$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa File: cfd5bacf-b676-36e1-b190-4f38b062ea59.roa (raw, json) Hash identifier: p7aHn+P1YAsX0wawEmS2aVfYWt62avXFk1seENIb29o= Subject key identifier: 5E:9C:5F:B7:DF:F1:83:FF:AE:89:86:99:50:31:C8:B4:2C:72:AF:A2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A785F4A22721EBCD8E080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36411 IP address blocks: 104.134.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:78:5f:4a:22:72:1e:bc:d8:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=2fd0c97d-b9de-4f78-a178-eabba9178a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:30:6f:bc:04:61:a5:e2:8d:3f:65:bc:c8: b3:ff:81:cd:d7:43:b1:27:db:6b:42:e3:4d:c5:ff: 49:7b:57:98:06:44:cd:9a:0f:11:4d:36:7a:b3:32: da:48:a8:a6:76:88:aa:3f:5a:5e:10:15:2b:72:7c: d8:38:dd:eb:fd:88:b0:2b:fa:f1:25:76:93:2e:62: 2d:4b:02:88:94:79:60:4e:9d:80:53:f4:8f:b3:48: 5e:7b:ee:2d:ec:c9:43:a7:a4:f8:a8:ba:71:73:8e: 91:7e:9f:18:23:46:42:95:ec:49:bc:10:7d:db:08: 82:64:0b:6f:77:7c:82:23:85:29:30:d4:ea:35:0c: c4:40:2c:d3:bd:85:d8:b9:69:37:24:cd:64:fa:d2: 20:9a:06:a4:e9:3b:b7:3a:63:2f:7a:35:11:18:65: 63:dc:ab:9b:7c:77:fd:4b:88:26:bd:dc:4f:31:7b: 54:6a:ca:4a:68:2c:02:79:ce:e7:9e:e3:59:63:27: 89:3b:9b:17:5a:c3:27:33:1a:57:80:5f:39:d9:46: e3:ac:00:8d:d7:55:fb:59:0d:f8:0a:32:ba:c4:8c: 74:3b:12:ca:95:00:54:d8:90:e2:34:f8:34:35:14: 27:f8:55:9a:a2:46:9c:78:24:c6:33:4d:81:41:87: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9C:5F:B7:DF:F1:83:FF:AE:89:86:99:50:31:C8:B4:2C:72:AF:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a5:e1:f9:7a:a1:a8:f1:3c:e3:5c:f6:30:70:16:76:b4:13: f9:22:bc:20:af:f7:9f:8b:b0:20:54:ab:a3:eb:51:f9:71:00: 64:9b:7d:10:92:f9:c5:05:9f:1c:48:38:4c:31:4a:36:3f:95: 48:07:87:46:51:eb:6a:55:d0:c8:60:34:3f:51:76:ed:01:b1: 91:8d:42:d2:06:69:8f:64:d6:d1:fd:ad:be:0e:81:c0:77:ea: 17:ad:b7:26:67:7f:79:e5:86:e0:e1:aa:df:ac:54:27:07:67: eb:51:8f:e3:fd:54:be:af:8d:dc:85:de:08:99:a6:f0:75:d5: 85:7d:e1:d4:ea:b8:f7:26:1c:64:d1:8d:1d:ca:4a:fb:1e:ea: 56:93:9f:da:1d:ae:b1:f3:cb:f3:87:0b:df:45:ad:4d:48:c8: 0b:b0:a9:b4:b5:9e:da:c9:dc:fc:c0:f6:05:37:be:2f:cd:cb: 95:fa:cf:97:f9:77:c2:54:07:e9:be:da:05:cd:e3:4f:06:f4: ab:a2:b4:42:51:b2:56:57:ab:69:79:82:e1:19:8f:41:f2:2e: 15:fb:04:98:6c:96:ed:02:c5:71:83:7b:28:73:8a:03:2d:32: 48:71:8d:0d:12:4b:65:79:03:ec:28:3f:61:5d:7b:09:3a:db: 0a:a2:a6:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnhfSiJyHrzY4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MmZkMGM5N2QtYjlkZS00Zjc4LWExNzgtZWFiYmE5MTc4YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP4wb7wEYaXijT9lvMiz/4HN10OxJ9trQuNN xf9Je1eYBkTNmg8RTTZ6szLaSKimdoiqP1peEBUrcnzYON3r/YiwK/rxJXaTLmIt SwKIlHlgTp2AU/SPs0hee+4t7MlDp6T4qLpxc46Rfp8YI0ZClexJvBB92wiCZAtv d3yCI4UpMNTqNQzEQCzTvYXYuWk3JM1k+tIgmgak6Tu3OmMvejURGGVj3KubfHf9 S4gmvdxPMXtUaspKaCwCec7nnuNZYyeJO5sXWsMnMxpXgF852UbjrACN11X7WQ34 CjK6xIx0OxLKlQBU2JDiNPg0NRQn+FWaokaceCTGM02BQYezqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6cX7ff8YP/romGmVAxyLQscq+iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2ZkNWJhY2YtYjY3Ni0z NmUxLWIxOTAtNGYzOGIwNjJlYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKl4fl6oajxPONc9jBwFna0E/kivCCv95+LsCBUq6PrUflxAGSbfRCS +cUFnxxIOEwxSjY/lUgHh0ZR62pV0MhgND9Rdu0BsZGNQtIGaY9k1tH9rb4OgcB3 6hettyZnf3nlhuDhqt+sVCcHZ+tRj+P9VL6vjdyF3giZpvB11YV94dTquPcmHGTR jR3KSvse6laTn9odrrHzy/OHC99FrU1IyAuwqbS1ntrJ3PzA9gU3vi/Ny5X6z5f5 d8JUB+m+2gXN408G9KuitEJRslZXq2l5guEZj0HyLhX7BJhslu0CxXGDeyhzigMt MkhxjQ0SS2V5A+woP2Fdewk62wqipn0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:33 2026 by rpki-client