$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa File: da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa (raw, json) Hash identifier: McYgu1wqZas8u41sixW+qfDUzcGe95H/mUCgGmRTiyI= Subject key identifier: AF:09:18:95:E2:08:F0:34:AB:E4:1E:DB:DA:1B:68:26:08:67:37:CA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A798DC5C5C9FBF932AFC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:79:8d:c5:c5:c9:fb:f9:32:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=b9e06d3e-e449-4218-9f72-c770de33cb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f1:94:6b:74:07:e2:c8:9f:2e:4b:ef:ee:70: 71:b1:c3:92:bc:85:34:69:46:de:96:f3:aa:d7:20: 82:46:87:be:2e:cc:53:b1:7e:dc:17:28:87:8c:b8: a4:2d:68:c1:3a:63:5d:9e:64:6d:da:15:93:d8:42: 65:f7:c5:54:29:a8:4d:48:f1:05:3d:84:3b:54:1a: f0:aa:3f:c2:9b:c9:42:35:b8:06:e0:07:d9:02:1a: 38:8b:a4:e9:db:71:d7:89:36:3b:ad:35:ee:f9:dd: 31:8c:35:7d:cb:7f:39:e6:5e:17:40:54:55:70:36: fe:97:d9:94:01:10:aa:9f:a2:c1:d4:70:2d:76:7b: 91:f1:9a:34:14:34:3e:3b:e1:11:2d:72:61:fb:c1: 1e:a8:54:3a:ac:c3:9e:74:5a:d3:71:e9:eb:eb:97: 14:04:91:38:12:1a:4c:cb:27:64:f4:1d:47:ed:17: 9f:ce:68:f3:16:9d:f1:ab:63:f5:99:65:f5:8f:75: cb:ee:7c:49:99:a9:a7:73:cf:9e:cf:b4:cb:66:1f: b2:f0:15:e1:f3:47:90:96:fa:48:97:83:3f:21:e0: 54:b7:2a:10:a1:42:3b:4b:38:70:07:04:f2:10:b1: 3a:eb:a3:c0:e1:33:c7:4e:ab:dc:df:a2:3b:a1:66: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:18:95:E2:08:F0:34:AB:E4:1E:DB:DA:1B:68:26:08:67:37:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/da04bdc9-e5b3-3739-bc56-917aade9a1e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:dc:4b:6d:ec:23:a2:53:1e:c9:f9:35:f4:1e:fd:43:06:22: 5b:4e:ae:3e:e5:18:87:ab:5d:83:c7:0b:46:e6:e5:3d:16:17: 51:b8:6f:89:77:3e:8b:2e:be:26:28:72:21:fa:50:e4:e4:55: 37:a0:2c:ba:de:c7:d2:4c:4f:7b:1c:64:3a:cd:7a:eb:75:62: 02:30:2e:fb:76:72:56:9e:6c:8d:88:d5:0e:50:3c:95:a1:b4: 44:ff:a8:10:66:e7:db:db:cf:dd:48:ce:ba:c6:d7:6a:d2:3a: ad:f3:1a:54:d1:f0:04:88:97:cc:bb:e5:f2:76:58:c2:b0:95: 99:8c:e8:51:c8:90:69:0c:2c:cd:70:73:0c:3b:11:86:55:5e: 62:fb:58:f6:a8:ae:2a:04:5c:2a:18:a7:96:d5:84:62:30:bd: 90:12:f3:8f:3f:1c:c2:6e:7d:64:ae:10:91:a2:9c:14:53:43: ee:7b:8d:ef:9d:c5:bf:01:8f:09:75:ff:9f:23:02:15:e3:a7: 07:e9:bf:b6:ff:4d:94:83:54:73:f0:9f:c9:e4:3a:01:8e:e1: df:08:5d:cc:11:f7:97:7f:28:f0:da:90:9a:f9:ca:cc:fc:3a: 5e:2c:e2:58:bf:5d:25:9f:b3:50:ce:09:5c:d1:e8:d0:f2:d1: f5:2c:86:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnmNxcXJ+/kyr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YjllMDZkM2UtZTQ0OS00MjE4LTlmNzItYzc3MGRlMzNjYjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PGUa3QH4sifLkvv7nBxscOSvIU0aUbelvOq 1yCCRoe+LsxTsX7cFyiHjLikLWjBOmNdnmRt2hWT2EJl98VUKahNSPEFPYQ7VBrw qj/Cm8lCNbgG4AfZAho4i6Tp23HXiTY7rTXu+d0xjDV9y3855l4XQFRVcDb+l9mU ARCqn6LB1HAtdnuR8Zo0FDQ+O+ERLXJh+8EeqFQ6rMOedFrTcenr65cUBJE4EhpM yydk9B1H7RefzmjzFp3xq2P1mWX1j3XL7nxJmamnc8+ez7TLZh+y8BXh80eQlvpI l4M/IeBUtyoQoUI7SzhwBwTyELE666PA4TPHTqvc36I7oWZdXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8JGJXiCPA0q+Qe29obaCYIZzfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGEwNGJkYzktZTViMy0z NzM5LWJjNTYtOTE3YWFkZTlhMWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPcS23sI6JTHsn5NfQe/UMGIltOrj7lGIerXYPHC0bm5T0WF1G4b4l3 PosuviYociH6UOTkVTegLLrex9JMT3scZDrNeut1YgIwLvt2claebI2I1Q5QPJWh tET/qBBm59vbz91IzrrG12rSOq3zGlTR8ASIl8y75fJ2WMKwlZmM6FHIkGkMLM1w cww7EYZVXmL7WPaorioEXCoYp5bVhGIwvZAS848/HMJufWSuEJGinBRTQ+57je+d xb8Bjwl1/58jAhXjpwfpv7b/TZSDVHPwn8nkOgGO4d8IXcwR95d/KPDakJr5ysz8 Ol4s4li/XSWfs1DOCVzR6NDy0fUshpg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:13 2026 by rpki-client