$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5a3b2f4-e01a-37b8-9192-91781f643408.roa File: f5a3b2f4-e01a-37b8-9192-91781f643408.roa (raw, json) Hash identifier: eaxruq5vihu5BqsyWt8vg8H95/uMpiLCmOqqb5sVs6s= Subject key identifier: BC:36:53:24:98:FE:D9:73:E6:F5:52:62:A6:58:F0:F8:32:76:96:58 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117291CA65474C0A648DE580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5a3b2f4-e01a-37b8-9192-91781f643408.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:91:ca:65:47:4c:0a:64:8d:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=b74a61df-7696-41c8-8b67-c9389ff94c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:00:59:05:6c:0a:03:b8:79:5c:fb:d5:7d: ca:66:0a:2e:de:9f:cd:f7:5f:42:3a:ed:ca:89:99: c3:ff:9d:a3:db:04:d1:1d:36:c6:8d:2f:fa:b6:45: 74:55:29:ea:cf:62:d8:35:01:d6:b5:ef:fe:c6:63: 8f:34:3c:76:3a:36:4c:48:e2:27:63:2e:55:4d:01: 70:2e:bc:4f:2b:9d:c5:d8:a5:60:9d:24:f0:a3:66: 7e:a3:0e:77:87:a0:33:0f:9a:ea:57:83:34:f3:2a: f9:73:ad:20:19:89:c0:4b:10:e1:6e:83:13:09:23: 90:13:c6:1d:6d:62:74:4b:1c:df:f3:c8:92:86:23: ed:12:4b:fe:29:3e:cd:7a:11:b5:c3:86:0a:03:d2: e9:24:3b:0f:af:ec:47:0a:26:14:a9:3c:7d:44:61: 7c:1f:d0:55:72:98:9b:c4:5f:f1:34:7c:60:15:4a: ac:65:65:ed:b6:b5:30:be:82:5d:df:19:a0:ad:a1: 22:7d:20:8a:5f:11:4d:43:c3:85:16:ad:c9:01:01: 76:67:24:ed:b1:91:2b:ac:5a:e6:7b:86:9e:39:00: 31:4a:01:b8:71:8d:1f:11:39:04:fa:c4:1c:16:af: 29:3e:de:05:c2:1a:8c:60:27:d7:ee:5c:43:91:f2: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:36:53:24:98:FE:D9:73:E6:F5:52:62:A6:58:F0:F8:32:76:96:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5a3b2f4-e01a-37b8-9192-91781f643408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:80:b6:03:7c:d7:67:90:89:ef:da:44:e3:7b:49:9d:3f:b3: 20:98:f4:cc:f3:c2:06:a5:f6:95:75:80:c0:c8:e4:1a:c6:18: f5:4e:48:0f:0e:a1:f6:ca:c1:b0:1b:a5:b5:c0:2d:11:0d:03: 92:ae:3f:9a:a2:f4:c3:e3:cd:51:80:65:37:49:e8:d1:db:e2: 9c:bc:9d:69:2d:a2:30:2d:9b:3d:f7:5d:d5:85:ae:18:e5:8e: 4e:62:a1:c9:a8:ff:75:fc:89:ca:af:b7:d7:c9:39:ee:ca:e3: 22:af:1c:75:f1:6a:1f:38:4b:30:fe:2c:3c:39:e9:b9:6c:b1: 69:62:d5:ad:21:f5:2c:2f:2f:fa:38:b8:55:ab:fc:08:c2:1f: 9a:5d:de:b3:06:5e:e1:c9:3c:09:35:af:a4:7c:44:40:6d:6d: f0:f4:0c:4e:a3:2d:0b:3d:d0:4b:eb:8c:2a:fb:8e:ca:ac:cb: 04:3b:d6:5e:a4:55:27:c3:23:a4:20:0c:0e:5a:12:8f:b3:8f: 5b:34:59:60:38:fe:00:b5:e7:de:8f:cc:ff:39:be:0a:eb:d8: f3:f4:37:03:be:6b:52:e1:34:78:77:74:12:0c:b5:2d:33:11: 91:6e:1b:56:1b:17:cc:0b:08:89:d7:45:52:9c:83:ab:5e:54: 58:e8:33:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpHKZUdMCmSN5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk Yjc0YTYxZGYtNzY5Ni00MWM4LThiNjctYzkzODlmZjk0YzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhEAWQVsCgO4eVz71X3KZgou3p/N919COu3K iZnD/52j2wTRHTbGjS/6tkV0VSnqz2LYNQHWte/+xmOPNDx2OjZMSOInYy5VTQFw LrxPK53F2KVgnSTwo2Z+ow53h6AzD5rqV4M08yr5c60gGYnASxDhboMTCSOQE8Yd bWJ0Sxzf88iShiPtEkv+KT7NehG1w4YKA9LpJDsPr+xHCiYUqTx9RGF8H9BVcpib xF/xNHxgFUqsZWXttrUwvoJd3xmgraEifSCKXxFNQ8OFFq3JAQF2ZyTtsZErrFrm e4aeOQAxSgG4cY0fETkE+sQcFq8pPt4FwhqMYCfX7lxDkfIifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw2UySY/tlz5vVSYqZY8PgydpZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjVhM2IyZjQtZTAxYS0z N2I4LTkxOTItOTE3ODFmNjQzNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaAtgN812eQie/aRON7SZ0/syCY9Mzzwgal9pV1gMDI5BrGGPVOSA8O ofbKwbAbpbXALRENA5KuP5qi9MPjzVGAZTdJ6NHb4py8nWktojAtmz33XdWFrhjl jk5iocmo/3X8icqvt9fJOe7K4yKvHHXxah84SzD+LDw56blssWli1a0h9SwvL/o4 uFWr/AjCH5pd3rMGXuHJPAk1r6R8REBtbfD0DE6jLQs90EvrjCr7jsqsywQ71l6k VSfDI6QgDA5aEo+zj1s0WWA4/gC1596PzP85vgrr2PP0NwO+a1LhNHh3dBIMtS0z EZFuG1YbF8wLCInXRVKcg6teVFjoM1o= -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:53 2026 by rpki-client