$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa File: 2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa (raw, json) Hash identifier: 0hZC4ohBRIy1Y9VA9eXQij20FOsu23Ia7sLqdRB5mRs= Subject key identifier: FD:0A:6D:45:22:4C:1F:36:F8:FE:1A:2F:EE:40:82:5C:90:9E:C0:1E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB689A7DC684EA65511A80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:68:9a:7d:c6:84:ea:65:51:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=e19bcaf0-9ed7-4d9f-9426-9d02d0b2ca11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:3c:c2:99:3d:6e:2f:2f:22:b5:3f:80:e1: cb:12:f0:9c:ca:48:41:a8:d5:8d:98:5a:e5:46:d3: c1:a3:08:80:b1:1f:07:69:dd:d4:89:2d:f9:44:49: da:d8:b0:1a:01:e3:d6:00:00:32:f7:91:a3:61:8c: d7:2c:25:d5:86:78:4c:da:2d:3e:69:0c:d6:59:83: e1:d0:de:03:00:aa:4a:ab:4c:b1:91:b7:5c:90:c7: 89:2a:13:c8:79:8e:4d:dd:38:0d:82:88:55:f1:f2: e2:d2:6e:44:dc:b1:94:84:e5:df:1f:6c:b8:e2:6c: 4d:c4:40:05:aa:18:cb:73:84:7c:92:5f:3e:46:3b: 36:63:4b:c8:1f:f5:cd:16:af:3b:5c:39:93:e5:b9: 2f:19:4c:ad:63:1b:74:94:7a:1c:95:01:86:31:1c: bb:01:28:5f:13:72:e1:c7:74:d4:94:14:c9:6e:90: a8:dc:49:90:31:ae:c0:ad:8e:2a:e8:9d:35:c8:49: bf:a6:bb:5a:75:66:da:d6:9d:f2:4f:be:3c:82:52: 16:9b:ab:d1:aa:1b:3f:f9:a4:53:a1:0d:7a:a0:87: 90:d5:17:cb:79:ad:76:48:fe:78:df:1c:2f:e3:47: 0b:1d:d3:47:31:a5:9c:7f:44:8a:28:ef:d9:2f:8d: 28:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0A:6D:45:22:4C:1F:36:F8:FE:1A:2F:EE:40:82:5C:90:9E:C0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:79:61:a6:5a:22:f7:b2:20:b4:08:73:ef:90:dc:55:20:7b: bc:f3:52:5c:d2:a7:a1:3e:a2:47:b1:da:19:35:43:14:5d:03: 9b:2d:10:ae:dd:25:09:0f:9f:be:3f:47:d0:31:b6:f1:7b:80: ad:fb:59:09:1d:3b:e7:68:56:5c:bf:2e:1b:61:f0:36:18:cc: 61:67:63:45:a8:66:1b:2e:64:2e:f3:ed:1d:dd:e5:c9:f2:9f: fe:97:ca:43:3d:f9:42:ec:68:20:6b:e7:94:a1:7c:6b:79:94: 10:9e:4f:d0:c6:48:07:cc:09:85:1c:f4:98:7d:42:ce:15:c7: 5c:31:91:f1:4b:28:bb:9c:bd:69:8f:25:12:66:f3:16:52:07: 5f:bd:24:df:3d:6d:72:8e:3e:78:41:b8:58:ab:a4:91:45:d2: 01:84:61:c2:90:e2:62:2b:ff:f0:b0:81:cd:79:7b:20:dc:8a: ad:0e:b7:6c:69:32:be:af:63:b5:69:03:19:45:13:71:b3:0f: 7c:c4:e6:c5:18:96:25:b7:06:a9:92:3a:08:51:e8:ba:27:b1: c0:97:03:c4:e7:85:fc:b4:cb:8c:3f:c4:3d:ba:a9:38:c6:06: ac:d9:81:ad:65:5c:2f:43:31:8d:d7:7e:46:8c:ac:e2:d2:be: 2a:59:db:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022iafcaE6mVRGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTE5YmNhZjAtOWVkNy00ZDlmLTk0MjYtOWQwMmQwYjJjYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkas8wpk9bi8vIrU/gOHLEvCcykhBqNWNmFrl RtPBowiAsR8Had3UiS35REna2LAaAePWAAAy95GjYYzXLCXVhnhM2i0+aQzWWYPh 0N4DAKpKq0yxkbdckMeJKhPIeY5N3TgNgohV8fLi0m5E3LGUhOXfH2y44mxNxEAF qhjLc4R8kl8+Rjs2Y0vIH/XNFq87XDmT5bkvGUytYxt0lHoclQGGMRy7AShfE3Lh x3TUlBTJbpCo3EmQMa7ArY4q6J01yEm/prtadWba1p3yT748glIWm6vRqhs/+aRT oQ16oIeQ1RfLea12SP543xwv40cLHdNHMaWcf0SKKO/ZL40oLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0KbUUiTB82+P4aL+5AglyQnsAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmJkOGQ2NjUtZWI2ZC0z YWQwLWI4ZDktOGEzNzUwMDM2MTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx5YaZaIveyILQIc++Q3FUge7zzUlzSp6E+okex2hk1QxRdA5stEK7d JQkPn74/R9AxtvF7gK37WQkdO+doVly/Lhth8DYYzGFnY0WoZhsuZC7z7R3d5cny n/6XykM9+ULsaCBr55ShfGt5lBCeT9DGSAfMCYUc9Jh9Qs4Vx1wxkfFLKLucvWmP JRJm8xZSB1+9JN89bXKOPnhBuFirpJFF0gGEYcKQ4mIr//Cwgc15eyDciq0Ot2xp Mr6vY7VpAxlFE3GzD3zE5sUYliW3BqmSOghR6LonscCXA8Tnhfy0y4w/xD26qTjG BqzZga1lXC9DMY3XfkaMrOLSvipZ2wk= -----END CERTIFICATE-----Generated at Fri Jun 12 08:30:36 2026 by rpki-client