$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/992c0bf5-142e-3f19-840d-18778e416131.roa File: 992c0bf5-142e-3f19-840d-18778e416131.roa (raw, json) Hash identifier: 2krXEC18iZVN7D+hLwf2Xmh6A52HdBFH3KmxwhxzHcI= Subject key identifier: 98:24:09:67:90:B8:F4:FE:B9:11:AE:39:50:E5:E3:5D:C8:B5:2C:B6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117290FE02744A474D984640 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/992c0bf5-142e-3f19-840d-18778e416131.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:90:fe:02:74:4a:47:4d:98:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=4a9f6b50-aa24-4cfb-8415-f362a79f875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:3e:b6:3a:9f:96:f9:95:5e:86:65:32:c2: 08:a7:e6:d3:66:a4:62:bf:4e:77:a3:80:59:06:67: a3:ba:29:b2:97:a2:78:b7:fb:84:74:32:1a:9e:b8: 06:c9:b5:da:48:d0:49:1c:f2:02:35:6e:dc:f2:57: fb:e5:ab:44:86:6b:fe:e6:c8:1b:4e:e8:47:68:8b: 43:8f:f1:68:75:84:c5:99:ed:79:b9:1b:9b:43:ab: ee:f0:f9:21:91:d6:dc:72:18:ed:51:ea:c1:03:6f: 81:b3:b2:16:ac:a2:aa:63:74:f7:35:30:47:54:e9: 9f:1f:14:f1:f2:4b:a6:2b:7a:e2:5e:7f:c6:90:0d: b8:03:5d:e0:5d:ff:5d:10:72:bd:64:d0:4e:43:43: 30:e3:8f:50:65:1b:5a:ef:d7:54:56:7d:43:f3:06: a4:6e:ae:00:5e:8c:74:6c:b8:9c:9c:21:80:82:a5: a2:91:ea:5e:eb:a2:0c:bb:07:b8:30:26:06:e3:78: 18:d2:4c:05:35:26:cf:ed:dc:35:3f:98:85:12:60: 79:e4:35:74:cb:8f:60:48:1e:be:ca:cb:64:02:29: d8:d1:a8:1b:f4:5a:5d:b1:4f:b1:ad:07:84:d6:90: 9b:98:f5:c0:dd:97:55:97:79:87:37:8b:72:81:53: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:24:09:67:90:B8:F4:FE:B9:11:AE:39:50:E5:E3:5D:C8:B5:2C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/992c0bf5-142e-3f19-840d-18778e416131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c6:0a:a2:60:ce:f1:bd:07:c4:3b:3d:91:d0:82:8f:df:2a: 93:cd:5d:d3:d1:7a:d2:28:71:57:87:fd:88:85:c7:5a:27:3b: 61:6c:c8:57:dd:e5:04:27:78:3f:d0:f9:b7:50:40:9a:5a:74: 2f:72:f2:e4:61:21:5d:ea:e1:11:d6:2e:8d:41:ff:72:86:fd: ea:23:cf:0a:27:7b:93:4c:9a:0f:01:35:d0:c5:ac:ee:05:28: fc:24:cc:53:a3:16:f9:c6:d5:ce:a1:12:6f:ff:4a:32:59:cf: bf:ce:09:5f:bd:d8:44:86:39:86:4a:59:e3:aa:c0:90:8c:35: 84:c5:a4:f9:74:e7:9d:d4:62:dc:1a:8f:f4:da:6a:b1:09:86: 7c:eb:39:e7:16:5b:23:29:56:2b:d1:17:0e:6e:f6:45:4a:a2: ff:18:d9:b6:45:a1:b5:0c:23:08:12:d7:a0:0a:c6:8e:7c:2b: b2:da:af:47:b2:43:59:dd:ed:13:79:58:13:5d:81:44:95:29: e2:8a:37:42:fa:94:e1:59:f2:8c:4f:7a:a9:af:9f:2a:dd:e4: 57:18:91:bc:c2:d3:55:a5:a6:f7:de:6d:8e:f0:fa:aa:77:a0: 6f:b9:b3:e4:5f:b3:d5:ea:27:96:56:6e:61:67:64:e0:06:a8: 69:39:d2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpD+AnRKR02YRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NGE5ZjZiNTAtYWEyNC00Y2ZiLTg0MTUtZjM2MmE3OWY4NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZE+tjqflvmVXoZlMsIIp+bTZqRiv053o4BZ Bmejuimyl6J4t/uEdDIanrgGybXaSNBJHPICNW7c8lf75atEhmv+5sgbTuhHaItD j/FodYTFme15uRubQ6vu8PkhkdbcchjtUerBA2+Bs7IWrKKqY3T3NTBHVOmfHxTx 8kumK3riXn/GkA24A13gXf9dEHK9ZNBOQ0Mw449QZRta79dUVn1D8wakbq4AXox0 bLicnCGAgqWikepe66IMuwe4MCYG43gY0kwFNSbP7dw1P5iFEmB55DV0y49gSB6+ ystkAinY0agb9FpdsU+xrQeE1pCbmPXA3ZdVl3mHN4tygVOYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgkCWeQuPT+uRGuOVDl413ItSy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTkyYzBiZjUtMTQyZS0z ZjE5LTg0MGQtMTg3NzhlNDE2MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHGCqJgzvG9B8Q7PZHQgo/fKpPNXdPRetIocVeH/YiFx1onO2FsyFfd 5QQneD/Q+bdQQJpadC9y8uRhIV3q4RHWLo1B/3KG/eojzwone5NMmg8BNdDFrO4F KPwkzFOjFvnG1c6hEm//SjJZz7/OCV+92ESGOYZKWeOqwJCMNYTFpPl0553UYtwa j/TaarEJhnzrOecWWyMpVivRFw5u9kVKov8Y2bZFobUMIwgS16AKxo58K7Lar0ey Q1nd7RN5WBNdgUSVKeKKN0L6lOFZ8oxPeqmvnyrd5FcYkbzC01WlpvfebY7w+qp3 oG+5s+Rfs9XqJ5ZWbmFnZOAGqGk50oc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:18 2026 by rpki-client