$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa File: 79fb5224-2185-307a-972f-aefdd9878f1b.roa (raw, json) Hash identifier: brLcKLfRaVa8c0SX3F5DB597jc4o6Pyk4DL+CjbfpFs= Subject key identifier: FD:20:8C:95:32:03:8D:71:F8:E0:43:B4:A8:9A:98:5D:E5:7E:7D:78 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1172847CE24FA71BC893DA80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:84:7c:e2:4f:a7:1b:c8:93:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=8418f567-ed8d-458a-803b-f62cf48a7a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:29:e6:20:58:b1:0d:91:af:9f:ac:55:24: b5:95:62:4d:4f:e4:fc:56:dc:03:5a:a8:f7:25:ce: 95:3b:a9:9c:ea:23:68:f0:55:8c:6d:ff:37:7f:f9: a1:f4:0c:82:21:e2:df:6f:4c:f6:a5:ac:a1:91:6f: ea:9c:97:bd:cd:61:9b:51:a4:4b:ea:29:53:87:85: b7:c7:0c:19:88:02:f9:ea:a0:a4:06:34:de:bf:a4: bd:53:4c:af:05:3f:af:12:d3:1c:f8:79:44:7c:e0: c8:40:73:5d:32:c5:fb:9f:88:23:d2:3e:4d:28:56: 04:b1:7a:00:ae:3a:73:16:4e:04:6a:ad:be:26:ab: 52:1e:f9:7c:ac:5b:e3:78:0b:07:95:9e:bb:d9:b4: 0c:d4:b1:87:e1:59:e5:37:d8:d5:d5:5b:9d:9d:c8: 60:73:d2:87:c2:7d:02:7f:32:20:34:b6:ea:49:57: 22:ba:86:b5:c2:d0:43:9f:11:fb:b7:9d:76:4c:1f: bd:55:ee:cc:2e:9b:48:76:5f:1a:ed:49:ec:9f:2e: 33:09:1d:47:7c:79:87:b1:8c:8f:6b:e9:59:14:93: 33:af:97:d0:61:f0:0d:c8:19:84:a8:66:fd:15:67: fe:28:6b:63:42:55:10:c1:f8:cf:b6:8b:41:4d:03: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:20:8C:95:32:03:8D:71:F8:E0:43:B4:A8:9A:98:5D:E5:7E:7D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1b:b2:78:59:eb:b6:5a:6e:ee:17:a9:a0:53:e0:37:55:78: 55:1f:3a:ca:08:58:63:7b:42:83:d1:f0:76:3c:e7:21:d3:a4: 3a:89:20:5a:d3:81:9a:08:54:ff:4d:e0:5a:17:f7:a1:81:d6: 92:45:fa:a2:0a:47:4d:8c:34:e2:25:5e:43:0a:f1:2a:c5:88: a2:19:62:34:85:32:a3:c4:42:9d:32:16:fa:8f:0a:2e:b4:d9: 84:f4:de:2f:76:cd:f1:74:52:b9:b3:6c:28:78:25:0a:bf:9a: 29:d2:84:52:fd:93:0d:f5:fd:0d:6b:2e:08:d8:f6:51:19:85: c8:34:b0:c1:5f:d2:93:d0:a6:9c:25:e5:7e:f7:f6:ec:96:ed: 04:2b:a8:4a:88:f6:7c:a4:bd:64:98:eb:65:f1:e5:f2:7d:f7: e9:96:ff:b6:c7:3b:6b:e6:74:c3:72:45:7b:8c:38:3b:58:b3: f7:c9:ba:2e:d8:0c:fb:3c:cc:dd:b3:a2:8a:bc:ad:01:7f:6d: da:a8:b8:0f:60:7d:6b:39:b8:49:8d:13:c2:f9:ef:cd:29:03: a9:7f:cb:c9:d9:c4:0d:29:31:45:46:8b:0b:00:5f:1b:c6:47: 6f:f6:09:7c:84:03:7a:dd:ca:01:9e:e4:8d:d4:eb:48:8c:f7: ac:6b:ea:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoR84k+nG8iT2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ODQxOGY1NjctZWQ4ZC00NThhLTgwM2ItZjYyY2Y0OGE3YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrEp5iBYsQ2Rr5+sVSS1lWJNT+T8VtwDWqj3 Jc6VO6mc6iNo8FWMbf83f/mh9AyCIeLfb0z2payhkW/qnJe9zWGbUaRL6ilTh4W3 xwwZiAL56qCkBjTev6S9U0yvBT+vEtMc+HlEfODIQHNdMsX7n4gj0j5NKFYEsXoA rjpzFk4Eaq2+JqtSHvl8rFvjeAsHlZ672bQM1LGH4VnlN9jV1Vudnchgc9KHwn0C fzIgNLbqSVciuoa1wtBDnxH7t512TB+9Ve7MLptIdl8a7Unsny4zCR1HfHmHsYyP a+lZFJMzr5fQYfANyBmEqGb9FWf+KGtjQlUQwfjPtotBTQNatwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0gjJUyA41x+OBDtKiamF3lfn14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzlmYjUyMjQtMjE4NS0z MDdhLTk3MmYtYWVmZGQ5ODc4ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQbsnhZ67Zabu4XqaBT4DdVeFUfOsoIWGN7QoPR8HY85yHTpDqJIFrT gZoIVP9N4FoX96GB1pJF+qIKR02MNOIlXkMK8SrFiKIZYjSFMqPEQp0yFvqPCi60 2YT03i92zfF0UrmzbCh4JQq/minShFL9kw31/Q1rLgjY9lEZhcg0sMFf0pPQppwl 5X739uyW7QQrqEqI9nykvWSY62Xx5fJ99+mW/7bHO2vmdMNyRXuMODtYs/fJui7Y DPs8zN2zooq8rQF/bdqouA9gfWs5uEmNE8L5780pA6l/y8nZxA0pMUVGiwsAXxvG R2/2CXyEA3rdygGe5I3U60iM96xr6r8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:49 2026 by rpki-client