$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa File: 41a42974-c911-39db-a56f-b1d69a819cf5.roa (raw, json) Hash identifier: 2XKqp+TAyjkms1Xw9pbAYKzbUyD9fwNwma2G5q8ulZ4= Subject key identifier: 67:8C:F9:14:51:9B:90:C7:B8:56:C4:C6:D1:12:D8:D7:64:2A:F0:A9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB6E1822D8715132BEB7A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:6e:18:22:d8:71:51:32:be:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=b2d28f2d-4320-4cf1-b0c3-b326a50219b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:cc:21:21:76:a9:9a:29:20:66:c1:14:2e: 8f:2d:e5:16:9f:18:4b:b8:50:e2:56:fa:44:c3:c9: 22:91:b3:c7:78:fc:a6:91:05:43:45:7a:35:e1:1d: 71:53:b8:86:e0:1f:55:96:b5:5e:69:18:5d:a5:7a: 54:c3:78:de:a3:68:f6:8b:02:b4:8a:96:44:b6:af: a9:34:47:55:f3:5a:f9:86:33:57:c1:5e:aa:fb:a2: 96:bb:6b:ab:92:68:f2:e8:a4:c0:e6:33:e8:1d:c8: c1:75:87:2c:87:46:b7:cc:38:bf:9c:5b:60:70:71: a5:29:71:3d:8e:03:13:30:a9:86:3a:3f:ca:20:19: 62:e3:dc:42:b3:26:8f:92:4b:0b:69:5c:32:57:20: 74:14:10:4c:55:7c:b9:70:0d:a3:9b:97:2a:c4:4b: 78:56:25:53:93:35:06:a8:85:fb:65:69:87:c0:30: bb:32:77:e9:45:7f:b2:d1:bd:01:9c:ed:08:f2:6a: 70:13:87:9f:08:a3:ba:45:4f:ed:50:df:a9:61:09: 7e:37:a8:33:3e:02:2e:d4:ca:99:2b:0c:c8:cf:c5: 88:04:0d:65:a1:08:06:a1:38:ac:b9:74:50:59:6b: 71:4e:68:3a:db:7f:f1:31:6a:13:ba:32:91:d9:b3: 4e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8C:F9:14:51:9B:90:C7:B8:56:C4:C6:D1:12:D8:D7:64:2A:F0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4c:e8:6f:1b:0b:a8:46:f4:ad:06:43:b6:65:cf:25:12:ec: a8:1d:fc:be:a6:d2:91:00:6a:b7:2b:67:48:1b:38:41:df:e2: 3c:94:a0:3f:b1:74:3a:22:54:4b:12:f8:bc:4f:be:fe:96:e2: e1:b5:54:f3:5f:1c:75:4c:3a:bd:f3:97:81:5d:fb:6f:c5:ce: 2e:86:bb:29:ca:62:8b:aa:60:51:69:d2:13:48:76:ad:fc:0d: 48:31:57:95:df:0d:48:a1:9f:10:54:ea:9b:72:c3:b3:d7:af: ca:bf:3a:55:ed:b2:cc:16:46:96:b7:f4:00:b8:3b:64:8c:4a: d7:7d:19:1b:cd:f2:11:2d:1f:bb:14:65:5b:de:23:96:0f:e2: 61:fa:c5:69:ae:2f:73:8b:ae:6d:2e:74:b2:89:3a:4b:a9:32: f0:ac:e7:4d:ea:22:a3:1b:0f:66:c1:41:c1:75:30:26:04:61: 5c:2e:7f:06:d9:0e:30:82:08:58:73:85:1d:66:6e:71:51:8d: b2:de:85:33:81:72:f6:8b:17:35:24:a3:8e:9b:95:5f:7f:c1: 96:5a:91:7a:41:31:98:90:85:8c:69:35:f6:09:15:3d:16:42: 59:b6:99:3a:a6:06:38:3f:40:e7:c9:79:7e:fc:fb:36:92:4c: f3:94:f6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30224YIthxUTK+t6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjJkMjhmMmQtNDMyMC00Y2YxLWIwYzMtYjMyNmE1MDIxOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP7MISF2qZopIGbBFC6PLeUWnxhLuFDiVvpE w8kikbPHePymkQVDRXo14R1xU7iG4B9VlrVeaRhdpXpUw3jeo2j2iwK0ipZEtq+p NEdV81r5hjNXwV6q+6KWu2urkmjy6KTA5jPoHcjBdYcsh0a3zDi/nFtgcHGlKXE9 jgMTMKmGOj/KIBli49xCsyaPkksLaVwyVyB0FBBMVXy5cA2jm5cqxEt4ViVTkzUG qIX7ZWmHwDC7MnfpRX+y0b0BnO0I8mpwE4efCKO6RU/tUN+pYQl+N6gzPgIu1MqZ KwzIz8WIBA1loQgGoTisuXRQWWtxTmg623/xMWoTujKR2bNObwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeM+RRRm5DHuFbExtES2NdkKvCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFhNDI5NzQtYzkxMS0z OWRiLWE1NmYtYjFkNjlhODE5Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApM6G8bC6hG9K0GQ7ZlzyUS7Kgd/L6m0pEAarcrZ0gbOEHf4jyUoD+x dDoiVEsS+LxPvv6W4uG1VPNfHHVMOr3zl4Fd+2/Fzi6GuynKYouqYFFp0hNIdq38 DUgxV5XfDUihnxBU6ptyw7PXr8q/OlXtsswWRpa39AC4O2SMStd9GRvN8hEtH7sU ZVveI5YP4mH6xWmuL3OLrm0udLKJOkupMvCs503qIqMbD2bBQcF1MCYEYVwufwbZ DjCCCFhzhR1mbnFRjbLehTOBcvaLFzUko46blV9/wZZakXpBMZiQhYxpNfYJFT0W Qlm2mTqmBjg/QOfJeX78+zaSTPOU9ss= -----END CERTIFICATE-----Generated at Fri Jun 12 08:33:01 2026 by rpki-client