$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa File: 5cb1ed81-7286-331b-baf6-f8df13e27704.roa (raw, json) Hash identifier: mgPu+U54duEOwO5V7HM6WplivKBsW+W/cGYZYpn9/gM= Subject key identifier: 13:E5:A1:78:0A:93:66:C8:44:18:32:5D:82:E7:2B:42:BF:E8:8A:BF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7E8FFC8575E00F4653D40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e8:ff:c8:57:5e:00:f4:65:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=99aadd94-af79-4c6d-b3a9-447613127d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:97:21:ac:f4:ee:09:de:a4:bb:d4:3f:cd: cf:c0:1f:25:6e:04:28:ca:27:4d:94:af:89:03:da: a1:93:5a:db:d4:6e:97:0a:6e:59:69:0a:9c:24:67: e4:92:af:c2:0f:74:96:dd:b0:ae:76:6c:4c:2d:9e: ef:7f:2a:09:29:22:ef:18:4b:e4:88:3d:91:04:2c: 99:2b:8f:85:5f:25:91:f8:e4:06:f0:8a:ed:3e:da: 92:7d:8e:bc:ee:b5:8b:87:ce:b1:d1:38:ee:ef:d8: 23:0c:45:7f:ad:f1:a2:43:04:e7:88:78:b8:e0:8d: 1e:9a:54:3b:68:a7:49:a3:95:77:55:3b:5d:02:9e: cf:c2:2b:0f:91:f8:3d:c9:53:ef:8c:07:dc:ea:7b: 22:42:9e:1b:97:f4:95:bf:ba:66:72:96:f2:67:0b: a9:3b:d3:b1:1f:05:48:29:41:63:04:8b:c9:12:85: d9:2c:0a:42:0a:c4:ff:f9:e9:7d:3f:75:24:54:0c: d5:40:00:8b:eb:67:41:83:e1:24:2c:55:aa:40:df: fe:7f:cc:ea:3e:65:31:0d:07:05:09:ae:50:f5:2b: 4f:ee:ea:26:07:3d:18:60:bc:37:7f:98:f1:df:1d: a3:4f:6c:b7:d2:4d:c0:6d:76:48:77:73:2a:a2:a5: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E5:A1:78:0A:93:66:C8:44:18:32:5D:82:E7:2B:42:BF:E8:8A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e4:20:e1:2a:d6:25:d6:da:dd:8f:8a:03:4a:b2:83:4d:a2: 74:e3:91:b2:48:e8:71:ca:e2:07:60:07:a4:07:d0:c0:23:96: d4:99:74:3b:e5:af:a1:23:e6:d2:e1:ec:20:d2:7f:3a:cb:c4: f2:00:b6:17:62:ba:89:6b:ce:7b:5a:43:a4:10:f0:84:26:2b: 81:89:6a:89:d8:5a:33:f2:24:a9:4c:35:9f:89:61:cd:ef:0c: 3a:e6:0a:f9:90:5d:2d:5e:01:40:60:91:1d:56:91:49:20:67: 6b:b0:d7:97:86:55:56:2b:c5:9f:1e:03:f0:83:f4:c0:9e:d5: b5:ce:38:38:6b:07:d7:3c:f8:fa:27:c2:76:ae:5c:c6:2b:b8: 8c:7b:c5:ad:15:6f:bd:c7:76:1b:03:53:a5:8d:6e:61:28:07: 09:b7:4f:16:1b:41:1d:c5:5e:5e:56:12:de:49:65:7b:cb:08: a4:1e:3d:92:87:c1:4d:95:c7:c3:35:25:53:bf:05:0a:f6:15: a8:04:11:3c:37:c2:4d:52:0b:8c:70:f8:d2:81:c6:c3:61:13: bb:08:8f:da:ae:09:40:e2:f1:b1:9d:d1:3e:e1:04:eb:2a:f0: d0:3d:6d:1a:3e:fc:f6:db:7d:40:25:6d:08:84:53:2d:34:5c: a5:62:3a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+j/yFdeAPRlPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk OTlhYWRkOTQtYWY3OS00YzZkLWIzYTktNDQ3NjEzMTI3ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBGXIaz07gnepLvUP83PwB8lbgQoyidNlK+J A9qhk1rb1G6XCm5ZaQqcJGfkkq/CD3SW3bCudmxMLZ7vfyoJKSLvGEvkiD2RBCyZ K4+FXyWR+OQG8IrtPtqSfY687rWLh86x0Tju79gjDEV/rfGiQwTniHi44I0emlQ7 aKdJo5V3VTtdAp7PwisPkfg9yVPvjAfc6nsiQp4bl/SVv7pmcpbyZwupO9OxHwVI KUFjBIvJEoXZLApCCsT/+el9P3UkVAzVQACL62dBg+EkLFWqQN/+f8zqPmUxDQcF Ca5Q9StP7uomBz0YYLw3f5jx3x2jT2y30k3AbXZId3MqoqWORQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPloXgKk2bIRBgyXYLnK0K/6Iq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWNiMWVkODEtNzI4Ni0z MzFiLWJhZjYtZjhkZjEzZTI3NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTkIOEq1iXW2t2PigNKsoNNonTjkbJI6HHK4gdgB6QH0MAjltSZdDvl r6Ej5tLh7CDSfzrLxPIAthdiuolrzntaQ6QQ8IQmK4GJaonYWjPyJKlMNZ+JYc3v DDrmCvmQXS1eAUBgkR1WkUkgZ2uw15eGVVYrxZ8eA/CD9MCe1bXOODhrB9c8+Pon wnauXMYruIx7xa0Vb73HdhsDU6WNbmEoBwm3TxYbQR3FXl5WEt5JZXvLCKQePZKH wU2Vx8M1JVO/BQr2FagEETw3wk1SC4xw+NKBxsNhE7sIj9quCUDi8bGd0T7hBOsq 8NA9bRo+/PbbfUAlbQiEUy00XKViOpo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:51 2026 by rpki-client