$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/927c1f00-2a95-3b5d-b03c-462a5c066ac9.roa File: 927c1f00-2a95-3b5d-b03c-462a5c066ac9.roa (raw, json) Hash identifier: X5s+IVGgqsB28CIXf/DtSXIHEHP1YtARz90Mri+NkFI= Subject key identifier: 67:10:B9:3B:E2:3B:A3:5E:93:C1:B1:AA:62:27:FD:CF:EC:F5:11:53 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D89DEDFF1163302086680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/927c1f00-2a95-3b5d-b03c-462a5c066ac9.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:89:de:df:f1:16:33:02:08:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=813550cd-bfdd-4453-9aab-320c0cccc55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:5b:34:97:b3:e6:aa:79:ba:8f:3e:26:26: bf:04:59:d2:83:fd:91:40:ee:46:2c:9c:ae:fe:83: 08:2c:d2:22:fa:6e:cf:df:d7:04:04:f7:18:67:51: ca:e9:e1:bc:39:9e:39:0d:cb:cf:26:c9:68:e4:93: f4:95:8d:80:e5:21:dc:7a:b3:1a:19:b5:69:25:cb: 6c:f3:c7:8a:69:9e:ca:2e:c5:3c:f3:8f:07:7d:c2: 92:37:0f:d4:88:8e:5f:08:d5:bb:12:35:0b:d0:d0: 64:0d:c1:77:6e:1c:df:bc:da:63:46:c3:9f:31:61: 00:b2:bf:89:e1:ac:ab:fa:f3:ec:76:af:9a:e1:cc: 78:5e:05:85:4d:c8:70:e1:b0:42:1e:e3:90:7d:fc: d0:e0:11:87:89:31:b1:81:25:12:1d:8f:55:0f:dc: 65:d5:97:b5:b9:50:ca:a8:39:bb:9a:34:18:95:ef: c2:69:00:34:25:b9:20:d8:a5:0e:da:bf:35:b2:32: 4c:33:32:7a:f9:72:cc:d4:95:32:13:d5:f3:c7:36: 8b:5b:fa:2e:41:d8:5c:e1:07:21:ac:28:6b:77:a7: e3:f2:b1:99:f6:45:81:58:02:c0:00:ef:1a:b3:c0: de:b9:8c:c7:3d:ae:58:c7:01:14:9b:1d:66:87:26: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:10:B9:3B:E2:3B:A3:5E:93:C1:B1:AA:62:27:FD:CF:EC:F5:11:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/927c1f00-2a95-3b5d-b03c-462a5c066ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:2a:77:f1:68:9d:d2:cc:e1:be:81:23:85:fd:df:5e:88:60: 42:b2:e3:cd:83:9f:f1:65:8c:4e:b2:61:97:52:15:a9:98:63: fa:0c:eb:bb:9c:c8:f3:d2:fb:7a:8e:c7:d0:3f:6e:ea:8b:43: e4:75:f0:dc:9d:1b:22:74:e5:a9:14:38:24:8a:6e:c3:2b:9f: e7:4f:2d:ec:3d:16:2a:f3:63:a9:ae:b1:1c:96:a9:ba:28:90: 26:54:67:eb:84:36:48:57:be:68:6f:03:83:b7:0c:e9:ed:e5: e6:8b:fd:27:f7:e1:36:dd:e2:79:54:d1:9a:14:4a:b6:89:1f: e4:34:21:7f:86:ed:b7:bc:ae:1e:fd:0f:5b:13:4e:31:99:e3: 90:18:12:32:69:cc:1e:69:fe:a4:57:16:fc:a1:89:1a:46:d7: c3:bf:6f:01:92:ce:46:9b:74:e0:f2:f1:a0:15:6a:f5:58:8c: 9f:5b:2a:4f:82:9f:07:50:11:74:5c:44:34:e8:59:e5:19:85: 1c:05:42:fe:0f:6b:6d:24:1e:d1:c0:4a:e0:a4:41:24:d7:7f: 51:bc:78:15:b8:24:87:c8:37:14:5c:69:20:ce:ae:a9:e9:25: a7:c3:2d:e5:a9:71:4d:22:ab:11:10:97:ab:fa:05:3e:5c:66: 6f:35:9c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYne3/EWMwIIZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODEzNTUwY2QtYmZkZC00NDUzLTlhYWItMzIwYzBjY2NjNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15xbNJez5qp5uo8+Jia/BFnSg/2RQO5GLJyu /oMILNIi+m7P39cEBPcYZ1HK6eG8OZ45DcvPJslo5JP0lY2A5SHcerMaGbVpJcts 88eKaZ7KLsU8848HfcKSNw/UiI5fCNW7EjUL0NBkDcF3bhzfvNpjRsOfMWEAsr+J 4ayr+vPsdq+a4cx4XgWFTchw4bBCHuOQffzQ4BGHiTGxgSUSHY9VD9xl1Ze1uVDK qDm7mjQYle/CaQA0Jbkg2KUO2r81sjJMMzJ6+XLM1JUyE9XzxzaLW/ouQdhc4Qch rChrd6fj8rGZ9kWBWALAAO8as8DeuYzHPa5YxwEUmx1mhyYobQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcQuTviO6Nek8GxqmIn/c/s9RFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTI3YzFmMDAtMmE5NS0z YjVkLWIwM2MtNDYyYTVjMDY2YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcqd/FondLM4b6BI4X9316IYEKy482Dn/FljE6yYZdSFamYY/oM67uc yPPS+3qOx9A/buqLQ+R18NydGyJ05akUOCSKbsMrn+dPLew9FirzY6musRyWqboo kCZUZ+uENkhXvmhvA4O3DOnt5eaL/Sf34Tbd4nlU0ZoUSraJH+Q0IX+G7be8rh79 D1sTTjGZ45AYEjJpzB5p/qRXFvyhiRpG18O/bwGSzkabdODy8aAVavVYjJ9bKk+C nwdQEXRcRDToWeUZhRwFQv4Pa20kHtHASuCkQSTXf1G8eBW4JIfINxRcaSDOrqnp JafDLeWpcU0iqxEQl6v6BT5cZm81nKk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:05:12 2026 by rpki-client