$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa File: d928e18b-9866-37ab-a256-596a1223db7b.roa (raw, json) Hash identifier: 4jv3SEnv0uwjDJ2TA03FzZn7c51emh9vRHLDqZs1xLo= Subject key identifier: 66:E7:F8:C1:A0:F8:94:FC:78:B0:5C:EB:9F:99:FF:69:7E:90:BB:4C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D359FF545716EAFCB6F707140 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 36411 IP address blocks: 104.132.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:f5:45:71:6e:af:cb:6f:70:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=407357ac-cdd9-487e-bf87-aee003548490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:ed:94:9e:8e:6f:1e:64:ff:1b:90:ed:a1: 4f:3b:b3:0d:ea:0d:51:2b:69:03:a6:eb:14:55:d8: 2d:cc:2f:75:f9:f5:b4:7e:8e:20:8f:85:eb:35:a3: 8e:76:94:0a:75:a6:b9:00:93:0e:0b:64:a4:7c:60: ab:a3:89:16:20:34:c5:a3:90:91:3e:13:39:55:8f: d3:f5:12:a5:7c:d0:c6:a2:a6:5f:0f:ba:d9:b3:11: 8e:04:a0:b9:34:2b:33:f5:28:1b:d0:b3:99:43:8a: 8c:34:46:3d:a1:ce:c0:16:a8:dd:f1:27:6a:4d:61: 1a:58:be:c9:d2:81:37:bb:08:58:27:32:34:36:09: fb:8d:84:3d:ba:24:03:88:8d:b3:79:fc:df:4b:9b: 4e:53:0c:ec:41:18:47:19:35:16:58:1e:ab:25:69: dd:ee:7f:10:d5:5b:b1:4c:0f:7e:18:dd:c9:00:17: f3:66:3e:57:13:33:8c:af:a1:65:ed:d5:c7:9c:6f: d9:f5:b9:aa:cd:c0:19:80:12:b6:a1:89:2e:9f:bc: 17:a1:95:0f:15:82:65:7c:57:99:e8:45:f3:bc:5d: 4b:c9:af:b6:33:e9:e4:95:7a:78:7a:61:df:1e:06: 56:44:74:d4:e8:fc:0e:42:2f:ff:df:79:47:ea:25: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E7:F8:C1:A0:F8:94:FC:78:B0:5C:EB:9F:99:FF:69:7E:90:BB:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d928e18b-9866-37ab-a256-596a1223db7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7d:e2:fd:53:de:ab:02:4e:90:cf:cb:47:cf:23:dd:aa:6a: d0:fc:9c:13:8c:f6:82:56:c5:53:cc:7c:42:7e:52:6f:6b:c5: 7a:54:35:c5:1a:f4:5d:45:a6:f2:51:33:a0:77:39:76:53:38: 51:ad:78:1e:51:27:41:ac:24:d4:0a:57:5b:2b:3f:80:e2:da: ef:c5:23:8f:40:f1:47:a0:72:b5:1c:33:29:54:2f:f3:d8:a0: 9e:e9:f5:86:13:b1:9c:89:85:91:fd:32:cb:ee:3c:8a:5d:5a: 9a:c7:ca:c0:aa:d3:55:00:68:80:1f:c4:79:ea:c9:bd:04:b3: 41:d5:f9:fd:f0:ac:14:d6:83:f4:12:a6:7a:64:b1:ae:7e:1f: 3b:d3:52:66:75:a5:c4:3a:07:e7:7f:66:18:06:f0:f1:c9:45: 4f:7c:6d:f0:12:b4:0f:13:1a:bf:c0:0f:0e:28:81:49:cd:c2: 0e:50:24:a6:17:2d:03:1a:ff:ee:bf:fa:30:fe:a9:eb:0f:69: 26:63:72:cd:76:a3:92:34:c8:be:6c:f9:09:cb:81:54:82:20: d5:fc:83:ce:fb:c7:e8:e2:49:e5:3c:66:0c:35:ae:8e:a0:4e: f7:0b:fc:3d:a0:8b:41:df:20:c4:c9:5d:54:8d:e2:f0:e4:52: 3c:1a:d7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/VFcW6vy29wcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDA3MzU3YWMtY2RkOS00ODdlLWJmODctYWVlMDAzNTQ4NDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGXtlJ6Obx5k/xuQ7aFPO7MN6g1RK2kDpusU VdgtzC91+fW0fo4gj4XrNaOOdpQKdaa5AJMOC2SkfGCro4kWIDTFo5CRPhM5VY/T 9RKlfNDGoqZfD7rZsxGOBKC5NCsz9Sgb0LOZQ4qMNEY9oc7AFqjd8SdqTWEaWL7J 0oE3uwhYJzI0Ngn7jYQ9uiQDiI2zefzfS5tOUwzsQRhHGTUWWB6rJWnd7n8Q1Vux TA9+GN3JABfzZj5XEzOMr6Fl7dXHnG/Z9bmqzcAZgBK2oYkun7wXoZUPFYJlfFeZ 6EXzvF1Lya+2M+nklXp4emHfHgZWRHTU6PwOQi//33lH6iVAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbn+MGg+JT8eLBc65+Z/2l+kLtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDkyOGUxOGItOTg2Ni0z N2FiLWEyNTYtNTk2YTEyMjNkYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt94v1T3qsCTpDPy0fPI92qatD8nBOM9oJWxVPMfEJ+Um9rxXpUNcUa 9F1FpvJRM6B3OXZTOFGteB5RJ0GsJNQKV1srP4Di2u/FI49A8UegcrUcMylUL/PY oJ7p9YYTsZyJhZH9MsvuPIpdWprHysCq01UAaIAfxHnqyb0Es0HV+f3wrBTWg/QS pnpksa5+HzvTUmZ1pcQ6B+d/ZhgG8PHJRU98bfAStA8TGr/ADw4ogUnNwg5QJKYX LQMa/+6/+jD+qesPaSZjcs12o5I0yL5s+QnLgVSCINX8g877x+jiSeU8Zgw1ro6g TvcL/D2gi0HfIMTJXVSN4vDkUjwa1xM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:03 2026 by rpki-client