$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa File: 9bf48ac1-703c-3af3-8f05-6803d3f10791.roa (raw, json) Hash identifier: hgiWXhMrefF8wjYTpEknerHbkIrnhZMP4oubqPtta+o= Subject key identifier: 74:67:20:E6:7F:81:B3:4F:34:48:DD:4D:3E:7B:71:43:A3:AC:36:C1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7EA00BA173D51F752A420 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:ea:00:ba:17:3d:51:f7:52:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=da985708-9f66-4648-b898-9da96695788f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:d8:5f:18:12:72:51:98:d0:78:62:d7:b4: ce:b4:17:ce:b9:e8:90:4b:9d:89:54:33:7a:54:9d: 04:5d:6d:0e:04:f0:c1:70:4d:75:7a:d0:66:a5:a9: a9:08:85:fc:d3:9a:1a:2b:73:d0:d5:cc:41:43:fe: 39:ee:c5:18:53:ad:b9:70:a9:37:11:63:a7:66:a6: 6e:f9:94:98:e5:99:fe:54:28:e7:c7:12:61:17:5c: ca:cc:f3:f4:4a:1b:8a:52:a9:6a:3a:c8:0d:7b:7a: 0a:b8:10:d4:bf:ac:cf:37:9c:06:6e:70:f2:77:07: 77:24:2a:3e:b2:10:66:79:da:aa:e4:b0:c3:51:3a: 55:e1:cf:6e:d8:df:46:6d:09:5f:7f:40:aa:93:60: 92:72:b5:9a:03:0f:fb:46:a3:84:21:ae:6f:b1:62: 1a:16:42:20:e2:9d:20:b4:9c:76:55:6e:e3:96:6a: b2:0c:a8:69:e2:20:90:c5:1e:53:d3:06:db:0f:9c: 2d:66:68:30:6a:31:4d:44:01:2b:49:6d:57:4b:58: 97:13:81:fd:c5:05:5e:79:fa:ed:af:06:21:b9:19: 92:25:ec:7d:99:9f:f4:58:d5:bc:a8:32:c3:c5:45: 60:4c:d9:72:b2:95:2e:f0:c0:36:db:55:81:9a:99: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:67:20:E6:7F:81:B3:4F:34:48:DD:4D:3E:7B:71:43:A3:AC:36:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a7:c7:d4:6e:af:90:89:f5:d2:a5:c4:98:61:43:5d:c8:8a: f7:89:78:2b:3e:39:5e:2b:82:44:39:12:07:81:82:90:a5:76: bd:93:30:62:1c:66:1d:e8:09:f2:0d:0a:1c:2f:19:ba:f5:b8: ec:a0:c5:64:5f:c7:56:af:e8:ba:da:7b:fd:2a:c7:47:53:fe: 87:5d:4b:16:39:3f:61:a2:d7:ca:e6:d4:08:29:42:94:fb:32: dd:79:88:95:1b:d8:2d:9f:cd:dd:f8:26:99:69:89:c5:65:5e: 52:cb:b5:de:17:e2:7f:35:ee:fd:f8:99:b4:38:d5:18:ee:e6: 18:10:d2:86:53:56:cf:06:1e:53:4d:1b:dd:2a:77:96:3f:f3: 1d:7a:c7:29:a3:f3:73:ec:61:0a:71:b5:93:60:30:aa:d4:bf: 69:0f:4f:1b:05:95:f5:eb:11:93:a2:db:8e:5d:47:8c:db:87: 61:f4:fe:ca:1f:e0:29:94:33:eb:98:60:5c:c0:f4:58:55:bc: 1c:93:ff:97:45:ca:c3:e0:92:36:9a:ef:1a:4c:95:fd:71:19: cd:e9:27:7b:06:47:14:1f:d4:5b:b5:84:7a:26:5e:98:9a:4d: 84:63:2a:cd:1d:85:c7:75:cf:a2:16:62:ac:e1:14:d6:e4:7c: c3:d8:d8:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+oAuhc9UfdSpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZGE5ODU3MDgtOWY2Ni00NjQ4LWI4OTgtOWRhOTY2OTU3ODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DXYXxgSclGY0Hhi17TOtBfOueiQS52JVDN6 VJ0EXW0OBPDBcE11etBmpampCIX805oaK3PQ1cxBQ/457sUYU625cKk3EWOnZqZu +ZSY5Zn+VCjnxxJhF1zKzPP0ShuKUqlqOsgNe3oKuBDUv6zPN5wGbnDydwd3JCo+ shBmedqq5LDDUTpV4c9u2N9GbQlff0Cqk2CScrWaAw/7RqOEIa5vsWIaFkIg4p0g tJx2VW7jlmqyDKhp4iCQxR5T0wbbD5wtZmgwajFNRAErSW1XS1iXE4H9xQVeefrt rwYhuRmSJex9mZ/0WNW8qDLDxUVgTNlyspUu8MA221WBmpkTFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRnIOZ/gbNPNEjdTT57cUOjrDbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWJmNDhhYzEtNzAzYy0z YWYzLThmMDUtNjgwM2QzZjEwNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABinx9Rur5CJ9dKlxJhhQ13IiveJeCs+OV4rgkQ5EgeBgpCldr2TMGIc Zh3oCfINChwvGbr1uOygxWRfx1av6Lrae/0qx0dT/oddSxY5P2Gi18rm1AgpQpT7 Mt15iJUb2C2fzd34JplpicVlXlLLtd4X4n817v34mbQ41Rju5hgQ0oZTVs8GHlNN G90qd5Y/8x16xymj83PsYQpxtZNgMKrUv2kPTxsFlfXrEZOi245dR4zbh2H0/sof 4CmUM+uYYFzA9FhVvByT/5dFysPgkjaa7xpMlf1xGc3pJ3sGRxQf1Fu1hHomXpia TYRjKs0dhcd1z6IWYqzhFNbkfMPY2BU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:58 2026 by rpki-client