$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa File: e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa (raw, json) Hash identifier: dAJuRGQjX1w34L2a+0k8m3FCu8OZbXBk56UjvTpOeKM= Subject key identifier: 94:2B:CE:81:1A:E3:DD:F6:EE:71:99:17:87:C9:B9:22:92:75:5E:B9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8C425C71C35FAA3E1D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8c:42:5c:71:c3:5f:aa:3e:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=90574a09-d66a-4240-a129-322d3266e2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:94:c1:14:3e:7d:58:6f:d1:49:4c:33:96: ed:08:74:e1:86:b1:b0:e0:32:0a:5f:e6:83:2f:4e: fc:eb:64:d6:55:f9:d5:99:49:4c:b1:a8:18:ad:fe: dd:3c:5c:b3:48:85:cc:4b:13:26:22:f3:1a:f4:90: 72:43:b6:f0:cd:70:c4:51:15:6f:96:81:27:43:d7: 7b:53:64:56:22:bc:6e:45:5b:ef:d1:a1:15:17:ab: 3f:16:59:ef:ed:19:ee:cd:83:d6:53:4a:53:15:0f: f6:9d:59:87:22:59:ac:ed:bb:70:24:17:3c:e0:52: e8:74:55:a5:e6:94:39:03:d4:a1:20:06:19:fe:10: da:4d:40:65:42:53:37:8d:4e:7b:79:07:f1:47:09: 2a:f2:9b:ee:e2:8c:67:25:27:67:33:cb:fd:a3:ca: ed:cd:06:a1:fa:a5:ab:e4:1b:49:17:8c:74:f2:92: 13:f8:25:d9:4d:23:60:03:82:80:63:35:dc:a1:91: 20:48:41:88:8a:e7:e3:49:97:39:dd:e2:6b:82:76: 7e:a0:5a:8d:a8:7e:74:9c:d7:b0:63:e1:bb:68:58: 3d:16:77:cc:2f:d5:a6:ff:f8:73:42:d4:6a:35:cb: e8:0b:7e:6f:68:42:96:76:3e:0a:f3:44:9e:20:42: 54:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2B:CE:81:1A:E3:DD:F6:EE:71:99:17:87:C9:B9:22:92:75:5E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2a:8d:e8:e2:d8:73:ba:64:11:5a:f4:0e:02:72:6e:6a:eb: bf:40:4f:d1:f0:ce:43:ab:a7:d8:88:a4:4d:cb:1c:9d:ef:7a: c0:b1:d8:04:ef:0d:ab:12:bd:c1:bb:42:19:9a:cb:d2:38:86: e8:15:87:9a:52:54:18:26:83:b1:5d:a2:21:d5:1f:d0:6e:d3: 3e:22:ee:11:d3:55:cd:ef:17:cd:5d:c4:fd:b2:dc:5c:d8:f8: 81:2e:bf:13:73:65:67:5c:3e:c3:0e:3c:c8:7e:dc:57:35:e1: eb:f1:bc:7f:e9:fe:02:2b:63:a4:23:c1:42:9a:a8:35:42:9d: 3a:ac:7b:df:d4:24:bd:d7:c7:1b:4a:ab:c5:05:e9:2c:d3:84: 5f:26:e7:d2:1a:1f:92:2d:1c:29:f7:d3:99:c0:b4:6d:c3:0f: 61:10:ff:1d:e3:c3:ce:12:38:40:f1:78:2b:4c:c7:e2:90:86: 29:7b:bb:4b:3c:08:67:b9:9f:34:30:09:96:16:71:16:dc:3f: 50:f8:31:f6:bc:85:e8:c2:b2:a3:d7:59:18:bb:88:0b:f8:e9: 74:29:5d:92:6b:4e:a0:e2:35:9f:1a:ae:96:21:42:28:93:61: 6a:86:3b:b0:e0:10:f9:4d:9b:e0:14:6a:c6:e2:65:13:fc:35: b1:5f:5e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYxCXHHDX6o+HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OTA1NzRhMDktZDY2YS00MjQwLWExMjktMzIyZDMyNjZlMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHiUwRQ+fVhv0UlMM5btCHThhrGw4DIKX+aD L07862TWVfnVmUlMsagYrf7dPFyzSIXMSxMmIvMa9JByQ7bwzXDEURVvloEnQ9d7 U2RWIrxuRVvv0aEVF6s/Flnv7RnuzYPWU0pTFQ/2nVmHIlms7btwJBc84FLodFWl 5pQ5A9ShIAYZ/hDaTUBlQlM3jU57eQfxRwkq8pvu4oxnJSdnM8v9o8rtzQah+qWr 5BtJF4x08pIT+CXZTSNgA4KAYzXcoZEgSEGIiufjSZc53eJrgnZ+oFqNqH50nNew Y+G7aFg9FnfML9Wm//hzQtRqNcvoC35vaEKWdj4K80SeIEJU6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQrzoEa49327nGZF4fJuSKSdV65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTIxZDRiYzEtMTliOS0z NTkzLThlOTktNTg1YjU3MGNjM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMqjeji2HO6ZBFa9A4Ccm5q679AT9HwzkOrp9iIpE3LHJ3vesCx2ATv DasSvcG7Qhmay9I4hugVh5pSVBgmg7FdoiHVH9Bu0z4i7hHTVc3vF81dxP2y3FzY +IEuvxNzZWdcPsMOPMh+3Fc14evxvH/p/gIrY6QjwUKaqDVCnTqse9/UJL3XxxtK q8UF6SzThF8m59IaH5ItHCn305nAtG3DD2EQ/x3jw84SOEDxeCtMx+KQhil7u0s8 CGe5nzQwCZYWcRbcP1D4Mfa8hejCsqPXWRi7iAv46XQpXZJrTqDiNZ8arpYhQiiT YWqGO7DgEPlNm+AUasbiZRP8NbFfXrA= -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:37 2026 by rpki-client