$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa File: 4c290c10-a245-3f26-b6d5-71393a805d03.roa (raw, json) Hash identifier: PxPQtJ259Nxq/dQRjCDTQr9ba6Pb5BQpeJ+CRANxQ9I= Subject key identifier: F7:40:16:C9:C9:C1:DA:4E:AA:16:FE:EE:06:F6:5E:4A:21:2D:D9:72 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A5F54EDED4E087DA71F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:5f:54:ed:ed:4e:08:7d:a7:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=e3feeaa9-00fc-4723-988b-6a94e3feaba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:91:11:6e:7e:0d:48:f2:b5:ba:ce:92:97:33: 7b:58:17:57:80:b5:e5:16:f7:a6:8b:24:11:81:18: bf:46:84:f9:9f:f2:ba:e5:7d:ad:70:e0:a7:70:c3: 01:22:0b:c9:80:33:cd:eb:92:6c:1a:c3:e5:b1:e0: 66:2b:c9:ef:fc:bb:2d:65:43:f7:24:0e:79:21:68: f0:f7:59:df:9d:35:68:d3:07:fb:77:63:c8:f6:53: 0f:ad:50:e0:f6:b0:44:66:b7:41:a9:6e:f9:dc:7f: f5:41:a3:fc:1a:98:c6:74:1b:00:41:0e:ca:53:72: 83:3a:1f:1d:ad:17:13:4e:4f:bf:f3:26:06:5e:bf: 8d:95:b3:60:b9:70:61:1c:1e:80:c5:1d:fc:1c:39: 0f:24:27:5a:0f:c6:49:81:f6:cd:de:36:c1:29:99: ff:3f:c0:9b:53:20:41:e7:bb:0b:15:47:5b:75:3f: 42:4f:9e:57:ff:3b:d0:a6:75:9d:60:b4:8e:0e:85: 04:c7:17:5d:0b:95:3d:b4:1c:d7:e1:c7:6e:09:ee: 15:2f:61:7b:0b:d1:f5:e8:b5:38:1b:39:7c:04:70: f7:03:b6:be:47:1c:81:40:54:e6:c6:6e:47:52:8a: b2:4f:32:8f:3a:92:b0:0f:bc:f8:ad:cd:fd:7c:a6: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:40:16:C9:C9:C1:DA:4E:AA:16:FE:EE:06:F6:5E:4A:21:2D:D9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4c290c10-a245-3f26-b6d5-71393a805d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:06:5d:05:b8:74:a4:91:7f:1d:33:06:4f:dd:ed:ca:1c:a8: fa:85:d8:56:dd:74:e1:d8:09:34:ae:d3:48:e4:5a:b1:6f:d8: 4f:1c:63:05:5e:88:a5:3a:34:a6:c3:08:9d:5a:1f:bb:4e:3f: 5e:93:17:cc:3a:b8:71:b9:86:bf:08:48:88:26:43:fe:f7:e3: c7:82:f8:8b:01:1c:f9:5b:f4:0e:68:02:01:bb:26:8b:49:bd: e3:58:07:eb:de:f0:bf:58:9a:9a:be:09:eb:ec:08:a9:cc:ff: 73:4d:f1:4f:18:38:bf:cd:9b:7f:45:37:5c:21:f5:00:66:13: 9e:e8:4a:58:b3:48:51:cb:f7:44:62:6f:ab:47:7e:cd:23:6d: 2d:c5:c8:7f:21:76:5d:94:d6:56:95:7f:75:e9:61:d3:05:47: 60:c2:51:50:4c:72:e9:97:9c:3f:a5:0d:65:5c:46:b3:61:7c: 73:58:89:e8:4e:82:cc:ee:a9:28:b9:e5:44:86:af:ff:c6:f5: ff:c8:c2:40:c9:6a:59:82:be:f6:e6:bf:67:97:8e:5c:5d:37: b7:60:53:93:b0:aa:68:95:34:bf:80:38:49:cc:83:9f:ad:bf: 1c:4e:a4:79:13:32:51:7a:b6:8b:f7:36:06:f9:ce:4e:0e:39: 2b:b5:23:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSl9U7e1OCH2nHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZTNmZWVhYTktMDBmYy00NzIzLTk4OGItNmE5NGUzZmVhYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5ERbn4NSPK1us6SlzN7WBdXgLXlFvemiyQR gRi/RoT5n/K65X2tcOCncMMBIgvJgDPN65JsGsPlseBmK8nv/LstZUP3JA55IWjw 91nfnTVo0wf7d2PI9lMPrVDg9rBEZrdBqW753H/1QaP8GpjGdBsAQQ7KU3KDOh8d rRcTTk+/8yYGXr+NlbNguXBhHB6AxR38HDkPJCdaD8ZJgfbN3jbBKZn/P8CbUyBB 57sLFUdbdT9CT55X/zvQpnWdYLSODoUExxddC5U9tBzX4cduCe4VL2F7C9H16LU4 Gzl8BHD3A7a+RxyBQFTmxm5HUoqyTzKPOpKwD7z4rc39fKaKZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdAFsnJwdpOqhb+7gb2XkohLdlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGMyOTBjMTAtYTI0NS0z ZjI2LWI2ZDUtNzEzOTNhODA1ZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIGXQW4dKSRfx0zBk/d7cocqPqF2FbddOHYCTSu00jkWrFv2E8cYwVe iKU6NKbDCJ1aH7tOP16TF8w6uHG5hr8ISIgmQ/7348eC+IsBHPlb9A5oAgG7JotJ veNYB+ve8L9Ympq+CevsCKnM/3NN8U8YOL/Nm39FN1wh9QBmE57oSlizSFHL90Ri b6tHfs0jbS3FyH8hdl2U1laVf3XpYdMFR2DCUVBMcumXnD+lDWVcRrNhfHNYiehO gszuqSi55USGr//G9f/IwkDJalmCvvbmv2eXjlxdN7dgU5OwqmiVNL+AOEnMg5+t vxxOpHkTMlF6tov3Ngb5zk4OOSu1I44= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:26 2026 by rpki-client