$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa File: cf005a1e-cc33-32b3-8191-49c75f69f07b.roa (raw, json) Hash identifier: rAfqZlQHpNmS5bOdaJAiXlZ/NQdnEtIhlira3j8eCvU= Subject key identifier: 04:83:0B:91:AC:75:95:B2:FB:D5:64:BF:09:49:D2:9E:75:C7:5B:57 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB6D73589430954C308780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:6d:73:58:94:30:95:4c:30:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=e2d4e67e-14c5-43bb-8c76-d445246afbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:52:54:28:96:7e:b5:52:1d:5a:80:c4:f7:ec: 58:97:aa:81:d1:bd:b4:b1:0d:1e:b9:f1:bc:a0:cd: d2:e4:e9:b2:d3:bb:0e:05:1d:75:6e:06:00:fd:e6: d2:f8:19:25:8f:d8:90:15:74:15:13:a7:65:59:23: 23:63:1b:86:c6:ad:bd:95:0d:b8:51:9a:39:a7:a4: 41:9e:58:c7:69:00:10:37:14:6b:27:92:fa:94:9e: 03:b1:09:71:9c:8f:38:9a:42:69:e5:5f:e0:95:cc: e3:17:6c:2f:b5:04:63:f9:69:52:87:b0:82:ff:9d: a5:33:d9:0e:d2:1c:d6:16:f7:c7:6d:eb:9d:4b:3d: 3b:f3:7a:0b:40:05:6f:ad:a2:60:ae:be:9c:c9:1f: 85:71:ea:ba:be:8c:7d:03:31:f5:16:56:a4:24:f9: 37:40:79:09:33:05:62:53:65:c8:53:8d:17:17:f1: f4:f4:e5:c3:2e:18:49:fa:64:cd:a7:6a:cb:fd:f6: 89:ca:2e:42:e6:bf:b2:f3:33:be:9c:17:2a:c5:b4: eb:90:f8:21:fc:37:ca:f7:c1:2e:81:58:26:a0:38: b3:90:d2:e6:cc:bf:77:39:18:71:1a:a1:c8:54:e5: 51:41:a9:85:48:99:bd:86:49:20:2a:29:4c:de:d5: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:83:0B:91:AC:75:95:B2:FB:D5:64:BF:09:49:D2:9E:75:C7:5B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:61:96:ac:9b:b6:dd:88:fb:96:81:7e:9a:d2:01:df:9f:c0: de:2e:0a:ed:34:65:59:6c:24:05:e9:01:2d:de:c8:ff:75:1f: ce:ef:3d:86:37:d6:d1:4f:0b:00:75:4b:58:4f:09:c2:eb:91: c1:f8:6b:b2:40:c2:9d:1e:12:c7:9c:1e:0f:91:89:e3:2f:a9: 57:5f:9f:bc:47:5c:13:8a:46:76:d9:c0:58:63:77:84:97:6f: 50:3b:10:15:3f:b6:2b:03:b8:cf:a3:bf:56:b1:66:2d:17:71: a6:57:d4:37:67:71:f9:b7:32:2e:11:b9:e6:b3:1c:c0:d0:d7: 2a:e0:96:50:86:fa:54:b0:c3:ca:8b:b1:6d:54:c8:16:fe:cc: 02:6e:8e:b1:3d:38:27:ae:23:b1:49:9c:f7:36:27:fe:c0:73: 45:f5:c7:34:92:2b:dc:db:2d:ee:46:e8:e1:d2:86:6a:15:0d: 4b:11:a6:db:24:b2:d6:30:ac:30:64:63:49:2d:29:01:e5:8c: 51:b1:c9:26:71:3a:24:48:19:02:e6:86:55:07:cc:37:16:30: 27:a5:b0:bd:73:93:2a:86:b1:d6:3e:cb:76:83:26:d2:8b:71: ab:2e:b6:5e:35:e7:64:5d:c6:5d:c4:5b:2f:51:ee:23:79:a8: 97:5b:0f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30221zWJQwlUwwh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTJkNGU2N2UtMTRjNS00M2JiLThjNzYtZDQ0NTI0NmFmYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1JUKJZ+tVIdWoDE9+xYl6qB0b20sQ0eufG8 oM3S5Omy07sOBR11bgYA/ebS+Bklj9iQFXQVE6dlWSMjYxuGxq29lQ24UZo5p6RB nljHaQAQNxRrJ5L6lJ4DsQlxnI84mkJp5V/glczjF2wvtQRj+WlSh7CC/52lM9kO 0hzWFvfHbeudSz0783oLQAVvraJgrr6cyR+Fceq6vox9AzH1FlakJPk3QHkJMwVi U2XIU40XF/H09OXDLhhJ+mTNp2rL/faJyi5C5r+y8zO+nBcqxbTrkPgh/DfK98Eu gVgmoDizkNLmzL93ORhxGqHIVOVRQamFSJm9hkkgKilM3tUpEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASDC5GsdZWy+9VkvwlJ0p51x1tXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YwMDVhMWUtY2MzMy0z MmIzLTgxOTEtNDljNzVmNjlmMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1hlqybtt2I+5aBfprSAd+fwN4uCu00ZVlsJAXpAS3eyP91H87vPYY3 1tFPCwB1S1hPCcLrkcH4a7JAwp0eEsecHg+RieMvqVdfn7xHXBOKRnbZwFhjd4SX b1A7EBU/tisDuM+jv1axZi0XcaZX1Ddncfm3Mi4RueazHMDQ1yrgllCG+lSww8qL sW1UyBb+zAJujrE9OCeuI7FJnPc2J/7Ac0X1xzSSK9zbLe5G6OHShmoVDUsRptsk stYwrDBkY0ktKQHljFGxySZxOiRIGQLmhlUHzDcWMCelsL1zkyqGsdY+y3aDJtKL casutl4152Rdxl3EWy9R7iN5qJdbD0s= -----END CERTIFICATE-----Generated at Fri Jun 12 08:30:53 2026 by rpki-client