$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a7869783-d655-3489-b2d1-1588776b781e.roa File: a7869783-d655-3489-b2d1-1588776b781e.roa (raw, json) Hash identifier: qc1DgYu0IU8IO0Hq8bUsdv8Mu8q6Az4LtSyn9vdA4H8= Subject key identifier: 9E:F3:AB:1E:54:60:EE:1C:B2:8E:CD:48:91:88:72:B9:2A:F2:6F:99 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8C214542167A85D0CDA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a7869783-d655-3489-b2d1-1588776b781e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8c:21:45:42:16:7a:85:d0:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=4a384a7a-4f6c-4776-a7b1-c68709757905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:34:db:4a:6d:39:3e:00:1a:e6:f8:44:85: 6b:ba:a4:92:3d:20:7c:69:8f:ac:c3:11:51:da:28: 76:0a:04:f9:cb:2a:21:64:b6:27:1b:90:1a:d4:4a: d3:78:4f:0e:64:a2:68:47:ec:f0:b0:35:25:fc:3e: 5f:03:a7:54:20:de:c8:36:b6:a7:1c:1d:03:fb:20: 2e:e3:99:de:13:5b:9c:00:13:72:21:bb:d5:3d:ca: 55:e7:cb:ab:c5:54:4c:5f:e3:fc:54:fd:85:ce:f5: 13:a7:dc:52:ba:35:8d:8b:2e:64:0b:67:91:41:54: e9:1b:e6:26:e6:db:7e:90:93:82:be:ca:58:50:7c: 6c:79:ef:9b:3a:c5:0a:d0:37:bd:73:45:b5:67:fa: e5:59:b7:52:02:63:a6:e4:fe:42:fd:c1:a2:d8:86: fc:c5:a6:0f:a7:01:01:35:97:f5:39:26:96:fb:90: b2:10:d3:39:44:2a:aa:90:27:00:25:30:fd:62:d1: 6f:ae:b6:1a:4a:1b:cf:c0:fb:27:d2:d9:64:0a:5b: 10:f8:6f:13:0e:6a:0b:0c:f1:55:51:26:52:f3:33: 4e:31:00:88:fe:b3:71:86:d5:12:b1:b0:cf:79:87: f6:e3:ab:e1:c0:25:81:d1:2e:77:1c:98:8e:44:cf: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F3:AB:1E:54:60:EE:1C:B2:8E:CD:48:91:88:72:B9:2A:F2:6F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a7869783-d655-3489-b2d1-1588776b781e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ec:bc:5e:5a:13:6f:a7:2a:21:60:da:fb:80:14:35:82:62: b8:d5:47:56:c8:4f:d2:4d:0f:51:ea:c4:9a:e6:13:58:a9:44: 32:f1:23:9c:26:d9:b1:2c:20:31:bb:b1:e5:6d:bd:4c:84:70: 20:72:e3:d6:c1:c8:98:ac:45:3b:2e:54:ab:33:92:8c:d0:aa: a3:30:3e:19:8a:d1:a4:ff:7e:0a:1d:e2:71:65:10:ca:e5:3c: cc:43:c8:bb:ec:8b:18:d0:86:40:ef:fd:c1:d6:23:4e:6c:72: 0e:33:3d:fe:19:e3:1c:99:29:62:c2:cd:39:20:fb:f7:c9:9f: 85:e7:7f:94:46:af:e6:33:8c:64:f1:25:d9:35:27:f8:27:8b: e0:66:bb:76:69:c3:f9:e1:63:48:12:af:e6:61:f5:07:bf:72: ff:4b:25:19:fe:d4:33:3d:7e:34:85:8f:0c:e3:b9:f9:b9:e2: d8:a0:2f:ee:04:1b:60:3d:71:68:48:48:9c:8b:47:98:8d:d8: 8e:23:9d:0b:98:9d:70:27:9e:d6:3b:d3:cd:ac:71:f1:c2:c9: 3a:28:74:9f:77:33:9e:38:5d:f9:c5:b5:ce:dc:08:3e:85:01: 2a:99:ed:dc:b0:3e:9c:e9:96:b3:53:1f:1e:4b:a8:b2:a9:b7: 2c:ae:f2:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYwhRUIWeoXQzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NGEzODRhN2EtNGY2Yy00Nzc2LWE3YjEtYzY4NzA5NzU3OTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZc020ptOT4AGub4RIVruqSSPSB8aY+swxFR 2ih2CgT5yyohZLYnG5Aa1ErTeE8OZKJoR+zwsDUl/D5fA6dUIN7INranHB0D+yAu 45neE1ucABNyIbvVPcpV58urxVRMX+P8VP2FzvUTp9xSujWNiy5kC2eRQVTpG+Ym 5tt+kJOCvspYUHxsee+bOsUK0De9c0W1Z/rlWbdSAmOm5P5C/cGi2Ib8xaYPpwEB NZf1OSaW+5CyENM5RCqqkCcAJTD9YtFvrrYaShvPwPsn0tlkClsQ+G8TDmoLDPFV USZS8zNOMQCI/rNxhtUSsbDPeYf246vhwCWB0S53HJiORM+ceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7zqx5UYO4cso7NSJGIcrkq8m+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTc4Njk3ODMtZDY1NS0z NDg5LWIyZDEtMTU4ODc3NmI3ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbsvF5aE2+nKiFg2vuAFDWCYrjVR1bIT9JND1HqxJrmE1ipRDLxI5wm 2bEsIDG7seVtvUyEcCBy49bByJisRTsuVKszkozQqqMwPhmK0aT/fgod4nFlEMrl PMxDyLvsixjQhkDv/cHWI05scg4zPf4Z4xyZKWLCzTkg+/fJn4Xnf5RGr+YzjGTx Jdk1J/gni+Bmu3Zpw/nhY0gSr+Zh9Qe/cv9LJRn+1DM9fjSFjwzjufm54tigL+4E G2A9cWhISJyLR5iN2I4jnQuYnXAnntY7082scfHCyToodJ93M544XfnFtc7cCD6F ASqZ7dywPpzplrNTHx5LqLKptyyu8p8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:03 2026 by rpki-client