$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd144871-bdad-3ee3-b9b4-457847268a9a.roa File: fd144871-bdad-3ee3-b9b4-457847268a9a.roa (raw, json) Hash identifier: ze20Y73brwyR1MzR1CC3hNdIZ2GvU/NhOa/jpT9rPZQ= Subject key identifier: 93:A0:E7:08:54:E2:56:2B:A4:12:0C:B9:CC:D0:AD:63:B3:7C:5C:96 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A521A74D77F705A58E480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd144871-bdad-3ee3-b9b4-457847268a9a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395973 IP address blocks: 104.134.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:52:1a:74:d7:7f:70:5a:58:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5e2c983d-c8fd-4d65-9ef8-543e5787d0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:21:30:86:c0:c6:22:35:b2:21:1b:95:6a: 07:f1:b2:68:26:95:3c:4b:89:a4:cd:ee:db:b8:61: 2a:2f:c6:8c:b1:b0:62:2c:a2:cf:b7:19:b9:24:da: fb:98:b3:27:91:1b:bc:7b:3d:b3:67:bb:d6:e6:a5: a6:f4:d1:ec:ad:33:ba:98:ff:9a:5e:c0:90:fc:e3: 14:b2:20:33:2f:fc:88:73:25:c6:6c:5b:2a:f9:e2: 0a:c4:53:52:6c:bc:7b:ae:67:56:e4:9a:1d:f1:9a: ad:6d:3b:ce:5e:94:12:78:68:6f:06:49:2e:f5:80: 11:90:65:42:7d:0e:b8:98:0a:93:62:14:64:06:ba: ff:b7:25:96:57:40:37:52:90:32:53:56:a9:6c:ea: a7:d2:38:8f:60:9d:cc:ac:55:71:95:be:b6:b2:61: 42:59:93:df:6e:f2:6c:e2:67:2f:16:99:56:8a:c8: 15:18:fb:01:2d:74:64:73:0f:1b:ac:4a:1f:5b:7d: 49:2b:c8:ef:cb:56:56:22:53:eb:6a:08:88:c4:2c: 2b:c0:68:47:46:b2:5a:b9:30:6e:84:38:e2:ea:bc: 63:b9:b0:4a:ca:8e:2c:7f:a8:47:1a:4f:d0:e1:ec: 72:2b:1c:7c:8e:c2:f9:45:18:e0:a8:ff:33:71:7a: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A0:E7:08:54:E2:56:2B:A4:12:0C:B9:CC:D0:AD:63:B3:7C:5C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fd144871-bdad-3ee3-b9b4-457847268a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:71:ed:3b:5d:94:8c:c8:5d:2e:c0:14:ae:66:d6:f5:a0:41: 13:df:a8:c0:da:58:82:45:78:38:ce:14:9c:a1:05:da:db:aa: dc:39:74:e0:bd:e4:13:4c:19:34:88:06:8b:61:e1:ea:66:2b: 2a:3c:ea:31:bb:45:7d:71:65:cc:18:b8:0f:40:37:df:16:e6: 37:28:ec:dd:8a:fb:8c:5f:29:af:35:73:7f:76:5b:6f:c0:82: 44:4d:94:18:74:e3:98:cc:5c:9e:5d:0e:a0:a5:49:14:a9:63: ae:b4:8a:21:42:2a:94:50:a4:f9:ee:3e:4e:db:5f:58:8b:2b: ca:d4:ee:22:84:67:c2:d6:69:78:2d:86:09:6c:38:79:26:62: 9a:86:08:35:98:af:25:17:0b:b5:ce:19:63:09:3d:52:64:7e: ed:8b:be:62:b0:7f:f6:fe:be:1a:f7:de:ed:5a:a7:28:0b:ed: 9b:b4:4b:ed:93:24:62:fb:c7:f4:9b:22:20:c8:0f:2b:4d:0c: 8c:3c:8c:bf:05:9d:15:05:c7:f4:01:ed:66:2f:b7:88:9f:be: 8f:b4:98:9e:9d:d8:ab:27:aa:b2:68:b1:33:5d:de:8a:04:6a: c3:8c:49:2a:62:aa:1f:44:a9:8f:d0:d1:bd:ce:3c:c7:d2:aa: 43:c5:75:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlIadNd/cFpY5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWUyYzk4M2QtYzhmZC00ZDY1LTllZjgtNTQzZTU3ODdkMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnohMIbAxiI1siEblWoH8bJoJpU8S4mkze7b uGEqL8aMsbBiLKLPtxm5JNr7mLMnkRu8ez2zZ7vW5qWm9NHsrTO6mP+aXsCQ/OMU siAzL/yIcyXGbFsq+eIKxFNSbLx7rmdW5Jod8ZqtbTvOXpQSeGhvBkku9YARkGVC fQ64mAqTYhRkBrr/tyWWV0A3UpAyU1apbOqn0jiPYJ3MrFVxlb62smFCWZPfbvJs 4mcvFplWisgVGPsBLXRkcw8brEofW31JK8jvy1ZWIlPragiIxCwrwGhHRrJauTBu hDji6rxjubBKyo4sf6hHGk/Q4exyKxx8jsL5RRjgqP8zcXq2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOg5whU4lYrpBIMuczQrWOzfFyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmQxNDQ4NzEtYmRhZC0z ZWUzLWI5YjQtNDU3ODQ3MjY4YTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENx7TtdlIzIXS7AFK5m1vWgQRPfqMDaWIJFeDjOFJyhBdrbqtw5dOC9 5BNMGTSIBoth4epmKyo86jG7RX1xZcwYuA9AN98W5jco7N2K+4xfKa81c392W2/A gkRNlBh045jMXJ5dDqClSRSpY660iiFCKpRQpPnuPk7bX1iLK8rU7iKEZ8LWaXgt hglsOHkmYpqGCDWYryUXC7XOGWMJPVJkfu2LvmKwf/b+vhr33u1apygL7Zu0S+2T JGL7x/SbIiDIDytNDIw8jL8FnRUFx/QB7WYvt4ifvo+0mJ6d2KsnqrJosTNd3ooE asOMSSpiqh9EqY/Q0b3OPMfSqkPFdZ0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:33 2026 by rpki-client