$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa File: 58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa (raw, json) Hash identifier: wcTbHFmAug15Aur8PigI3sV0y75zku3km7N4qnreMds= Subject key identifier: E3:00:91:52:9A:A7:A5:5D:22:04:6B:54:72:95:A9:D8:7E:7B:7C:EC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA0852C153CD5ABE45A40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a0:85:2c:15:3c:d5:ab:e4:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8a789b24-8f9d-4c0c-b4aa-adfdec813aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:24:48:16:59:75:8c:26:26:61:cc:95:15:7e: 9e:79:99:20:1d:cf:7c:33:b2:85:e4:54:f5:7e:c3: 84:a5:b0:ca:cc:01:06:23:62:5e:e5:ad:4c:e1:42: df:8c:4d:e7:d8:6c:50:d0:ae:1a:fb:3f:35:67:41: 6c:ff:58:a6:6f:ea:1d:20:ae:55:97:68:f1:61:32: 77:b4:0f:d1:ca:8c:83:b9:0c:99:5f:4e:0f:4c:15: 49:64:43:4b:7d:84:f0:16:cd:9b:6f:27:48:67:96: 32:8c:f3:d6:26:43:e3:36:7d:37:48:e6:c7:74:55: 17:ba:04:04:7f:8b:0a:fb:a2:ac:85:97:11:fc:8c: 29:e8:aa:f0:74:f9:1e:2e:7f:8d:e2:23:91:02:45: 7c:14:5c:e8:59:4d:5f:da:70:ee:21:dd:35:04:43: 9f:20:c2:6b:03:9d:d7:0f:af:c0:3f:05:1c:6d:09: bd:7b:b1:a9:90:22:3b:e2:d8:90:49:c9:47:2f:d4: f9:9c:d9:4c:14:7a:d5:6c:b1:0a:c9:f1:00:d3:5c: 46:76:3c:c4:2b:ca:54:e0:41:fc:91:26:e3:09:11: 49:ed:b2:f0:d1:d4:11:50:37:25:9d:91:c4:8e:a7: 12:c1:f0:85:f0:c0:aa:f9:3d:fb:84:15:3b:78:eb: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:00:91:52:9A:A7:A5:5D:22:04:6B:54:72:95:A9:D8:7E:7B:7C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/58e67562-9336-39c4-9bbd-5485aaa2c6bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:65:8b:93:e4:a1:37:5a:da:77:67:18:ee:5f:21:06:e0:50: ef:2f:90:98:76:27:81:ff:26:1a:ec:20:d6:a8:3e:b7:78:1c: 38:ae:1c:f7:61:5e:75:80:86:e1:52:c1:1f:55:3e:63:39:23: 23:17:d4:96:29:0b:45:b3:11:06:45:8b:cc:41:8d:f3:d0:ec: 7a:03:bf:d8:78:3e:2e:be:02:ea:fd:17:a1:75:73:d3:ea:c4: d1:02:78:ad:37:40:7a:3e:45:08:11:5b:d8:bd:3c:f8:41:0f: 95:b6:44:22:d5:63:61:16:2b:1f:ff:94:dd:c7:f7:79:e8:e2: 0c:19:8a:e2:5b:aa:70:d8:e9:50:4a:a4:d4:8e:10:1b:57:9b: 9b:a7:df:5a:0b:e1:dc:92:a9:92:56:f6:25:7e:41:51:fb:9b: e2:bd:79:0f:56:d8:10:10:a4:8a:9d:02:a3:4c:5c:d2:37:6b: 0b:2f:7f:3b:ad:4c:f0:0b:92:78:2e:f2:05:a0:ae:cc:c8:bc: dc:17:f7:15:ac:87:17:55:f3:05:64:aa:67:97:60:62:53:7c: b3:bf:e2:5a:23:7d:12:a0:af:cf:9e:31:20:9f:b1:1d:9a:e5: 2a:d6:67:40:11:5d:31:fa:ae:48:52:9d:08:fc:a9:cb:26:4a: ee:cf:97:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaCFLBU81avkWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OGE3ODliMjQtOGY5ZC00YzBjLWI0YWEtYWRmZGVjODEzYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCRIFll1jCYmYcyVFX6eeZkgHc98M7KF5FT1 fsOEpbDKzAEGI2Je5a1M4ULfjE3n2GxQ0K4a+z81Z0Fs/1imb+odIK5Vl2jxYTJ3 tA/RyoyDuQyZX04PTBVJZENLfYTwFs2bbydIZ5YyjPPWJkPjNn03SObHdFUXugQE f4sK+6KshZcR/Iwp6KrwdPkeLn+N4iORAkV8FFzoWU1f2nDuId01BEOfIMJrA53X D6/APwUcbQm9e7GpkCI74tiQSclHL9T5nNlMFHrVbLEKyfEA01xGdjzEK8pU4EH8 kSbjCRFJ7bLw0dQRUDclnZHEjqcSwfCF8MCq+T37hBU7eOsqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMAkVKap6VdIgRrVHKVqdh+e3zsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNThlNjc1NjItOTMzNi0z OWM0LTliYmQtNTQ4NWFhYTJjNmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdli5PkoTda2ndnGO5fIQbgUO8vkJh2J4H/JhrsINaoPrd4HDiuHPdh XnWAhuFSwR9VPmM5IyMX1JYpC0WzEQZFi8xBjfPQ7HoDv9h4Pi6+Aur9F6F1c9Pq xNECeK03QHo+RQgRW9i9PPhBD5W2RCLVY2EWKx//lN3H93no4gwZiuJbqnDY6VBK pNSOEBtXm5un31oL4dySqZJW9iV+QVH7m+K9eQ9W2BAQpIqdAqNMXNI3awsvfzut TPALkngu8gWgrszIvNwX9xWshxdV8wVkqmeXYGJTfLO/4lojfRKgr8+eMSCfsR2a 5SrWZ0ARXTH6rkhSnQj8qcsmSu7Pl1g= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:47 2026 by rpki-client