$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ece654c6-8f51-3b7d-a313-9dba9d710096.roa File: ece654c6-8f51-3b7d-a313-9dba9d710096.roa (raw, json) Hash identifier: n9S0XcPAYJVuK3m0WaYHDcH3VvIv6xScCL+kzF8u4oY= Subject key identifier: 2A:58:6A:FF:64:80:A9:62:42:2C:2F:C5:AD:36:00:60:7A:F1:31:D1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A809A682F234074E199D0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ece654c6-8f51-3b7d-a313-9dba9d710096.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395973 IP address blocks: 104.134.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:80:9a:68:2f:23:40:74:e1:99:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=3f57bb96-cf27-45ad-a1f6-6f098491cfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:83:6d:b4:1f:d0:e9:a0:d2:7f:8a:90:48:18: 85:5f:b5:2e:d4:29:4d:bb:95:be:30:e8:6b:b7:26: 43:c2:fa:66:39:7f:db:97:25:80:c4:7c:81:98:ca: 6f:83:16:0d:c4:f9:46:be:04:e1:f7:cb:2c:94:a6: 4d:89:98:54:79:d5:70:f9:ea:f5:60:84:67:05:15: ca:71:fa:e8:60:4a:90:17:ea:2a:61:e0:10:55:2e: 84:a5:8d:ee:98:bd:16:7f:6c:9a:f2:4b:53:71:a0: dd:46:b7:44:b7:bb:4b:c3:16:c2:8f:70:15:ea:03: 54:d9:cd:1d:6e:a1:1e:fd:05:9e:85:cf:a4:1d:8e: 6e:6c:bb:00:ae:58:6f:47:91:12:bf:ab:e9:c2:6e: 15:02:7b:ee:9c:f5:8e:86:77:b2:52:33:56:15:78: bd:b9:11:b6:3a:6a:6b:89:e6:05:e6:ad:d3:68:c1: c5:05:79:fe:c8:5f:ae:39:f9:f1:f1:2a:c2:56:70: 01:94:81:ba:70:59:64:ab:30:33:25:0c:18:f2:4e: dd:54:11:fa:c1:f4:0f:f3:b9:76:3d:9b:90:86:87: dc:2c:f3:98:43:8f:bd:a1:68:bc:d4:4f:25:64:39: c3:61:cd:38:d8:9a:95:dc:87:83:62:84:f2:26:87: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:58:6A:FF:64:80:A9:62:42:2C:2F:C5:AD:36:00:60:7A:F1:31:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ece654c6-8f51-3b7d-a313-9dba9d710096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f3:63:cd:af:54:83:a7:c5:31:22:e6:8b:1b:3c:79:bb:99: 0c:3f:a6:6b:67:03:1b:de:12:53:63:25:7a:b9:98:d4:4f:ab: 87:e8:9c:83:bc:f9:d5:7c:d6:49:f9:25:db:ef:83:f5:f4:b0: 76:62:62:7a:f2:0f:e6:c3:09:09:80:35:6c:f4:5e:e6:bb:0e: ba:29:82:5f:3a:30:55:21:9c:b8:36:a0:ad:1e:6c:4f:fb:ce: 7e:99:6f:5b:ba:d5:94:07:80:fa:1f:01:f5:f4:f2:dc:23:63: 93:f4:1b:f8:b3:38:84:f0:31:09:2b:55:fd:16:7b:1c:18:45: f5:52:2e:2d:4a:11:75:77:51:61:e4:91:ac:00:95:0d:95:60: ca:dd:6b:c7:1e:95:d2:af:cc:1f:8c:79:6f:b4:ae:3d:ce:a8: 2a:8b:ac:f5:46:17:89:2f:7c:db:da:26:5f:8e:4f:c3:ad:91: fc:31:06:6e:a9:76:9f:9c:9e:b4:38:8f:14:a6:c4:f1:bc:d3: ac:98:41:93:9b:ed:84:3c:73:56:dd:74:31:82:18:d7:ee:3c: 41:5d:8e:6a:00:42:92:9f:10:55:13:9d:fe:4c:d3:84:75:82: 56:57:ae:25:9f:ce:4d:22:f3:c4:ea:32:d0:c9:57:b8:b4:72: 2b:fd:cb:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoCaaC8jQHThmdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk M2Y1N2JiOTYtY2YyNy00NWFkLWExZjYtNmYwOTg0OTFjZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgINttB/Q6aDSf4qQSBiFX7Uu1ClNu5W+MOhr tyZDwvpmOX/blyWAxHyBmMpvgxYNxPlGvgTh98sslKZNiZhUedVw+er1YIRnBRXK cfroYEqQF+oqYeAQVS6EpY3umL0Wf2ya8ktTcaDdRrdEt7tLwxbCj3AV6gNU2c0d bqEe/QWehc+kHY5ubLsArlhvR5ESv6vpwm4VAnvunPWOhneyUjNWFXi9uRG2Ompr ieYF5q3TaMHFBXn+yF+uOfnx8SrCVnABlIG6cFlkqzAzJQwY8k7dVBH6wfQP87l2 PZuQhofcLPOYQ4+9oWi81E8lZDnDYc042JqV3IeDYoTyJofctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpYav9kgKliQiwvxa02AGB68THRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWNlNjU0YzYtOGY1MS0z YjdkLWEzMTMtOWRiYTlkNzEwMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIa2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbzY82vVIOnxTEi5osbPHm7mQw/pmtnAxveElNjJXq5mNRPq4fonIO8 +dV81kn5Jdvvg/X0sHZiYnryD+bDCQmANWz0Xua7Dropgl86MFUhnLg2oK0ebE/7 zn6Zb1u61ZQHgPofAfX08twjY5P0G/izOITwMQkrVf0WexwYRfVSLi1KEXV3UWHk kawAlQ2VYMrda8celdKvzB+MeW+0rj3OqCqLrPVGF4kvfNvaJl+OT8OtkfwxBm6p dp+cnrQ4jxSmxPG806yYQZOb7YQ8c1bddDGCGNfuPEFdjmoAQpKfEFUTnf5M04R1 glZXriWfzk0i88TqMtDJV7i0civ9y3A= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:46 2026 by rpki-client