$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa File: 16f0dc12-1d8d-394f-9b50-2a3247b35075.roa (raw, json) Hash identifier: bG0VpvKoi6zKG31ZlETeEGyQ8e/JJsQDnIILc+Anzc8= Subject key identifier: EC:DA:31:4C:DE:F9:B8:23:97:87:18:EE:14:C6:12:84:D1:66:11:8D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB6EF80582B54CBDAD9D40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:6e:f8:05:82:b5:4c:bd:ad:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=2e7e05ec-2993-49bc-bc37-524ea498385c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:31:c2:45:f4:18:c7:27:85:24:2a:ab:bd: 1c:d7:ef:fa:7e:1b:66:55:45:5d:20:65:23:b1:68: f7:80:dc:0d:27:cc:bb:a0:dc:d9:a1:d2:9a:97:01: 52:9d:75:27:7c:99:1b:4d:db:01:8f:96:bb:c3:6f: f7:b6:9f:0c:80:6e:ae:2b:d9:d5:0c:73:ea:60:11: d1:2b:19:c3:ae:ec:22:6c:43:fc:3c:17:1f:ba:18: 56:3f:38:5d:62:e8:9c:ec:7a:c0:da:75:ab:a5:30: 02:2b:4e:18:38:a1:c4:82:51:ca:ce:a0:29:0a:59: 80:0d:a4:a6:a1:58:c9:b8:ce:64:80:9a:d1:16:1e: fe:b1:5d:1e:8a:29:76:8a:52:12:23:14:65:ab:73: 91:52:9b:5e:b9:e0:4f:ac:18:63:8c:6c:dc:b7:7f: 51:c2:07:6e:67:eb:dd:5e:51:4e:1b:9d:9d:d4:cd: 20:9a:01:8f:41:ce:9e:1d:8b:d5:d0:ae:a3:91:f8: 69:8a:39:4b:e3:e7:f7:10:f9:1e:f4:53:fe:27:5e: 25:76:d7:8f:27:9e:e9:e8:b6:00:e0:58:d7:81:bb: cd:91:cf:f6:80:99:45:38:97:e6:e9:28:63:49:b2: 90:5c:60:38:3d:68:3c:36:aa:d2:dc:7f:61:f1:3d: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DA:31:4C:DE:F9:B8:23:97:87:18:EE:14:C6:12:84:D1:66:11:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16f0dc12-1d8d-394f-9b50-2a3247b35075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:15:ce:18:71:ce:17:45:9a:8a:a0:8b:b2:8b:69:f9:da:91: 07:e2:6c:8d:dd:37:40:58:43:c6:0c:8e:19:f9:7d:5a:52:69: 20:30:c8:ad:ec:dd:7a:49:ef:42:c0:78:e6:56:1d:21:cd:de: 33:4e:24:44:26:c0:1b:e5:de:6a:ac:b4:08:0d:dc:c5:ed:26: ea:e6:d0:31:79:1f:0d:12:e0:4c:b2:e0:db:b6:01:d1:cc:46: 76:67:d9:60:a3:5e:89:46:d3:43:74:b4:c6:58:1a:af:ab:a2: 71:d8:bc:43:d4:6a:03:fb:e3:cf:5f:9b:4f:b6:b1:96:fc:ba: f3:45:f9:c6:66:67:90:d2:07:8e:34:0b:e8:26:e0:e8:50:5d: 7b:ee:71:9b:b6:af:32:c0:b8:4a:1c:0c:42:6f:fc:72:ba:fd: 02:c3:b4:34:7d:e9:d3:90:24:79:e2:06:83:5a:10:d7:fd:78: 3d:7e:45:e3:27:0c:c5:b8:77:43:1c:ff:aa:15:10:33:4a:ec: 36:03:e4:fc:54:c5:e9:c5:d7:f8:17:89:26:b2:5b:6c:27:e9: 51:22:98:85:08:8c:ba:90:45:6b:db:6c:40:a7:ba:d5:4a:7d: 02:08:40:59:9d:48:31:8d:ba:33:dd:79:36:8a:72:bc:53:93: f7:c2:3a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE302274BYK1TL2tnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MmU3ZTA1ZWMtMjk5My00OWJjLWJjMzctNTI0ZWE0OTgzODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWgxwkX0GMcnhSQqq70c1+/6fhtmVUVdIGUj sWj3gNwNJ8y7oNzZodKalwFSnXUnfJkbTdsBj5a7w2/3tp8MgG6uK9nVDHPqYBHR KxnDruwibEP8PBcfuhhWPzhdYuic7HrA2nWrpTACK04YOKHEglHKzqApClmADaSm oVjJuM5kgJrRFh7+sV0eiil2ilISIxRlq3ORUpteueBPrBhjjGzct39RwgduZ+vd XlFOG52d1M0gmgGPQc6eHYvV0K6jkfhpijlL4+f3EPke9FP+J14ldtePJ57p6LYA 4FjXgbvNkc/2gJlFOJfm6ShjSbKQXGA4PWg8NqrS3H9h8T10+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzaMUze+bgjl4cY7hTGEoTRZhGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTZmMGRjMTItMWQ4ZC0z OTRmLTliNTAtMmEzMjQ3YjM1MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoVzhhxzhdFmoqgi7KLafnakQfibI3dN0BYQ8YMjhn5fVpSaSAwyK3s 3XpJ70LAeOZWHSHN3jNOJEQmwBvl3mqstAgN3MXtJurm0DF5Hw0S4Eyy4Nu2AdHM RnZn2WCjXolG00N0tMZYGq+ronHYvEPUagP7489fm0+2sZb8uvNF+cZmZ5DSB440 C+gm4OhQXXvucZu2rzLAuEocDEJv/HK6/QLDtDR96dOQJHniBoNaENf9eD1+ReMn DMW4d0Mc/6oVEDNK7DYD5PxUxenF1/gXiSayW2wn6VEimIUIjLqQRWvbbECnutVK fQIIQFmdSDGNujPdeTaKcrxTk/fCOoI= -----END CERTIFICATE-----Generated at Fri Jun 12 09:13:34 2026 by rpki-client