$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa File: 950d1e58-7e2f-3c3a-94fc-602dd6903988.roa (raw, json) Hash identifier: 9Tb+KGPHHWYP+yXeRazp9fD6olbJekbXLjO3dwTy81o= Subject key identifier: FF:FA:49:E2:3A:1A:00:47:3B:6F:F3:1A:F9:C9:6E:B1:A8:22:84:D0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A55948F151C48434E1D40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:55:94:8f:15:1c:48:43:4e:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=933d80fd-4739-407b-ad1f-5675c8fe7695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:61:5b:eb:ac:f3:f6:1c:ac:d2:66:b0:1d:4f: 7e:e7:2d:62:47:c9:cc:5b:0b:f2:84:df:9f:03:f5: 13:34:14:1b:39:c7:67:ce:63:4f:18:30:00:3a:9d: 38:32:9a:6c:88:8e:46:0b:54:30:d4:c1:74:4b:20: 91:e7:1a:7e:9c:5d:33:25:b2:eb:02:b9:3c:87:6a: e1:d7:78:a9:97:1c:02:8f:3e:50:19:7e:f7:16:c0: 05:f1:7f:fc:e8:d7:ec:6d:93:44:69:83:a6:b4:14: 14:27:df:4e:96:8a:4d:e4:7e:77:89:ef:2d:2d:1d: 91:ef:be:1b:19:12:18:a7:33:9a:28:3a:8a:dd:1d: 8a:44:5f:e2:06:cd:7c:44:2c:2a:62:b5:0b:89:16: 22:5a:49:87:87:f7:b8:6f:28:35:a9:49:8c:93:42: e3:0c:74:4f:b5:31:58:ae:43:14:8f:f7:d5:13:b3: de:eb:71:85:ab:c6:45:04:8c:d4:fb:11:e6:1a:0b: 13:a6:51:e7:e5:72:8f:5f:5b:05:86:42:67:7a:f2: b1:8d:01:ac:02:e4:66:39:ef:3f:20:de:2d:49:94: 1d:15:db:c5:93:4b:da:3d:9c:b5:3f:09:f2:fc:17: 22:9d:36:07:12:d7:b2:87:f3:24:f8:69:d6:00:23: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FA:49:E2:3A:1A:00:47:3B:6F:F3:1A:F9:C9:6E:B1:A8:22:84:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f4:11:39:2d:94:40:6a:b8:f0:c0:31:e3:d5:25:82:1d:12: db:fb:d6:cc:98:26:08:6a:73:46:10:1a:4b:78:29:28:dd:8f: 66:73:06:d1:a6:a5:89:f4:e1:53:f6:ed:f0:a3:cd:25:48:a6: cf:23:3b:cc:ab:87:c5:1b:59:04:d3:12:94:c0:ae:37:f9:8e: b8:1d:6b:58:9e:d7:35:44:4f:35:ed:7f:43:f1:f6:76:46:8f: 34:ab:1b:56:3c:a8:58:1f:16:68:20:45:1d:68:4c:68:07:cb: a7:3f:ac:72:6c:dc:ce:a6:6b:c5:e0:ee:68:f0:a6:9f:61:86: 63:b0:d1:72:f4:d5:97:9f:bb:54:91:67:64:85:47:b7:cc:b7: c1:22:a1:3f:99:1c:ea:42:7f:2d:9f:26:0a:91:c1:9c:e0:a8: 92:d7:22:c3:1b:dd:08:d6:d7:5c:60:d8:84:4c:3b:89:1b:c4: 82:ff:a3:d5:9a:cb:57:e7:a8:78:85:e2:f6:26:13:fd:1d:71: 8d:13:a3:31:b0:04:9d:2c:aa:95:07:78:3e:12:6f:a8:1a:a7: cd:2a:6f:15:2a:19:6d:f1:8b:fc:5a:14:2c:b0:5a:50:5f:79: 44:39:bf:41:e8:51:62:b3:ba:4f:28:8b:2b:4e:6f:b9:62:5a: 8f:c8:4e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlWUjxUcSENOHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OTMzZDgwZmQtNDczOS00MDdiLWFkMWYtNTY3NWM4ZmU3Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmFb66zz9hys0mawHU9+5y1iR8nMWwvyhN+f A/UTNBQbOcdnzmNPGDAAOp04MppsiI5GC1Qw1MF0SyCR5xp+nF0zJbLrArk8h2rh 13iplxwCjz5QGX73FsAF8X/86NfsbZNEaYOmtBQUJ99OlopN5H53ie8tLR2R774b GRIYpzOaKDqK3R2KRF/iBs18RCwqYrULiRYiWkmHh/e4byg1qUmMk0LjDHRPtTFY rkMUj/fVE7Pe63GFq8ZFBIzU+xHmGgsTplHn5XKPX1sFhkJnevKxjQGsAuRmOe8/ IN4tSZQdFdvFk0vaPZy1Pwny/BcinTYHEteyh/Mk+GnWACNDFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/6SeI6GgBHO2/zGvnJbrGoIoTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTUwZDFlNTgtN2UyZi0z YzNhLTk0ZmMtNjAyZGQ2OTAzOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL0ETktlEBquPDAMePVJYIdEtv71syYJghqc0YQGkt4KSjdj2ZzBtGm pYn04VP27fCjzSVIps8jO8yrh8UbWQTTEpTArjf5jrgda1ie1zVETzXtf0Px9nZG jzSrG1Y8qFgfFmggRR1oTGgHy6c/rHJs3M6ma8Xg7mjwpp9hhmOw0XL01Zefu1SR Z2SFR7fMt8EioT+ZHOpCfy2fJgqRwZzgqJLXIsMb3QjW11xg2IRMO4kbxIL/o9Wa y1fnqHiF4vYmE/0dcY0TozGwBJ0sqpUHeD4Sb6gap80qbxUqGW3xi/xaFCywWlBf eUQ5v0HoUWKzuk8oiytOb7liWo/ITng= -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:59 2026 by rpki-client