$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa File: bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa (raw, json) Hash identifier: 6WB9zRx6fx4l6yiSDJasACUK6u/2OQRVYtDcuw0lm+I= Subject key identifier: DB:20:13:B2:D9:AB:6F:56:28:66:75:18:4C:EF:CE:19:CC:3E:A5:ED Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF210A79CC2BB350CE1E73380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.132.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:a7:9c:c2:bb:35:0c:e1:e7:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=6796a9bf-4961-40a4-b054-0bc08a436257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:16:66:10:a7:ee:ce:ab:b0:7c:dd:fd:90: 6b:7a:46:cc:5c:16:af:a7:8c:b4:16:19:41:5f:6f: b7:c8:e7:58:47:d4:96:f5:1d:94:51:3a:1e:14:21: 5f:27:b0:26:e4:00:5e:65:7a:fd:38:c5:95:5b:4e: 4c:8c:dd:db:53:17:c7:f7:19:75:78:7f:40:52:37: 63:54:9c:fa:c7:d0:f6:09:87:1a:a8:6b:06:15:b6: 4c:10:04:f8:18:0a:23:67:ad:34:e2:08:af:2f:1e: 61:bc:10:89:74:0a:94:9b:cd:d2:2d:c3:c8:0e:96: 18:36:42:7f:e0:ec:03:96:74:36:fb:af:a5:c8:1d: c4:8e:88:9f:1a:f8:2e:34:49:4a:7e:c6:05:fc:9b: 97:bf:52:e6:3c:ea:8b:d1:81:ea:6a:bf:c7:91:89: 09:d9:7c:98:84:12:5d:fc:af:8d:7c:d5:d2:7e:ee: f8:2d:27:9e:2e:e6:7d:83:f1:ff:f6:e9:30:8b:0a: dd:75:32:48:d0:e9:e3:82:90:8a:37:d6:1c:c0:0d: 52:01:92:1d:e0:4d:2b:1d:31:3a:1a:31:0b:e7:12: 9d:d5:94:2c:69:9d:84:3d:27:d5:24:a1:07:a8:c3: 94:b2:45:b8:1e:d7:b1:ba:e0:0c:8b:ed:5f:ad:b6: 80:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:20:13:B2:D9:AB:6F:56:28:66:75:18:4C:EF:CE:19:CC:3E:A5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0a:55:ad:2b:dc:fa:a5:55:a3:dd:d3:8d:98:ea:7e:42:40: 98:be:f0:07:96:27:e8:c2:03:da:a4:3c:5f:35:70:cb:49:50: 1f:25:b6:91:c1:f5:37:71:a5:cb:f6:fa:32:f3:f6:29:67:31: f5:6a:d8:57:86:02:72:c2:97:91:f0:0e:1e:69:5d:49:0c:4e: e8:ac:cf:99:f6:59:65:25:bd:49:86:75:8e:9c:9d:70:42:d7: b6:3d:71:51:04:9e:a5:2e:0b:4f:9a:10:c7:17:14:3f:a8:82: 19:67:96:24:70:a2:49:3a:f7:ce:b8:33:cf:4f:47:56:a0:94: 98:45:75:17:13:5d:a6:eb:e5:f5:52:4c:13:5f:c1:51:1e:2c: 5f:5f:33:1c:eb:4d:9a:aa:0e:78:47:41:da:a6:29:61:b6:d1: c7:ad:22:89:c4:46:df:33:c6:4f:f5:59:5c:39:e3:47:f1:8a: 1a:86:3c:62:b5:24:e8:2b:28:d8:1c:41:8f:21:d3:d2:3e:ea: 1d:ec:2a:6b:9c:a3:f6:7c:0c:80:2a:70:28:6b:8d:1f:4b:8b: 64:7e:b9:f1:b7:cd:3d:92:5f:c1:11:57:12:f9:98:e0:74:6f: a8:8d:84:45:c4:11:7a:e0:af:a6:4d:58:0d:49:b8:a0:79:26: 7e:0f:75:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEKecwrs1DOHnM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk Njc5NmE5YmYtNDk2MS00MGE0LWIwNTQtMGJjMDhhNDM2MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB8WZhCn7s6rsHzd/ZBrekbMXBavp4y0FhlB X2+3yOdYR9SW9R2UUToeFCFfJ7Am5ABeZXr9OMWVW05MjN3bUxfH9xl1eH9AUjdj VJz6x9D2CYcaqGsGFbZMEAT4GAojZ6004givLx5hvBCJdAqUm83SLcPIDpYYNkJ/ 4OwDlnQ2+6+lyB3EjoifGvguNElKfsYF/JuXv1LmPOqL0YHqar/HkYkJ2XyYhBJd /K+NfNXSfu74LSeeLuZ9g/H/9ukwiwrddTJI0OnjgpCKN9YcwA1SAZId4E0rHTE6 GjEL5xKd1ZQsaZ2EPSfVJKEHqMOUskW4HtexuuAMi+1frbaAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsgE7LZq29WKGZ1GEzvzhnMPqXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmNlYjFjZDUtMWM4Yy0z ZDgyLWJlNGEtMDc3YTk3ZjU4YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIKVa0r3PqlVaPd042Y6n5CQJi+8AeWJ+jCA9qkPF81cMtJUB8ltpHB 9Tdxpcv2+jLz9ilnMfVq2FeGAnLCl5HwDh5pXUkMTuisz5n2WWUlvUmGdY6cnXBC 17Y9cVEEnqUuC0+aEMcXFD+oghlnliRwokk69864M89PR1aglJhFdRcTXabr5fVS TBNfwVEeLF9fMxzrTZqqDnhHQdqmKWG20cetIonERt8zxk/1WVw540fxihqGPGK1 JOgrKNgcQY8h09I+6h3sKmuco/Z8DIAqcChrjR9Li2R+ufG3zT2SX8ERVxL5mOB0 b6iNhEXEEXrgr6ZNWA1JuKB5Jn4Pdeg= -----END CERTIFICATE-----Generated at Fri Jun 12 08:30:33 2026 by rpki-client