$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa File: cf005a1e-cc33-32b3-8191-49c75f69f07b.roa (raw, json) Hash identifier: mrVWXr+mghRgjvYW0crnZB47X18GP50V6fqTxU0Zrqg= Subject key identifier: 86:E0:C7:B5:2D:CA:3D:97:55:A4:FA:05:2B:B3:83:29:C0:12:C4:5D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8E6AC43C009723CE7380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8e:6a:c4:3c:00:97:23:ce:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=640b218d-6db0-4926-8252-ea2f9ce0a567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:56:b9:65:be:70:35:28:f3:44:60:e9:73: fc:5f:72:1d:7f:e2:96:d4:d8:63:db:80:54:50:29: b6:1b:dd:c3:08:4c:27:3a:38:a9:0d:a5:3a:56:3c: 46:fa:f0:83:d0:8a:dd:42:00:d5:ef:75:fb:49:30: a9:12:a4:67:ce:f4:a0:1e:aa:19:59:60:17:5a:ea: 37:a4:61:42:a8:f9:49:a9:db:20:2e:16:f6:98:e5: ea:ca:74:9f:56:e2:fb:3f:81:71:fb:f0:b1:70:7d: d8:0e:be:c0:8c:e7:d6:ff:b0:a0:dc:d7:c0:d3:0d: ef:4c:85:e9:45:63:b9:8e:40:28:3e:e0:49:85:af: 28:44:88:38:69:9b:5a:89:13:cf:fe:54:3b:77:1c: 7e:70:eb:92:3c:ab:e1:58:b7:22:d3:5b:68:f5:f9: cf:b3:7c:7c:68:e2:1b:85:16:49:08:55:91:83:aa: dc:cd:00:6f:2b:5e:5a:32:75:d2:cd:01:26:a3:42: bb:2b:1b:8e:bd:6b:1b:dc:92:2b:a7:9e:a9:2c:3c: 39:b0:18:2b:7d:ad:9e:95:fe:08:3e:e4:4c:14:d7: 84:ea:81:01:09:a1:d7:37:e2:b5:9c:02:9f:d7:7e: 3d:87:40:6b:18:63:0d:3b:04:77:6a:b4:a3:3e:ce: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E0:C7:B5:2D:CA:3D:97:55:A4:FA:05:2B:B3:83:29:C0:12:C4:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:7d:de:9b:36:a2:58:60:18:b8:aa:6d:7a:30:0d:a8:0f:00: 7f:c3:d5:c7:4d:af:d4:85:a8:69:4d:bc:2f:a8:76:e8:b1:2b: d2:48:df:80:9f:3d:4b:12:d4:a3:21:f6:81:ab:26:c7:50:29: cb:3b:fd:66:22:f8:04:be:be:b4:81:9d:df:b5:13:b2:37:70: 70:93:e6:38:05:30:0c:26:d0:aa:2d:4d:be:33:26:d7:d7:68: 9f:b2:02:15:fe:29:33:78:6f:63:07:6f:d1:2c:78:6d:cc:ae: bc:6d:95:73:12:86:be:6f:82:3e:01:eb:c5:87:10:96:76:31: c0:a0:37:6f:73:72:5c:98:59:5d:34:1d:d0:a8:81:b9:0b:20: c7:e2:1f:62:aa:76:d1:ed:d3:1d:86:bb:5f:7f:a9:1c:af:90: 0a:55:1d:aa:1c:56:69:38:ab:2f:4d:92:0c:aa:1d:87:29:fe: ce:c5:1c:ad:ef:6b:3b:06:2a:74:4d:77:ec:6e:f2:6f:65:36: cf:32:96:37:5a:23:e6:1a:12:75:22:41:69:f5:44:ba:a6:e0: 65:55:64:16:43:5a:05:45:88:46:41:15:f4:aa:03:c3:c2:ca: 49:b1:14:a1:48:09:d4:3a:77:4f:fc:31:c5:cf:08:46:67:a4: bf:55:68:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY5qxDwAlyPOc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NjQwYjIxOGQtNmRiMC00OTI2LTgyNTItZWEyZjljZTBhNTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsBWuWW+cDUo80Rg6XP8X3Idf+KW1Nhj24BU UCm2G93DCEwnOjipDaU6VjxG+vCD0IrdQgDV73X7STCpEqRnzvSgHqoZWWAXWuo3 pGFCqPlJqdsgLhb2mOXqynSfVuL7P4Fx+/CxcH3YDr7AjOfW/7Cg3NfA0w3vTIXp RWO5jkAoPuBJha8oRIg4aZtaiRPP/lQ7dxx+cOuSPKvhWLci01to9fnPs3x8aOIb hRZJCFWRg6rczQBvK15aMnXSzQEmo0K7KxuOvWsb3JIrp56pLDw5sBgrfa2elf4I PuRMFNeE6oEBCaHXN+K1nAKf1349h0BrGGMNOwR3arSjPs7wJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbgx7Utyj2XVaT6BSuzgynAEsRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YwMDVhMWUtY2MzMy0z MmIzLTgxOTEtNDljNzVmNjlmMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIN93ps2olhgGLiqbXowDagPAH/D1cdNr9SFqGlNvC+oduixK9JI34Cf PUsS1KMh9oGrJsdQKcs7/WYi+AS+vrSBnd+1E7I3cHCT5jgFMAwm0KotTb4zJtfX aJ+yAhX+KTN4b2MHb9EseG3MrrxtlXMShr5vgj4B68WHEJZ2McCgN29zclyYWV00 HdCogbkLIMfiH2KqdtHt0x2Gu19/qRyvkApVHaocVmk4qy9NkgyqHYcp/s7FHK3v azsGKnRNd+xu8m9lNs8yljdaI+YaEnUiQWn1RLqm4GVVZBZDWgVFiEZBFfSqA8PC ykmxFKFICdQ6d0/8McXPCEZnpL9VaL8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:42 2026 by rpki-client