$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa File: bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa (raw, json) Hash identifier: uCGxwRLe/o2dz4lySGI7UBZozVgsqfZmsdQuLpIRVGQ= Subject key identifier: F8:7F:39:2B:06:37:4F:59:34:13:80:4C:BC:99:1A:48:5E:D4:2B:D2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117280E722CED2F488039100 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:80:e7:22:ce:d2:f4:88:03:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=94cb634e-6500-48b1-a433-bf9e5f88a866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:c0:84:ce:44:00:9c:a9:54:e4:bf:98:13: ff:ad:d6:2a:6a:f8:a2:9b:f6:d0:10:a6:f2:f4:dc: 5a:5c:be:5a:e3:87:d7:fa:98:3a:bb:d7:29:11:f8: c0:5b:90:2b:e7:42:ca:a3:2b:d0:28:7f:70:3b:db: 4c:b5:d6:b7:0f:b2:0a:0b:9a:4b:49:7e:94:b2:b6: 9f:24:ab:08:52:ea:b5:92:53:e6:7c:d5:28:43:d3: 7f:94:b9:69:09:5b:39:24:df:b7:c3:14:32:d8:88: cf:48:c4:20:0e:d7:36:6f:69:fe:d1:0d:0c:73:2e: 26:30:9c:4e:c6:12:b9:98:58:ff:2b:eb:7c:c9:c3: c7:64:83:71:09:b8:e6:57:e3:48:a4:9e:b8:32:95: b9:ad:12:5b:a8:cb:f9:ff:81:df:e2:de:82:8e:ff: 37:5c:63:0a:9f:78:8f:ca:d6:45:7d:1a:0c:fe:1b: 49:52:f0:af:f2:e6:b0:f8:53:7c:3a:d4:09:09:d0: c2:71:5f:7b:e8:ff:53:85:41:a4:48:6f:0a:c1:7a: fe:0c:9d:d7:fe:24:11:4e:cc:c1:a5:06:25:af:e9: ca:31:b1:f2:17:8e:f0:e0:3d:f4:45:7f:4f:a8:a8: d9:93:c3:d3:9b:f9:ea:9e:3b:b0:33:eb:ea:ec:f5: 24:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7F:39:2B:06:37:4F:59:34:13:80:4C:BC:99:1A:48:5E:D4:2B:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf2ed89-cac8-368d-a69b-e3a418bac63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:30:c0:4a:b0:63:ad:f6:1b:a5:de:c4:45:d5:35:75:b5:cd: 1e:eb:af:2c:0c:d5:46:a4:b5:fe:fc:2d:ca:e8:20:c3:63:2a: 59:42:88:a2:da:ff:ff:a7:d8:a5:41:d3:42:9b:a1:a8:62:8a: 05:8c:c0:35:14:9a:d5:39:c9:73:9e:12:6c:e1:c4:1d:27:b5: 69:0d:5f:55:b3:85:e0:18:1c:2c:72:de:6a:f8:0f:db:e0:47: 3d:55:ae:13:d5:a8:98:2c:0e:6c:66:c8:c7:98:f3:d5:a6:ed: 53:8e:0f:cb:77:5a:34:80:80:2e:29:f3:b2:1c:c1:cd:02:c6: 08:75:ed:71:b9:67:07:d2:bc:d6:21:7e:90:23:ee:9e:d9:c3: 61:c2:87:b7:fe:09:c8:f0:93:72:55:5d:94:0a:8a:cc:c9:a9: 88:bf:e8:60:85:7d:c5:7c:9f:71:f2:c6:1e:fc:e1:74:94:63: a2:9a:43:d5:d2:77:17:35:de:e3:3d:55:db:f0:d9:ea:4a:11: 0f:ce:20:91:06:bb:e0:3a:fe:c1:16:3e:8d:9d:41:33:cc:d6: a2:59:97:d8:74:27:2a:70:b5:40:50:59:d8:80:a7:4d:f8:2a: a8:e0:c7:57:fa:c2:40:2a:9b:18:43:43:9c:1c:3e:30:ad:83: b1:b4:6c:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoDnIs7S9IgDkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk OTRjYjYzNGUtNjUwMC00OGIxLWE0MzMtYmY5ZTVmODhhODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUjAhM5EAJypVOS/mBP/rdYqaviim/bQEKby 9NxaXL5a44fX+pg6u9cpEfjAW5Ar50LKoyvQKH9wO9tMtda3D7IKC5pLSX6Usraf JKsIUuq1klPmfNUoQ9N/lLlpCVs5JN+3wxQy2IjPSMQgDtc2b2n+0Q0Mcy4mMJxO xhK5mFj/K+t8ycPHZINxCbjmV+NIpJ64MpW5rRJbqMv5/4Hf4t6Cjv83XGMKn3iP ytZFfRoM/htJUvCv8uaw+FN8OtQJCdDCcV976P9ThUGkSG8KwXr+DJ3X/iQRTszB pQYlr+nKMbHyF47w4D30RX9PqKjZk8PTm/nqnjuwM+vq7PUkHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh/OSsGN09ZNBOATLyZGkhe1CvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmJmMmVkODktY2FjOC0z NjhkLWE2OWItZTNhNDE4YmFjNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4wwEqwY632G6XexEXVNXW1zR7rrywM1Uaktf78LcroIMNjKllCiKLa //+n2KVB00KboahiigWMwDUUmtU5yXOeEmzhxB0ntWkNX1WzheAYHCxy3mr4D9vg Rz1VrhPVqJgsDmxmyMeY89Wm7VOOD8t3WjSAgC4p87Icwc0Cxgh17XG5ZwfSvNYh fpAj7p7Zw2HCh7f+Ccjwk3JVXZQKiszJqYi/6GCFfcV8n3Hyxh784XSUY6KaQ9XS dxc13uM9Vdvw2epKEQ/OIJEGu+A6/sEWPo2dQTPM1qJZl9h0JypwtUBQWdiAp034 Kqjgx1f6wkAqmxhDQ5wcPjCtg7G0bKQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:32:03 2026 by rpki-client