$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab77c5-5a90-3693-b662-f47638d0f948.roa File: cdab77c5-5a90-3693-b662-f47638d0f948.roa (raw, json) Hash identifier: GXoaNIdiD4EcpnPkCfEzY6pDbieTGmhnLlhs0MQ4KKY= Subject key identifier: 1B:8D:E2:9E:16:DD:B0:E8:A8:44:8A:8C:A5:1A:79:03:1B:B1:50:CB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A843A7BD7CFBDFAA9A620 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab77c5-5a90-3693-b662-f47638d0f948.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:84:3a:7b:d7:cf:bd:fa:a9:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=e481a51e-6d6d-46bb-82ab-76d16c034e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:df:8b:c7:12:a0:14:77:e7:ab:30:19:fb: 6e:35:89:f0:db:71:f5:a9:df:ae:63:fb:48:ee:8b: cf:aa:39:50:47:74:7f:57:a2:8f:ef:2c:af:ab:0d: 38:4b:27:df:e8:16:b7:29:22:d0:c3:f6:be:98:e3: 21:69:89:3f:ef:6b:c4:61:ee:c0:5c:93:e7:87:44: 42:84:a5:96:8a:47:33:9e:ad:0d:6f:46:68:53:45: f3:1d:96:df:43:20:98:55:41:fa:a7:2c:ab:94:93: 6e:b3:fe:34:54:71:f4:8e:09:2a:64:40:b3:59:3f: 6d:25:e3:f0:d2:85:e9:f9:ef:9b:01:df:fd:f5:74: f9:58:00:88:35:13:a1:9e:c0:25:2e:00:fd:1c:a0: ac:f5:47:bb:e6:37:90:0b:1a:a7:3f:a4:b3:26:aa: da:5c:25:75:73:73:4d:1b:03:d6:20:1b:71:20:bd: e1:1d:19:bc:f0:c6:64:47:5d:59:38:cf:cb:bb:bb: 90:8c:89:6c:6e:d7:d9:bb:9f:71:4b:1f:73:52:69: a7:39:95:1a:18:c2:92:33:52:1a:34:cd:55:24:8f: 09:9c:4a:03:41:2b:08:a0:fc:36:1c:23:7f:2a:2f: 65:0f:7d:d6:f2:fe:14:09:91:98:d3:d2:46:63:12: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:E2:9E:16:DD:B0:E8:A8:44:8A:8C:A5:1A:79:03:1B:B1:50:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cdab77c5-5a90-3693-b662-f47638d0f948.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:fb:75:c3:23:4c:de:4f:fa:9e:f5:3e:97:af:2a:b3:17:8f: 7f:e1:83:75:3a:6a:97:1f:74:2d:3a:64:17:cf:fe:10:ff:39: da:43:67:02:f3:8d:28:46:98:37:d9:ea:fe:d6:ad:3c:31:68: fb:87:78:5a:ac:0d:aa:9c:4e:69:2e:86:07:5a:d6:4e:d9:b8: 72:97:9a:37:b9:90:3c:36:ac:70:1b:f5:cc:40:93:6c:6c:d5: 79:00:1e:5d:bd:51:33:ec:c6:68:1a:0d:29:da:9f:b4:1a:aa: 2c:0f:98:e5:19:09:37:9a:f2:a9:62:a5:a9:14:6c:c0:a9:e2: 26:0c:a6:12:ef:0a:7f:29:6c:e2:da:df:df:18:28:8a:aa:5b: 12:5e:5a:8c:79:3f:72:ac:b4:f5:57:6d:72:f3:cf:71:8e:2a: f1:b5:7e:8a:91:95:7a:49:a6:55:32:f2:1c:1a:a1:f2:d2:db: d6:cb:12:30:4a:8f:74:f7:79:7e:11:32:aa:3c:45:c3:36:87: dc:be:96:7c:34:ab:2a:95:51:43:56:3d:1b:d6:80:27:b5:da: 68:b8:f5:f3:26:fe:ae:8c:52:81:3f:e2:fc:84:76:d6:12:37: a3:b9:32:e1:3d:d0:f6:d7:4b:bd:fa:d1:4d:df:e2:63:21:96: f6:21:5f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoQ6e9fPvfqppiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZTQ4MWE1MWUtNmQ2ZC00NmJiLTgyYWItNzZkMTZjMDM0ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQLfi8cSoBR356swGftuNYnw23H1qd+uY/tI 7ovPqjlQR3R/V6KP7yyvqw04Syff6Ba3KSLQw/a+mOMhaYk/72vEYe7AXJPnh0RC hKWWikcznq0Nb0ZoU0XzHZbfQyCYVUH6pyyrlJNus/40VHH0jgkqZECzWT9tJePw 0oXp+e+bAd/99XT5WACINROhnsAlLgD9HKCs9Ue75jeQCxqnP6SzJqraXCV1c3NN GwPWIBtxIL3hHRm88MZkR11ZOM/Lu7uQjIlsbtfZu59xSx9zUmmnOZUaGMKSM1Ia NM1VJI8JnEoDQSsIoPw2HCN/Ki9lD33W8v4UCZGY09JGYxL5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuN4p4W3bDoqESKjKUaeQMbsVDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2RhYjc3YzUtNWE5MC0z NjkzLWI2NjItZjQ3NjM4ZDBmOTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKP7dcMjTN5P+p71PpevKrMXj3/hg3U6apcfdC06ZBfP/hD/OdpDZwLz jShGmDfZ6v7WrTwxaPuHeFqsDaqcTmkuhgda1k7ZuHKXmje5kDw2rHAb9cxAk2xs 1XkAHl29UTPsxmgaDSnan7QaqiwPmOUZCTea8qlipakUbMCp4iYMphLvCn8pbOLa 398YKIqqWxJeWox5P3KstPVXbXLzz3GOKvG1foqRlXpJplUy8hwaofLS29bLEjBK j3T3eX4RMqo8RcM2h9y+lnw0qyqVUUNWPRvWgCe12mi49fMm/q6MUoE/4vyEdtYS N6O5MuE90PbXS7360U3f4mMhlvYhX7M= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:53 2026 by rpki-client