$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa File: b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa (raw, json) Hash identifier: FIAcUsj3jByBsD6pgSepPRJoyZ/+1ofIj9mKH7Tgda0= Subject key identifier: 41:79:1F:57:AB:69:8B:75:34:13:D2:71:C2:B2:13:7F:97:26:8B:17 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8AB1B901E076AEAB4F40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8a:b1:b9:01:e0:76:ae:ab:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=6da5f073-e177-44a8-a165-7e5bd5c26906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:57:e6:b8:2b:ef:bd:db:d7:94:61:1c:81:05: 39:35:ab:1c:47:53:9d:ca:b3:7b:64:44:08:06:b8: 28:a0:91:f3:4a:9c:a9:78:d2:c7:a0:5b:93:4b:2e: f0:2c:c6:ac:f7:eb:7d:e8:95:cf:e5:33:f3:9a:e9: a4:6e:4d:c0:eb:98:b9:1b:c2:97:83:81:f4:66:99: 49:0a:ab:d3:54:80:6f:00:98:ec:a0:e9:93:b3:2d: 08:07:97:92:30:91:b1:5f:cd:ff:7b:61:c6:af:db: 67:c2:bb:e6:0f:3e:61:c3:7d:8d:c4:69:2b:98:ee: 82:84:ef:7f:bd:a9:a0:8f:13:ae:55:45:73:17:88: 3a:c2:cb:19:f1:18:e0:f5:93:0c:35:40:3c:63:d6: b9:87:0e:99:3e:22:e1:19:c4:e6:b8:0e:28:2f:66: 36:65:de:e5:91:7c:3d:5a:17:0f:fe:b9:1e:88:4d: 4e:ff:75:7a:df:70:ac:aa:8a:3b:6d:05:20:ca:d8: 77:82:f2:f8:09:a8:5a:d7:7a:c9:d1:bf:11:5e:1a: ed:da:1e:74:70:ec:27:40:03:05:48:c9:37:df:82: 42:7e:d2:57:30:27:b6:bf:e6:8b:e7:1a:00:7b:55: 42:e3:43:a7:41:5a:4f:94:2c:75:7d:77:75:58:57: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:1F:57:AB:69:8B:75:34:13:D2:71:C2:B2:13:7F:97:26:8B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:4d:dd:0a:c5:68:b7:85:87:61:d2:02:ec:35:0b:89:53:45: 02:67:06:5b:fe:ee:80:91:ba:f6:f8:a4:14:f1:5a:95:4e:b0: ea:be:ca:dc:3f:06:29:36:06:b8:75:e4:da:a8:ba:3c:d2:66: 0f:05:c0:de:07:96:78:f8:ea:d8:5f:b0:6b:0a:42:09:39:af: d3:b7:de:ca:81:96:07:36:b3:5f:b1:da:7d:bf:89:5a:bc:04: 25:25:64:17:fa:57:cb:bd:a2:06:78:07:09:41:50:43:23:79: bd:44:2f:6f:96:9c:e4:48:90:bc:7e:6f:97:89:9a:88:3a:0e: d4:4e:13:4c:d5:56:a1:d8:59:c8:ea:c0:e5:8b:40:bd:76:35: 79:1a:4e:6f:a7:5d:38:0e:87:4f:1b:1e:04:16:7a:ed:68:f2: 8f:15:1f:dd:2b:86:1e:75:5b:45:35:a9:3b:6e:28:bc:1a:65: 62:dd:c8:b9:4b:c1:8f:e4:8e:9d:97:18:31:05:2d:57:11:bd: c2:56:51:78:53:aa:48:89:25:77:98:11:97:5d:b9:ce:ff:b7: fb:cb:09:43:e6:13:63:7e:8f:6e:2a:f2:68:88:7f:b9:e3:31: 30:7c:4f:b6:7f:48:37:7c:96:c8:f6:2f:c8:89:ce:c8:45:e3: d1:d2:0b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYqxuQHgdq6rT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NmRhNWYwNzMtZTE3Ny00NGE4LWExNjUtN2U1YmQ1YzI2OTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFfmuCvvvdvXlGEcgQU5NascR1OdyrN7ZEQI BrgooJHzSpypeNLHoFuTSy7wLMas9+t96JXP5TPzmumkbk3A65i5G8KXg4H0ZplJ CqvTVIBvAJjsoOmTsy0IB5eSMJGxX83/e2HGr9tnwrvmDz5hw32NxGkrmO6ChO9/ vamgjxOuVUVzF4g6wssZ8Rjg9ZMMNUA8Y9a5hw6ZPiLhGcTmuA4oL2Y2Zd7lkXw9 WhcP/rkeiE1O/3V633Csqoo7bQUgyth3gvL4Caha13rJ0b8RXhrt2h50cOwnQAMF SMk334JCftJXMCe2v+aL5xoAe1VC40OnQVpPlCx1fXd1WFcZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF5H1eraYt1NBPSccKyE3+XJosXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjliOGVmMGYtY2VhZS0z NTEyLTkzOTctNWZiMTMxYWQ4NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9N3QrFaLeFh2HSAuw1C4lTRQJnBlv+7oCRuvb4pBTxWpVOsOq+ytw/ Bik2Brh15NqoujzSZg8FwN4Hlnj46thfsGsKQgk5r9O33sqBlgc2s1+x2n2/iVq8 BCUlZBf6V8u9ogZ4BwlBUEMjeb1EL2+WnORIkLx+b5eJmog6DtROE0zVVqHYWcjq wOWLQL12NXkaTm+nXTgOh08bHgQWeu1o8o8VH90rhh51W0U1qTtuKLwaZWLdyLlL wY/kjp2XGDEFLVcRvcJWUXhTqkiJJXeYEZdduc7/t/vLCUPmE2N+j24q8miIf7nj MTB8T7Z/SDd8lsj2L8iJzshF49HSCzE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:12 2026 by rpki-client