$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/868bf3fe-fed0-31f6-ac92-eed66d75b845.roa File: 868bf3fe-fed0-31f6-ac92-eed66d75b845.roa (raw, json) Hash identifier: ZfTBdBandqET26tPitk8zoIy22/V7bT+Zed+0k9fdHo= Subject key identifier: 0F:49:57:AE:D2:70:F9:44:1F:2F:89:BF:E4:A0:0A:15:C3:07:A4:97 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D85D0C13E7EFB0737AE00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/868bf3fe-fed0-31f6-ac92-eed66d75b845.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:85:d0:c1:3e:7e:fb:07:37:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e82aca6b-f870-436b-91a8-5d1bfb35ca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:e4:0f:55:32:0d:4c:23:9f:6e:11:e1:62: 0c:b6:7f:67:01:f1:82:4e:55:be:a1:bb:ed:4a:b7: e7:7d:14:48:34:fe:13:5a:07:82:e5:18:85:6b:75: 32:a9:fa:93:ff:f9:c0:b5:16:8b:d8:7d:0e:40:5b: a2:60:25:07:a0:30:a3:d3:af:54:3a:e6:d2:96:f3: 47:4e:2c:4b:6e:6c:8b:bc:c5:f3:c5:81:06:d8:a8: 61:9f:ea:af:f0:62:ba:6b:2f:c9:60:27:0b:a9:91: 2b:07:84:85:34:85:84:a1:c1:e4:86:9b:6a:90:20: 19:f7:37:48:eb:bc:1f:61:49:96:21:13:96:69:b8: a7:2a:3d:72:58:e5:b4:31:f5:75:86:dd:11:77:d3: bf:06:04:46:77:dd:88:cf:ef:c2:7d:f5:af:70:03: 55:0d:34:17:2f:fc:01:a3:34:24:09:20:28:e5:a5: 46:9a:d5:92:ce:eb:30:cf:2c:a3:37:2a:42:dc:db: 89:39:2a:38:1b:0b:56:3e:6e:19:e1:e4:c1:65:89: 4b:c1:b7:2b:cb:c2:3c:f5:cc:50:17:01:72:33:e7: bd:31:c9:17:42:4a:d2:8d:60:35:62:07:88:e9:73: e5:51:97:9f:07:51:be:58:4c:5d:9a:e6:de:16:8d: 7f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:57:AE:D2:70:F9:44:1F:2F:89:BF:E4:A0:0A:15:C3:07:A4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/868bf3fe-fed0-31f6-ac92-eed66d75b845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:95:41:bc:7f:9d:5f:c1:22:42:b0:a7:54:c9:dc:2e:b3:7d: c2:cd:3c:ee:da:0b:18:98:04:10:4c:5d:d7:82:b5:46:03:54: b5:66:6a:36:f2:da:a8:7b:c6:45:a3:a2:ce:01:14:6e:e6:96: e4:34:69:23:65:0d:8c:81:22:c2:1a:34:bb:77:5c:17:a4:1c: b4:e5:77:92:11:34:15:70:dd:3e:1f:24:1b:c0:f8:56:b3:1b: a4:e6:32:25:8e:36:95:2f:a1:a0:c1:8c:dc:47:a1:86:fa:51: a1:6e:af:cd:e1:4e:0d:db:2d:04:38:ed:10:4a:db:6d:c5:36: f0:c5:f5:04:a0:7d:f0:19:aa:2b:b1:c6:40:65:51:fa:75:c7: 44:43:21:db:6b:0b:51:39:fd:bf:33:da:bc:9d:19:ce:46:70: cc:d4:87:f1:76:18:98:fa:09:32:3a:06:e2:bc:12:31:c1:f2: 0d:36:79:cd:6d:69:67:5b:33:09:0a:ff:2b:fe:28:4f:26:5e: 93:e7:b8:fd:ac:a7:79:63:cc:ae:96:b9:92:57:9c:37:68:4f: 51:47:b2:32:1c:8c:73:4e:fc:dd:86:7b:43:95:a2:03:06:49: 21:24:49:93:cd:43:3f:84:35:82:91:55:5b:56:65:40:2c:cb: 4d:8a:a5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYXQwT5++wc3rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTgyYWNhNmItZjg3MC00MzZiLTkxYTgtNWQxYmZiMzVjYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAjkD1UyDUwjn24R4WIMtn9nAfGCTlW+obvt SrfnfRRINP4TWgeC5RiFa3UyqfqT//nAtRaL2H0OQFuiYCUHoDCj069UOubSlvNH TixLbmyLvMXzxYEG2Khhn+qv8GK6ay/JYCcLqZErB4SFNIWEocHkhptqkCAZ9zdI 67wfYUmWIROWabinKj1yWOW0MfV1ht0Rd9O/BgRGd92Iz+/CffWvcANVDTQXL/wB ozQkCSAo5aVGmtWSzuswzyyjNypC3NuJOSo4GwtWPm4Z4eTBZYlLwbcry8I89cxQ FwFyM+e9MckXQkrSjWA1YgeI6XPlUZefB1G+WExdmubeFo1/MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9JV67ScPlEHy+Jv+SgChXDB6SXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODY4YmYzZmUtZmVkMC0z MWY2LWFjOTItZWVkNjZkNzViODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSVQbx/nV/BIkKwp1TJ3C6zfcLNPO7aCxiYBBBMXdeCtUYDVLVmajby 2qh7xkWjos4BFG7mluQ0aSNlDYyBIsIaNLt3XBekHLTld5IRNBVw3T4fJBvA+Faz G6TmMiWONpUvoaDBjNxHoYb6UaFur83hTg3bLQQ47RBK223FNvDF9QSgffAZqiux xkBlUfp1x0RDIdtrC1E5/b8z2rydGc5GcMzUh/F2GJj6CTI6BuK8EjHB8g02ec1t aWdbMwkK/yv+KE8mXpPnuP2sp3ljzK6WuZJXnDdoT1FHsjIcjHNO/N2Ge0OVogMG SSEkSZPNQz+ENYKRVVtWZUAsy02KpQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:21 2026 by rpki-client