$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa File: 4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa (raw, json) Hash identifier: p5vb0GNtlFnVwYQguv6PLoWNud99xLa7sNQCniGQDGw= Subject key identifier: C2:7E:F6:B6:E9:7E:05:E4:FB:B9:4C:3B:86:F9:36:04:2E:9F:C6:E9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8DD2FC48821B6B1E5A80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8d:d2:fc:48:82:1b:6b:1e:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1c49a443-a746-4c50-a55d-88c62cf9e677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:b5:3d:22:ba:13:6b:54:de:50:13:99:09: c1:2a:04:51:de:b8:cd:21:28:95:ce:bf:6e:79:9e: 6d:b8:de:49:2a:99:00:ae:1d:b0:17:12:7b:7b:8b: f1:22:d2:c4:ef:ca:aa:89:d3:5c:49:5e:eb:d5:ac: 4d:53:b9:d0:62:a1:97:42:70:a4:8b:3b:75:da:d1: 4d:60:bb:3c:6b:f6:d2:e0:85:c5:33:ff:dc:0a:a3: d5:9f:3f:b8:d0:98:3a:d6:15:a1:5e:1c:ca:38:d5: 94:6f:e6:62:36:a5:c8:a3:09:fa:2d:b7:3e:a5:47: 08:97:64:61:9b:51:6e:8f:9d:7a:8e:50:b9:e6:d1: 9b:5b:ef:db:d6:45:29:9c:ff:82:9f:63:52:53:d1: ee:b9:9c:ce:1c:ce:06:de:ba:3c:39:a4:07:27:a5: d6:62:fe:ca:20:6a:2d:39:66:12:18:0f:51:fe:7e: ea:36:cb:30:c4:8f:55:ce:9b:e7:30:ff:17:4b:bc: 2f:46:84:0e:eb:00:b2:68:5d:07:91:5a:1e:75:41: 96:2e:e8:97:53:da:87:b6:66:8a:a1:6a:67:ee:b7: 16:45:5b:73:58:56:c9:18:ec:43:d3:03:99:28:a4: d4:c0:da:e1:b6:50:a2:3e:09:9d:82:d8:50:85:bb: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:F6:B6:E9:7E:05:E4:FB:B9:4C:3B:86:F9:36:04:2E:9F:C6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4cbd6cba-741f-3ff4-82ef-40ac72249cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:76:a4:aa:72:c9:f7:83:d6:d4:09:99:2f:32:ca:a6:fc:39: c5:06:4d:57:90:5c:54:5d:4d:97:f0:80:15:df:b9:3c:52:01: ce:a7:0c:cc:18:84:c7:e5:20:cc:57:30:be:66:61:c4:e4:04: ba:e7:e6:ff:3d:5d:4f:9f:9e:35:41:1a:69:31:cc:06:9f:16: 96:17:f8:e6:19:51:56:40:a2:a8:be:f5:34:83:ff:a7:42:93: c5:6d:6d:d2:37:ca:c0:58:c5:d7:c2:57:de:2f:be:ff:db:17: 40:56:65:44:c1:25:99:75:7b:59:e1:83:c6:45:5e:18:80:f9: 08:d8:15:75:58:d2:d0:23:5a:b6:af:63:06:e8:a5:cd:f3:33: b7:06:e3:5c:40:65:90:78:04:ab:b3:db:c6:2a:29:a0:48:0d: 3c:59:6c:29:ab:35:7c:8b:2a:a5:20:80:76:c8:3e:32:ee:49: b5:c4:2c:5e:58:fb:9a:bc:c4:65:af:c9:a0:12:90:70:8b:0c: 8d:0d:ac:60:09:1d:cb:70:62:d4:1d:d2:14:f6:c3:23:24:88: 24:9b:5b:6d:27:99:24:46:15:97:51:02:5c:d9:88:bf:b2:9e: 42:cc:d7:e0:aa:8c:3e:47:44:9b:cc:cb:32:9f:e3:00:17:0f: 67:de:3b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY3S/EiCG2seWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWM0OWE0NDMtYTc0Ni00YzUwLWE1NWQtODhjNjJjZjllNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaq1PSK6E2tU3lATmQnBKgRR3rjNISiVzr9u eZ5tuN5JKpkArh2wFxJ7e4vxItLE78qqidNcSV7r1axNU7nQYqGXQnCkizt12tFN YLs8a/bS4IXFM//cCqPVnz+40Jg61hWhXhzKONWUb+ZiNqXIown6Lbc+pUcIl2Rh m1Fuj516jlC55tGbW+/b1kUpnP+Cn2NSU9HuuZzOHM4G3ro8OaQHJ6XWYv7KIGot OWYSGA9R/n7qNsswxI9VzpvnMP8XS7wvRoQO6wCyaF0HkVoedUGWLuiXU9qHtmaK oWpn7rcWRVtzWFbJGOxD0wOZKKTUwNrhtlCiPgmdgthQhbul9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ+9rbpfgXk+7lMO4b5NgQun8bpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGNiZDZjYmEtNzQxZi0z ZmY0LTgyZWYtNDBhYzcyMjQ5Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC52pKpyyfeD1tQJmS8yyqb8OcUGTVeQXFRdTZfwgBXfuTxSAc6nDMwY hMflIMxXML5mYcTkBLrn5v89XU+fnjVBGmkxzAafFpYX+OYZUVZAoqi+9TSD/6dC k8VtbdI3ysBYxdfCV94vvv/bF0BWZUTBJZl1e1nhg8ZFXhiA+QjYFXVY0tAjWrav Ywbopc3zM7cG41xAZZB4BKuz28YqKaBIDTxZbCmrNXyLKqUggHbIPjLuSbXELF5Y +5q8xGWvyaASkHCLDI0NrGAJHctwYtQd0hT2wyMkiCSbW20nmSRGFZdRAlzZiL+y nkLM1+CqjD5HRJvMyzKf4wAXD2feO1Q= -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:43 2026 by rpki-client