$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa File: 88e9fd55-47e4-358a-863a-d86afd17b3b0.roa (raw, json) Hash identifier: IqjRWcDc/E/THcNsR/5kAfNOv2mCwh/LqV2JaxCuCwU= Subject key identifier: 70:72:42:E6:8E:EB:3C:EE:C9:67:41:83:00:93:C4:CA:0B:C7:10:0D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB6A474C115B834E95AA80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:6a:47:4c:11:5b:83:4e:95:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=18a80fc4-7f95-4310-be12-977201f2733e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:58:9d:1e:00:02:30:79:40:e9:72:c4:42: a5:99:2b:d1:0b:ee:67:6c:32:ab:97:25:84:2d:31: ed:20:f1:3c:ae:f6:50:2b:81:29:25:73:99:2d:45: de:77:cf:d0:00:57:9a:4c:51:69:d1:f4:5a:cf:22: c3:07:4f:33:b0:c8:dd:0a:c5:cb:1a:2e:0d:c8:aa: 03:8e:39:ca:b2:6f:86:27:26:6d:21:10:b8:ee:1e: 20:ba:f5:3d:30:4c:0b:05:4e:5c:49:4d:cf:bf:c6: db:ea:76:f6:79:44:64:c8:a9:d2:4c:67:d0:22:4b: 8e:d3:03:32:72:56:0d:7e:21:66:c8:21:31:eb:99: 88:6f:8a:71:fb:7b:97:0b:62:3b:5e:c7:ec:1a:92: e3:0e:7e:06:6a:41:9c:ef:ef:83:25:bd:10:4b:e1: 85:ce:ab:a8:e0:53:02:5d:98:e5:e2:74:fb:43:1c: d3:8d:1d:8c:97:16:29:c6:f8:5a:17:8d:f9:72:70: d1:00:ee:7a:88:88:da:73:eb:c6:74:a4:6a:d5:cf: 8c:15:da:45:32:bb:42:78:21:02:be:4f:19:bd:71: 41:26:3c:87:79:e8:06:6a:fe:61:99:97:7b:92:86: 17:81:b0:c5:58:7b:98:72:d0:1a:d5:91:ab:63:56: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:42:E6:8E:EB:3C:EE:C9:67:41:83:00:93:C4:CA:0B:C7:10:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:30:e9:e8:a9:7f:f4:7d:04:6c:9b:ce:6a:39:9b:86:7c:b0: fb:c8:27:15:10:14:12:46:6a:18:74:19:d9:d4:ed:27:de:00: a9:6a:39:8f:4f:a0:28:c0:58:02:48:ef:89:84:e5:ef:71:2e: 5e:13:34:24:12:01:45:03:5c:4a:4b:f8:6d:47:25:c4:c2:0c: f5:47:a2:aa:4e:4d:a3:14:ab:1b:83:d6:28:d4:ba:01:5d:c8: 7e:50:5a:07:78:b2:6c:e6:01:b2:8a:fa:cf:39:aa:03:b4:54: b9:92:38:a8:cc:b2:81:92:49:f0:b4:d1:ff:68:c5:29:07:03: 79:6e:12:d0:00:72:6e:57:69:81:6a:e9:90:2d:5e:98:d2:88: ae:49:fb:69:c1:10:4d:3b:b3:19:92:15:7d:dd:53:6d:22:ed: dc:c6:27:d3:98:45:3f:82:cd:a8:d0:a3:98:f1:4b:19:35:50: 62:96:fd:d3:fa:28:c5:fa:e5:f8:79:99:d9:c9:57:f2:af:48: 44:0e:e5:71:82:c8:9c:2a:3b:f1:a9:4d:1f:c3:27:f1:f3:fa: 53:12:f0:a1:69:75:45:10:fe:2d:06:39:76:0f:1c:55:db:f4: fc:2e:6a:8e:78:cf:40:ce:0a:55:63:bf:d9:d9:05:d7:0d:d3: e0:b2:1d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022pHTBFbg06VqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MThhODBmYzQtN2Y5NS00MzEwLWJlMTItOTc3MjAxZjI3MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugpYnR4AAjB5QOlyxEKlmSvRC+5nbDKrlyWE LTHtIPE8rvZQK4EpJXOZLUXed8/QAFeaTFFp0fRazyLDB08zsMjdCsXLGi4NyKoD jjnKsm+GJyZtIRC47h4guvU9MEwLBU5cSU3Pv8bb6nb2eURkyKnSTGfQIkuO0wMy clYNfiFmyCEx65mIb4px+3uXC2I7XsfsGpLjDn4GakGc7++DJb0QS+GFzquo4FMC XZjl4nT7QxzTjR2MlxYpxvhaF435cnDRAO56iIjac+vGdKRq1c+MFdpFMrtCeCEC vk8ZvXFBJjyHeegGav5hmZd7koYXgbDFWHuYctAa1ZGrY1YnowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHByQuaO6zzuyWdBgwCTxMoLxxANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODhlOWZkNTUtNDdlNC0z NThhLTg2M2EtZDg2YWZkMTdiM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUw6eipf/R9BGybzmo5m4Z8sPvIJxUQFBJGahh0GdnU7SfeAKlqOY9P oCjAWAJI74mE5e9xLl4TNCQSAUUDXEpL+G1HJcTCDPVHoqpOTaMUqxuD1ijUugFd yH5QWgd4smzmAbKK+s85qgO0VLmSOKjMsoGSSfC00f9oxSkHA3luEtAAcm5XaYFq 6ZAtXpjSiK5J+2nBEE07sxmSFX3dU20i7dzGJ9OYRT+CzajQo5jxSxk1UGKW/dP6 KMX65fh5mdnJV/KvSEQO5XGCyJwqO/GpTR/DJ/Hz+lMS8KFpdUUQ/i0GOXYPHFXb 9Pwuao54z0DOClVjv9nZBdcN0+CyHTQ= -----END CERTIFICATE-----Generated at Fri Jun 12 08:32:26 2026 by rpki-client