$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/463c4fe8-9f0c-3099-a196-db01829be9e1.roa File: 463c4fe8-9f0c-3099-a196-db01829be9e1.roa (raw, json) Hash identifier: I0ALAWXkZ59gQ0KuH4EqXiJsBl/6mWBFct8uaUpDOxM= Subject key identifier: B3:DB:46:75:31:DB:79:C8:B1:0A:C2:A5:B7:58:91:23:6F:6E:E7:8E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9CDBDC20166CC8492370 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/463c4fe8-9f0c-3099-a196-db01829be9e1.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9c:db:dc:20:16:6c:c8:49:23:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=01d6cf69-a3b1-4f8a-bcc6-749d82f45cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:1c:23:be:3a:d9:6a:4e:ed:28:5e:81:d7: 35:43:41:b6:8c:cc:6c:88:c3:a0:a0:28:2e:16:d6: b3:2a:cc:b3:14:d5:16:e5:8c:7e:12:95:c3:40:14: 0f:d1:40:c4:64:de:ef:27:5c:0b:e7:aa:85:d4:2c: d7:eb:4f:7d:de:7f:4e:4f:bf:f3:d9:1f:4a:3d:d4: a4:09:e9:97:62:93:4d:0f:55:b5:00:ed:0c:39:4a: 12:58:0c:5a:88:0a:01:fd:20:a6:13:c0:db:b5:95: 62:11:67:76:38:f9:b2:31:ff:ee:c1:f7:d0:90:87: 40:ee:1a:9a:05:0a:6a:58:0d:43:1f:1b:ae:34:a4: 7b:17:14:2b:77:da:e2:e3:a9:d0:fd:c9:c7:9f:05: ac:d2:93:fc:b5:34:b7:57:79:30:74:56:15:dc:07: 9d:e6:df:0f:88:e5:f9:9f:cc:15:fb:0a:41:8e:09: 9e:6e:68:29:fc:e8:b3:7c:a9:55:e8:93:f8:1d:d9: 4c:0f:6f:39:19:b8:4b:25:a6:95:5b:81:b8:c3:25: 3d:8c:41:ab:36:2f:00:2a:32:58:8f:49:df:00:ae: 81:92:64:d2:a7:50:12:97:09:38:48:50:85:6f:c4: bf:bb:c7:a8:28:df:db:a0:f3:5f:66:7b:70:36:e5: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DB:46:75:31:DB:79:C8:B1:0A:C2:A5:B7:58:91:23:6F:6E:E7:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/463c4fe8-9f0c-3099-a196-db01829be9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:b7:58:7c:44:e4:91:ca:b4:a4:48:90:62:04:03:d7:18:60: a5:38:5a:46:d9:00:7a:6d:58:ef:d3:b5:ed:12:c7:1b:85:48: 8f:96:37:d9:6a:1e:4c:1b:d8:0b:e7:47:44:55:f4:53:28:f2: bc:9a:c8:78:0f:84:85:77:5a:e8:67:5e:a1:fd:9a:f3:d4:a7: 78:0b:12:8a:78:ac:2e:96:2d:aa:2d:f3:47:63:d0:cb:32:eb: 31:f3:52:6e:1e:f1:a5:ce:bb:2b:2a:74:85:8c:75:04:49:51: f7:fa:ee:e6:95:18:c4:52:c0:8f:78:11:95:23:39:35:f4:bf: 63:f9:65:bf:9c:6c:07:cf:b2:01:40:d3:91:0e:bd:60:4c:3a: 97:39:5a:50:83:6f:60:58:50:47:22:35:95:24:a5:bd:10:d0: 51:e1:8e:3d:1b:10:80:c4:96:8b:69:c5:27:6c:24:99:44:4f: 3b:ba:b0:0f:1a:ce:07:20:c9:de:c9:0a:75:0a:52:0e:19:f5: 6c:0c:43:70:c3:4e:6e:c2:2b:ed:46:4c:02:85:39:52:35:c0: d4:d7:60:15:4e:52:9a:c9:a5:33:9f:50:2c:1c:13:d7:03:62: 28:4b:a9:16:a2:7e:d1:92:58:86:5f:b1:3d:40:92:7f:ce:1c: f6:8c:db:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZzb3CAWbMhJI3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MDFkNmNmNjktYTNiMS00ZjhhLWJjYzYtNzQ5ZDgyZjQ1Y2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi20cI7462WpO7Shegdc1Q0G2jMxsiMOgoCgu FtazKsyzFNUW5Yx+EpXDQBQP0UDEZN7vJ1wL56qF1CzX60993n9OT7/z2R9KPdSk CemXYpNND1W1AO0MOUoSWAxaiAoB/SCmE8DbtZViEWd2OPmyMf/uwffQkIdA7hqa BQpqWA1DHxuuNKR7FxQrd9ri46nQ/cnHnwWs0pP8tTS3V3kwdFYV3Aed5t8PiOX5 n8wV+wpBjgmebmgp/OizfKlV6JP4HdlMD285GbhLJaaVW4G4wyU9jEGrNi8AKjJY j0nfAK6BkmTSp1ASlwk4SFCFb8S/u8eoKN/boPNfZntwNuUSoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPbRnUx23nIsQrCpbdYkSNvbueOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDYzYzRmZTgtOWYwYy0z MDk5LWExOTYtZGIwMTgyOWJlOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+3WHxE5JHKtKRIkGIEA9cYYKU4WkbZAHptWO/Tte0SxxuFSI+WN9lq Hkwb2AvnR0RV9FMo8ryayHgPhIV3WuhnXqH9mvPUp3gLEop4rC6WLaot80dj0Msy 6zHzUm4e8aXOuysqdIWMdQRJUff67uaVGMRSwI94EZUjOTX0v2P5Zb+cbAfPsgFA 05EOvWBMOpc5WlCDb2BYUEciNZUkpb0Q0FHhjj0bEIDElotpxSdsJJlETzu6sA8a zgcgyd7JCnUKUg4Z9WwMQ3DDTm7CK+1GTAKFOVI1wNTXYBVOUprJpTOfUCwcE9cD YihLqRaiftGSWIZfsT1Akn/OHPaM240= -----END CERTIFICATE-----Generated at Thu Mar 26 13:30:54 2026 by rpki-client