$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa4f7025-c4a9-3750-9332-8c361556e436.roa File: fa4f7025-c4a9-3750-9332-8c361556e436.roa (raw, json) Hash identifier: m8lS4ZtDGAFPurHl/HvBq7fCvtkCpNxGSVmovnIYYBs= Subject key identifier: 33:C7:E9:A7:F9:40:88:AB:D7:56:A2:FE:8D:F1:39:BD:65:B5:29:88 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA4C98795819B492A3280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa4f7025-c4a9-3750-9332-8c361556e436.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a4:c9:87:95:81:9b:49:2a:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=70052dd4-01f7-4691-b529-5d3e53deaa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:28:4a:f8:1d:9e:38:e9:11:e5:90:b6:0c:c4: ce:4c:cc:b1:da:8e:75:ac:dd:f3:a6:fe:b0:df:98: 7c:1b:3f:1f:77:d0:e7:fd:52:ff:a0:3e:93:e3:4e: 44:d9:50:ea:c5:f2:f5:f1:33:7c:b8:9d:58:1f:31: 83:a9:33:da:77:64:de:63:7b:b3:dc:6f:c7:9f:6d: 2c:89:ab:54:d8:61:92:2f:0f:0b:05:1e:bd:1f:e4: 67:d0:79:70:e6:a9:be:80:64:fd:95:35:ee:60:4b: b8:fb:6e:01:b4:a1:e2:db:56:ec:e3:36:01:b1:98: 9b:31:18:e0:77:9a:99:26:a6:ab:1c:02:63:af:d4: 32:59:a6:4a:85:a8:04:9b:11:70:5c:46:d2:8f:18: b0:08:a6:c6:28:a9:b5:16:bf:46:45:a9:67:90:d8: 38:83:d9:02:7a:65:9b:8e:02:ca:bf:93:aa:71:1b: 9a:2d:ec:76:bc:79:de:4f:d8:a7:f3:29:4f:d6:40: 41:a0:f8:2f:5e:7a:30:16:07:3a:3f:7a:34:e7:e7: 84:70:42:14:f7:6d:89:2b:4a:81:6f:0a:d1:4a:36: ad:df:a3:c2:75:0a:d5:74:43:24:5e:c6:fd:e3:18: b4:31:88:32:e1:6a:1e:fd:e2:1f:28:b2:7c:89:07: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C7:E9:A7:F9:40:88:AB:D7:56:A2:FE:8D:F1:39:BD:65:B5:29:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa4f7025-c4a9-3750-9332-8c361556e436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:65:81:dc:d1:11:46:dc:2b:53:57:2d:9e:26:ac:43:b4:e9: d1:b0:7a:75:b4:f2:c3:92:6a:53:ae:a4:b1:35:62:e3:eb:f4: 7d:08:ce:25:a7:13:17:48:11:10:07:31:17:28:81:65:8e:9c: fc:19:89:08:70:63:17:04:6b:10:1a:13:cd:17:ac:e1:d8:1b: dc:a9:6f:61:4d:9b:c9:c2:56:76:e2:42:59:e1:19:79:69:6f: f9:56:87:49:b0:67:3a:52:69:30:92:f8:04:e4:17:de:61:39: 97:54:9c:7b:2a:53:9b:f1:61:d5:ec:97:9f:2d:ad:99:6f:49: 32:40:b8:a5:c2:c0:66:34:b2:23:d5:2d:eb:e4:8c:53:3f:fc: 4e:dd:6a:5b:e3:62:2b:be:4d:8f:19:b9:34:44:62:3a:f3:e6: ca:d4:cd:d2:25:87:b6:55:18:a9:24:50:9d:b1:ba:4b:68:7f: 98:ff:f0:97:73:f3:0e:8d:7a:71:4f:98:0b:9b:3c:20:04:3c: df:ee:1f:9d:40:47:09:9f:b5:44:9e:53:0c:60:29:ca:3d:68: 63:e0:44:94:51:f0:da:a6:6c:e2:25:f0:6c:2c:78:f4:f3:f4: c5:62:8f:0b:ee:2c:82:a4:5c:25:2e:ec:a1:6e:bb:8c:6e:c3: 92:ed:07:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaTJh5WBm0kqMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NzAwNTJkZDQtMDFmNy00NjkxLWI1MjktNWQzZTUzZGVhYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ChK+B2eOOkR5ZC2DMTOTMyx2o51rN3zpv6w 35h8Gz8fd9Dn/VL/oD6T405E2VDqxfL18TN8uJ1YHzGDqTPad2TeY3uz3G/Hn20s iatU2GGSLw8LBR69H+Rn0Hlw5qm+gGT9lTXuYEu4+24BtKHi21bs4zYBsZibMRjg d5qZJqarHAJjr9QyWaZKhagEmxFwXEbSjxiwCKbGKKm1Fr9GRalnkNg4g9kCemWb jgLKv5OqcRuaLex2vHneT9in8ylP1kBBoPgvXnowFgc6P3o05+eEcEIU922JK0qB bwrRSjat36PCdQrVdEMkXsb94xi0MYgy4Woe/eIfKLJ8iQfNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPH6af5QIir11ai/o3xOb1ltSmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmE0ZjcwMjUtYzRhOS0z NzUwLTkzMzItOGMzNjE1NTZlNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5lgdzREUbcK1NXLZ4mrEO06dGwenW08sOSalOupLE1YuPr9H0IziWn ExdIERAHMRcogWWOnPwZiQhwYxcEaxAaE80XrOHYG9ypb2FNm8nCVnbiQlnhGXlp b/lWh0mwZzpSaTCS+ATkF95hOZdUnHsqU5vxYdXsl58trZlvSTJAuKXCwGY0siPV LevkjFM//E7dalvjYiu+TY8ZuTREYjrz5srUzdIlh7ZVGKkkUJ2xuktof5j/8Jdz 8w6NenFPmAubPCAEPN/uH51ARwmftUSeUwxgKco9aGPgRJRR8NqmbOIl8GwsePTz 9MVijwvuLIKkXCUu7KFuu4xuw5LtBwY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:46 2026 by rpki-client