$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa File: ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa (raw, json) Hash identifier: v7juTgmdBcRlfzANt1SBJm0vjexf8zRam9R8KK899aU= Subject key identifier: F0:E0:FE:9C:84:B1:2E:69:E9:69:E2:AB:CC:7C:22:4E:14:5A:C5:F3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11727F438C11854A22C99D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:7f:43:8c:11:85:4a:22:c9:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=7fe09142-5988-4bbd-ad7c-8c30c7f2c2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:99:2b:c1:06:de:e4:f6:65:2c:ad:40:fe: 41:bb:2c:19:8d:4f:1c:1e:cd:ab:2e:60:ba:82:6c: 80:98:99:f1:0b:b7:57:53:a5:f1:f8:ae:3d:d7:cc: 78:cc:98:74:7d:3d:3b:b0:00:eb:2d:96:e4:fb:68: ad:8a:22:d5:b6:85:aa:4c:43:5f:d1:77:25:44:ef: 71:43:16:c1:62:7e:43:1d:28:e7:1a:c0:32:07:51: 47:2a:57:84:64:b8:12:26:e8:e1:d9:3f:f2:03:b7: dd:f4:18:5d:66:f7:8f:93:27:63:2d:80:c2:79:b1: 48:76:6f:e6:79:93:00:b3:7c:93:56:38:f6:cc:30: 67:aa:a3:1a:89:4c:09:32:af:73:ac:68:97:f2:52: a9:74:df:56:19:e1:3d:2a:8f:86:91:67:6f:73:d5: ab:38:9c:98:80:9f:2f:30:fb:d6:54:b1:ee:1b:37: 09:f9:35:47:09:43:9a:2c:08:e8:57:b8:f0:6f:c4: 37:51:22:79:f1:32:55:a4:55:b0:e7:4b:c9:c5:ea: 39:66:d0:c1:39:24:6e:68:0c:df:a2:62:db:32:4d: c5:8f:37:6e:de:df:1a:83:4d:05:7d:6c:ab:c5:5d: 30:68:8f:2f:95:24:88:17:c1:73:f8:b2:4f:9a:17: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:FE:9C:84:B1:2E:69:E9:69:E2:AB:CC:7C:22:4E:14:5A:C5:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba06c9b7-57dd-3828-8d41-c97f0440d64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:62:42:62:e0:86:2c:c6:bf:a1:2b:c7:71:50:b4:8a:90:86: 2a:68:b6:18:05:45:12:27:2c:03:ae:02:58:40:fc:e5:4f:80: 88:38:da:fd:b5:a4:e8:4e:f4:b6:16:f8:7d:34:15:40:a7:1b: b9:e6:bd:44:05:4e:dd:ff:9c:8e:7d:b4:44:4d:b2:d8:ac:20: 11:8e:57:7b:bd:53:7b:92:2c:7e:b5:45:d6:53:99:e1:69:67: 9d:a3:2d:9f:8c:1b:11:1a:86:7c:74:7b:a8:de:c7:d3:96:eb: c5:2b:36:d5:08:b5:bf:8d:c7:8c:5b:b5:0f:98:cb:d4:f6:dc: 38:7e:66:00:b3:7f:a6:77:51:31:95:d0:9c:4e:dd:56:92:45: 6e:0c:03:27:24:11:a8:1a:3d:e4:d6:5e:c0:2d:ac:a7:36:2a: 8c:21:d4:ee:1d:54:ba:3c:f4:24:08:86:68:aa:a0:78:07:c2: 1c:2a:ed:31:55:96:5d:c6:ab:1a:32:ba:9f:90:63:01:1b:16: 3f:9c:61:de:2b:53:dd:89:59:84:11:2e:01:16:ed:22:ae:35: 29:d3:94:72:de:c5:60:e6:31:b0:9a:22:3f:bb:b3:cc:3f:27: 63:e2:ea:52:7e:00:9e:09:48:69:6e:cf:b3:c5:6d:a5:e6:02: 9b:a4:2c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcn9DjBGFSiLJnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk N2ZlMDkxNDItNTk4OC00YmJkLWFkN2MtOGMzMGM3ZjJjMmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvyZK8EG3uT2ZSytQP5BuywZjU8cHs2rLmC6 gmyAmJnxC7dXU6Xx+K4918x4zJh0fT07sADrLZbk+2itiiLVtoWqTENf0XclRO9x QxbBYn5DHSjnGsAyB1FHKleEZLgSJujh2T/yA7fd9BhdZvePkydjLYDCebFIdm/m eZMAs3yTVjj2zDBnqqMaiUwJMq9zrGiX8lKpdN9WGeE9Ko+GkWdvc9WrOJyYgJ8v MPvWVLHuGzcJ+TVHCUOaLAjoV7jwb8Q3USJ58TJVpFWw50vJxeo5ZtDBOSRuaAzf omLbMk3Fjzdu3t8ag00FfWyrxV0waI8vlSSIF8Fz+LJPmhcdnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDg/pyEsS5p6Wniq8x8Ik4UWsXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmEwNmM5YjctNTdkZC0z ODI4LThkNDEtYzk3ZjA0NDBkNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBiQmLghizGv6Erx3FQtIqQhipothgFRRInLAOuAlhA/OVPgIg42v21 pOhO9LYW+H00FUCnG7nmvUQFTt3/nI59tERNstisIBGOV3u9U3uSLH61RdZTmeFp Z52jLZ+MGxEahnx0e6jex9OW68UrNtUItb+Nx4xbtQ+Yy9T23Dh+ZgCzf6Z3UTGV 0JxO3VaSRW4MAyckEagaPeTWXsAtrKc2Kowh1O4dVLo89CQIhmiqoHgHwhwq7TFV ll3Gqxoyup+QYwEbFj+cYd4rU92JWYQRLgEW7SKuNSnTlHLexWDmMbCaIj+7s8w/ J2Pi6lJ+AJ4JSGluz7PFbaXmApukLGo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:35:12 2026 by rpki-client