$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d36c1525-172b-3965-a8db-ead5d762db8f.roa File: d36c1525-172b-3965-a8db-ead5d762db8f.roa (raw, json) Hash identifier: D0P/2Bdzi2ofxynooEALOkyhVjF4x69aG7LQp+jtV0Q= Subject key identifier: CA:44:BE:07:ED:99:A4:D9:6B:98:E1:2F:2A:AE:EE:1C:1F:9D:5D:09 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8B0427B9A2D88CFE5C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d36c1525-172b-3965-a8db-ead5d762db8f.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8b:04:27:b9:a2:d8:8c:fe:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=95daaeaf-e429-4918-91a7-ca8c2a8da25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:6e:c8:8a:9f:f6:54:ba:93:42:ae:eb:45: 4f:49:c7:5f:eb:a5:5e:3e:98:93:78:9e:63:ad:ad: 7c:da:5d:e0:f3:ff:3a:95:0e:ef:80:2f:81:da:d8: 20:a4:f9:fd:74:82:e3:73:95:f9:ac:17:f3:43:22: 7c:c3:73:2e:b9:2f:7e:3e:24:ec:6b:42:2c:b9:85: 10:9d:d2:d0:a0:0a:9c:09:c9:af:dc:e3:53:97:77: 05:97:c1:c7:ed:f0:3f:35:53:62:57:99:ac:0a:40: be:10:6f:71:57:89:5d:b8:9a:12:33:23:f9:a3:54: 2f:60:19:37:31:f8:6b:e4:d6:86:fc:86:ba:d7:84: d7:20:2c:3e:2e:86:79:f5:88:aa:3f:38:e3:bb:92: 5e:8f:6a:bd:28:8c:be:d4:d5:11:ac:b1:02:ff:d4: 46:38:2b:82:99:da:6d:6c:0f:c8:ef:78:e3:bd:1b: fa:e5:2d:ba:c8:ea:e5:68:39:d4:9c:cb:6c:36:b6: b9:9e:ea:cc:f2:a1:b9:e4:fe:b1:52:0f:45:f2:d7: 32:63:26:86:ef:f6:d4:7e:d7:3e:28:2e:23:d6:f6: 4d:b4:2e:14:8b:0c:28:3b:b7:7f:e7:d8:46:8e:95: 2f:84:db:49:c7:40:b6:34:08:f1:e9:62:60:37:67: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:44:BE:07:ED:99:A4:D9:6B:98:E1:2F:2A:AE:EE:1C:1F:9D:5D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d36c1525-172b-3965-a8db-ead5d762db8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:de:d3:ed:b7:02:a6:9e:7c:75:f7:2d:3a:0d:85:72:20:06: 99:f4:f5:b8:97:78:e3:f7:50:49:0f:ea:02:ff:88:6b:cd:2f: 42:f7:f2:cd:72:f5:a5:f4:ca:3e:39:57:6d:c2:cd:15:ee:fa: 4c:6e:6e:54:a3:2e:5f:59:2d:e6:99:53:a5:6e:e8:17:9f:ba: 8a:ff:9d:f9:d6:45:a9:52:2c:b1:34:a5:f2:c9:2c:59:9d:98: f8:41:e7:e6:b9:be:82:61:b8:35:1d:7b:9f:47:47:a7:9c:5c: 4e:09:e4:56:f3:25:d7:b0:f5:c9:4b:78:2b:e8:25:d4:1d:3f: 4c:2b:ba:8d:25:56:db:12:a9:f1:8d:4b:7e:5d:43:28:cf:ed: 39:30:37:03:4b:23:65:b0:63:40:63:0d:90:60:da:66:6b:51: 92:de:64:93:11:43:62:38:0b:73:3a:bd:6c:09:3c:1f:63:e8: f8:3c:c3:38:13:dc:24:01:de:5c:52:42:8a:17:81:8e:7a:c2: 87:8f:0e:19:c8:61:99:90:5d:e7:22:cf:76:b7:49:57:27:9c: a1:ad:e0:57:a6:b9:b3:44:ae:4a:53:11:e3:7c:c7:81:d5:47: e8:d8:86:9d:e7:d5:07:d3:a0:cf:10:db:64:9c:b2:50:23:51: 1c:68:b9:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYsEJ7mi2Iz+XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OTVkYWFlYWYtZTQyOS00OTE4LTkxYTctY2E4YzJhOGRhMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZpuyIqf9lS6k0Ku60VPScdf66VePpiTeJ5j ra182l3g8/86lQ7vgC+B2tggpPn9dILjc5X5rBfzQyJ8w3MuuS9+PiTsa0IsuYUQ ndLQoAqcCcmv3ONTl3cFl8HH7fA/NVNiV5msCkC+EG9xV4lduJoSMyP5o1QvYBk3 Mfhr5NaG/Ia614TXICw+LoZ59YiqPzjju5Jej2q9KIy+1NURrLEC/9RGOCuCmdpt bA/I73jjvRv65S26yOrlaDnUnMtsNra5nurM8qG55P6xUg9F8tcyYyaG7/bUftc+ KC4j1vZNtC4UiwwoO7d/59hGjpUvhNtJx0C2NAjx6WJgN2cJ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpEvgftmaTZa5jhLyqu7hwfnV0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDM2YzE1MjUtMTcyYi0z OTY1LWE4ZGItZWFkNWQ3NjJkYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALze0+23AqaefHX3LToNhXIgBpn09biXeOP3UEkP6gL/iGvNL0L38s1y 9aX0yj45V23CzRXu+kxublSjLl9ZLeaZU6Vu6Befuor/nfnWRalSLLE0pfLJLFmd mPhB5+a5voJhuDUde59HR6ecXE4J5FbzJdew9clLeCvoJdQdP0wruo0lVtsSqfGN S35dQyjP7TkwNwNLI2WwY0BjDZBg2mZrUZLeZJMRQ2I4C3M6vWwJPB9j6Pg8wzgT 3CQB3lxSQooXgY56woePDhnIYZmQXeciz3a3SVcnnKGt4FemubNErkpTEeN8x4HV R+jYhp3n1QfToM8Q22ScslAjURxoua4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:43 2026 by rpki-client