:af:c6:8d:cd: 08:36:4a:bf:b2:02:68:3c:d6:d3:84:a8:16:cd:3b:89:60:1e: 79:28:34:ff:5d:29:ff:6b:e2:46:96:bf:7a:b4:bb:9f:4a:d1: 03:bf:f3:70:16:30:2e:30:5f:fd:93:21:e0:a6:f0:5e:a9:70: 86:c4:a8:f1:02:f2:30:14:7a:a9:82:bf:74:fb:31:97:be:71: 0c:c6:6d:cf:9a:36:34:05:b0:a5:16:69:70:6c:f9:f8:4a:f2: 06:8a:4a:96:c1:51:27:a2:5b:23:95:99:82:0e:b8:f7:57:bc: 23:22:46:97:70:c5:77:1a:38:2a:94:9a:a9:f9:41:eb:48:93: 59:31:92:bd:c6:47:b7:5b:12:d5:5b:ba:6b:38:36:7f:5e:af: 76:94:7e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoP3z/3RBBdS7yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTAwOGY0MzItOWQ0My00MjYzLWEzYjktNmNhNjg5MjY3ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0s4it8W6AKk5JqWyVmQ3RvuXLx0ElfSdJIk t5OYuryqpR/qVZqtOooZU/KFnUSbVc/slcAFQ8PxYqyoouE5uMn0iB3IpEbO2K1Y IPzqSZWTPnRzn0qkf74GceGEVE3Haaurh5ruS4u06rdDtvUY/pxJBfa1wDiOjyzm gihQgZ8i2J11q9iPqGNwcTES5XiwNMaRjn5sF5JO41+9XDINT9oKnrhQBYtMA2ba F16oWrdtOQ4VAfsMCOm4NQKvU0eO3siN/VB2nTk88s82AL9p+dwxjn238ZrP25nY J3sYT617aM5qGvNC7mu851mIRKGOUnbplPzgGF+DKY6eEr4cqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbHlTeIb5mIsMg59154ri6h9uvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2I5ODg4NGYtNjU0NC0z NTYxLTlhNTItZjhmZjZmODg0ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwpATUSobzr2n/Dk4iEQjT0enNUcVBQ0Avl8eZvcphG9QlOCWDtsuXJ gYFHK+B3kQeIu9pmCReOA+i+ZMumrg/s2y0BPaKSTQAvdtfGvw5lelvwrpH5mSGX nk5ZYleSz9Tk2UAYPaKBr8aNzQg2Sr+yAmg81tOEqBbNO4lgHnkoNP9dKf9r4kaW v3q0u59K0QO/83AWMC4wX/2TIeCm8F6pcIbEqPEC8jAUeqmCv3T7MZe+cQzGbc+a NjQFsKUWaXBs+fhK8gaKSpbBUSeiWyOVmYIOuPdXvCMiRpdwxXcaOCqUmqn5QetI k1kxkr3GR7dbEtVbums4Nn9er3aUfjk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:01 2026 by rpki-client