$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa File: bf43aa8f-6881-31aa-8958-92f09ff019c2.roa (raw, json) Hash identifier: eQG49km0HUFbGvLHYGurQ2E0NiDadyKxZDQWuERseEE= Subject key identifier: C3:18:09:70:AD:92:25:63:9E:EB:EA:66:6C:45:29:F1:8B:25:08:A5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1172801F147B303ECEB9EB40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:80:1f:14:7b:30:3e:ce:b9:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=98fc48a8-4914-4cd9-a763-0b08fc391873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:d5:17:e2:39:e6:39:1d:4d:2c:4b:51:fc: 7e:65:1f:77:d9:b8:43:a2:e2:f0:b6:fb:2e:fa:58: ab:1f:4d:5a:09:e5:d0:84:83:00:0c:00:4f:cf:0d: fc:f0:84:3c:d3:75:8a:f7:ae:b0:da:58:7d:04:05: d3:9d:97:d6:1b:6e:e2:0b:78:74:80:26:11:55:4b: 85:0c:12:be:c6:b5:fb:ad:9d:bf:db:ff:63:f0:37: 45:f7:f2:b6:b3:a6:f6:0e:9e:d0:6d:79:20:81:18: 08:b7:ed:9f:7b:f7:1d:39:ec:7e:b3:fe:fa:5f:f8: 42:45:eb:2b:e8:a3:26:6f:71:2e:f1:2c:5c:9d:98: ee:a0:20:a0:77:fc:6d:b8:d9:58:5a:a2:70:c6:e9: 7a:45:43:cf:de:6b:54:5e:80:86:49:2a:de:ee:32: 05:76:6c:49:56:e9:d8:9b:36:95:b7:e4:3e:e1:b2: d4:eb:e0:b5:7b:86:e5:63:e8:17:3e:7e:f0:35:65: ff:3f:4b:b4:13:db:11:ca:58:d6:1b:97:44:fb:48: 1f:8b:3a:b2:f5:88:69:ea:cf:1e:13:23:25:3c:16: fa:80:6b:44:bf:0f:13:be:28:16:1d:36:f3:ba:38: be:e4:93:fc:36:9f:a9:7d:b0:09:eb:2b:b0:24:9b: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:09:70:AD:92:25:63:9E:EB:EA:66:6C:45:29:F1:8B:25:08:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a9:d9:2d:ec:52:3c:6f:60:e3:20:7c:1d:94:2e:ca:76:74: 9c:80:54:e9:0f:91:27:ed:41:ef:b8:d5:73:b6:94:dd:6f:df: f7:2c:42:e0:c6:60:24:10:86:86:a5:fb:d2:d1:87:85:df:a0: 7f:7e:69:20:7a:d0:cd:24:e0:46:6b:f1:ed:73:8f:49:0d:32: 41:64:83:ab:2b:12:ae:20:86:ce:0b:09:1d:c9:b0:3a:2b:82: b1:7f:c7:f1:bd:27:8f:c9:59:08:d0:fa:0a:cd:3d:7e:a3:47: 7c:03:4c:a8:20:99:35:bd:7c:84:c8:35:c5:e0:a9:2d:3c:31: e0:02:f4:bb:0b:e5:cf:e0:38:a3:30:3a:b7:c2:ac:2d:e3:f0: e0:50:74:4f:38:03:ea:85:9d:d9:da:7f:9f:1a:7e:db:90:88: 82:b1:42:d5:fe:53:d4:75:2d:69:f2:50:3f:db:69:03:5c:2a: bb:43:d9:1f:a4:26:18:35:c2:17:3a:2b:e1:8d:2b:23:0e:a0: 87:e2:4f:2d:79:c6:47:dd:30:eb:9b:83:75:85:43:c7:d9:d6: f7:84:1e:d0:95:31:e0:f5:2a:22:5a:06:e7:50:27:16:e9:32: c7:49:2d:6e:e7:b4:b2:08:66:da:b0:dd:49:65:8f:39:98:a5: 8c:8a:01:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoAfFHswPs6560AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk OThmYzQ4YTgtNDkxNC00Y2Q5LWE3NjMtMGIwOGZjMzkxODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQTVF+I55jkdTSxLUfx+ZR932bhDouLwtvsu +lirH01aCeXQhIMADABPzw388IQ803WK966w2lh9BAXTnZfWG27iC3h0gCYRVUuF DBK+xrX7rZ2/2/9j8DdF9/K2s6b2Dp7QbXkggRgIt+2fe/cdOex+s/76X/hCResr 6KMmb3Eu8SxcnZjuoCCgd/xtuNlYWqJwxul6RUPP3mtUXoCGSSre7jIFdmxJVunY mzaVt+Q+4bLU6+C1e4blY+gXPn7wNWX/P0u0E9sRyljWG5dE+0gfizqy9Yhp6s8e EyMlPBb6gGtEvw8TvigWHTbzuji+5JP8Np+pfbAJ6yuwJJucvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMYCXCtkiVjnuvqZmxFKfGLJQilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmY0M2FhOGYtNjg4MS0z MWFhLTg5NTgtOTJmMDlmZjAxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+p2S3sUjxvYOMgfB2ULsp2dJyAVOkPkSftQe+41XO2lN1v3/csQuDG YCQQhoal+9LRh4XfoH9+aSB60M0k4EZr8e1zj0kNMkFkg6srEq4ghs4LCR3JsDor grF/x/G9J4/JWQjQ+grNPX6jR3wDTKggmTW9fITINcXgqS08MeAC9LsL5c/gOKMw OrfCrC3j8OBQdE84A+qFndnaf58aftuQiIKxQtX+U9R1LWnyUD/baQNcKrtD2R+k Jhg1whc6K+GNKyMOoIfiTy15xkfdMOubg3WFQ8fZ1veEHtCVMeD1KiJaBudQJxbp MsdJLW7ntLIIZtqw3UlljzmYpYyKASU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:09:59 2026 by rpki-client