$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa File: 3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa (raw, json) Hash identifier: v+QsVYkPuY7J5L5YH0VuhKCM17BHJu7WwJ13q9R9UxE= Subject key identifier: DD:C0:96:6C:1F:D4:E8:FB:7F:28:40:F4:E2:5F:E5:CE:30:32:BD:B2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9D93A34E59BA413E6240 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9d:93:a3:4e:59:ba:41:3e:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8feb5db1-dc6b-4003-957f-d704898abe0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1a:48:5a:b5:9e:c1:33:94:c3:db:18:ec:d4: 91:cd:e1:69:fd:29:65:a2:a0:b5:20:5c:72:05:55: 13:17:ff:af:58:a5:c2:09:18:df:75:17:20:07:55: 8d:50:54:52:dd:33:aa:fa:50:4e:fe:e2:17:5b:32: 6d:52:7b:27:f3:fa:88:3a:70:7b:78:c3:02:89:61: 96:ea:79:19:3b:66:13:ca:43:77:59:da:34:87:73: 8a:f5:c9:56:d2:32:39:5b:dd:7a:13:b0:60:c8:c8: 0c:6e:51:df:70:8f:2b:5e:74:22:6a:e6:e8:4b:c0: 10:26:2c:42:66:cf:fe:59:8e:53:34:3a:0e:5c:da: 83:09:47:35:98:6e:d9:61:bc:97:d4:51:80:79:68: ad:33:96:03:39:43:8f:da:29:2b:94:d6:a9:45:fc: 4e:87:43:72:12:e7:74:cc:51:1d:dc:9c:7a:2d:2b: 77:54:43:89:4b:66:c7:9d:3c:a2:da:ce:a6:d0:30: fc:82:73:d5:6f:ce:45:ba:2e:c6:0c:0a:7b:40:01: 6a:24:22:9d:04:45:e5:57:7c:5f:03:cb:3c:75:56: 47:d9:81:24:17:8b:38:8e:3a:12:fd:d2:dc:c8:f3: 2d:11:a9:03:73:c2:0c:62:1e:6e:d1:0c:6a:bb:2e: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C0:96:6C:1F:D4:E8:FB:7F:28:40:F4:E2:5F:E5:CE:30:32:BD:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:af:4a:e8:b8:da:7b:cc:68:47:27:c1:38:53:5d:82:55:b9: 81:4f:9f:13:27:20:c6:9d:b2:64:11:a4:0d:48:0f:26:46:f0: f1:4a:41:08:01:db:2f:38:b5:d4:49:5b:32:fc:96:96:18:1a: e9:58:3f:35:1d:e8:c7:e9:ab:0a:eb:14:0e:9b:7c:49:69:3e: 6f:1c:c6:32:e6:24:cd:73:18:21:54:3d:e3:ee:23:18:26:38: 52:4a:88:e5:73:58:33:f8:48:2f:65:de:05:69:6d:40:f6:87: 0f:7b:06:91:81:53:27:0f:3b:75:11:ed:87:bb:b4:08:4b:26: 1e:7e:85:72:90:ff:76:7c:c7:bc:4b:87:8f:b7:3e:6b:a1:43: 35:f1:e1:12:b8:10:2a:df:b0:0b:f4:b8:5c:16:af:c8:2f:41: 62:e2:f8:f9:c7:2f:d1:92:64:b0:14:2c:7b:1b:b8:dd:43:de: 16:cf:61:3a:f1:80:b4:c6:76:0e:ea:e8:b1:19:57:ac:0b:1b: 58:26:e7:00:e5:e1:76:a3:49:e2:9e:61:b4:8f:12:17:27:95: 4e:cf:37:11:b9:a4:26:19:19:16:d5:df:67:97:c0:d4:1d:a8: 50:ee:ac:7b:40:c9:e4:87:19:32:e9:e4:e5:cf:6b:7a:54:ca: 1c:d0:14:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ2To05ZukE+YkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OGZlYjVkYjEtZGM2Yi00MDAzLTk1N2YtZDcwNDg5OGFiZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBpIWrWewTOUw9sY7NSRzeFp/SlloqC1IFxy BVUTF/+vWKXCCRjfdRcgB1WNUFRS3TOq+lBO/uIXWzJtUnsn8/qIOnB7eMMCiWGW 6nkZO2YTykN3Wdo0h3OK9clW0jI5W916E7BgyMgMblHfcI8rXnQiauboS8AQJixC Zs/+WY5TNDoOXNqDCUc1mG7ZYbyX1FGAeWitM5YDOUOP2ikrlNapRfxOh0NyEud0 zFEd3Jx6LSt3VEOJS2bHnTyi2s6m0DD8gnPVb85Fui7GDAp7QAFqJCKdBEXlV3xf A8s8dVZH2YEkF4s4jjoS/dLcyPMtEakDc8IMYh5u0Qxquy5tOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3Almwf1Oj7fyhA9OJf5c4wMr2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2U5OTI2MTMtODBjNC0z YmI1LTllYmMtNmM4ZTdhNWZmMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOvSui42nvMaEcnwThTXYJVuYFPnxMnIMadsmQRpA1IDyZG8PFKQQgB 2y84tdRJWzL8lpYYGulYPzUd6MfpqwrrFA6bfElpPm8cxjLmJM1zGCFUPePuIxgm OFJKiOVzWDP4SC9l3gVpbUD2hw97BpGBUycPO3UR7Ye7tAhLJh5+hXKQ/3Z8x7xL h4+3PmuhQzXx4RK4ECrfsAv0uFwWr8gvQWLi+PnHL9GSZLAULHsbuN1D3hbPYTrx gLTGdg7q6LEZV6wLG1gm5wDl4XajSeKeYbSPEhcnlU7PNxG5pCYZGRbV32eXwNQd qFDurHtAyeSHGTLp5OXPa3pUyhzQFKI= -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:43 2026 by rpki-client