$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa File: ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa (raw, json) Hash identifier: K4wKfOg531xIbDHepIz2T/kV+sOEjTmwaBbZWvjTmXM= Subject key identifier: B6:BA:87:0A:A8:03:6C:C4:8E:62:22:C9:EB:F5:91:EF:D6:37:0E:87 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB6F63ECBB5EA446FBD180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:6f:63:ec:bb:5e:a4:46:fb:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=064dd145-65e8-41ac-b573-bef663b3f21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:3a:a5:9f:d3:e9:8c:6a:30:de:2e:df:a4: 27:f5:36:ba:3f:1c:e2:78:2e:40:24:70:1f:82:d5: 9a:43:e4:29:fa:ed:08:f6:23:31:49:9c:30:4b:c6: fd:1f:be:73:5a:b9:b1:8b:62:79:e6:f8:e7:c2:7f: 44:88:8a:c4:dd:ff:2c:ce:d0:15:a0:31:3c:c7:d7: 65:ae:30:7d:ea:6f:36:58:a3:18:d1:91:9a:3e:e0: 98:ce:bf:81:2e:c7:8b:a3:85:d6:1b:41:83:31:c3: 6f:d2:a9:77:9f:fa:6a:de:0f:24:50:89:fa:b9:a8: 67:7e:9f:7c:23:ba:b4:34:63:78:96:e5:51:ae:29: dd:5f:6d:11:cd:9d:af:15:54:0b:b5:59:03:d0:72: c5:38:ee:14:ed:51:52:3b:e7:e6:32:94:db:a3:c0: b2:8e:2b:24:a5:b2:12:bb:16:23:bd:8e:07:e2:6c: 47:13:5a:fd:6a:7f:26:94:5a:45:cf:40:95:3b:64: 07:cc:1f:29:32:82:af:af:14:a6:0e:6d:61:60:da: d3:46:69:2b:eb:6a:33:70:f8:a2:f4:16:8b:d5:9f: 39:28:6f:54:01:f6:7f:bc:29:cb:24:b6:ae:c9:f2: c6:1c:74:1e:67:49:de:9d:2b:d1:d7:da:ff:d7:92: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BA:87:0A:A8:03:6C:C4:8E:62:22:C9:EB:F5:91:EF:D6:37:0E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:47:24:b6:87:55:a9:2a:c1:98:9a:04:95:28:79:df:ce:c2: 5c:a9:6e:e9:40:4b:15:99:ab:3f:ea:bb:b9:5d:ea:1d:20:7f: e1:05:5a:62:ea:a0:65:70:63:10:57:bf:8d:a9:1c:51:70:0f: ae:6f:d7:81:a2:2b:d3:87:7c:d8:19:03:6c:7a:c7:a5:55:14: dc:eb:a5:97:f7:de:eb:94:af:15:0c:4f:de:81:af:3e:74:5c: 90:39:db:0a:19:35:c1:65:fc:1d:f2:7e:ae:d3:b3:0f:d1:e1: 1c:bf:01:aa:61:a5:fd:7b:f9:08:77:f9:21:bb:ee:43:e3:cb: fb:9e:7a:62:0b:7f:c7:26:d5:b1:04:4b:62:74:df:72:22:08: 13:86:c0:04:f7:c8:03:86:05:45:d4:4f:c1:84:52:6d:e1:de: af:9c:fe:ba:37:d4:2c:dc:2b:d7:44:a7:b3:cb:5a:40:eb:60: 50:a2:60:36:82:b0:d7:43:83:87:ae:25:f2:18:f2:aa:8e:d2: b9:0d:72:f1:21:1e:c1:da:b9:ee:8f:48:68:e0:c7:78:2b:72: 84:1c:40:d8:c0:aa:33:ce:70:96:d0:88:96:f5:ef:0d:07:2d: e2:b7:78:b3:15:8e:71:bd:5d:a2:7f:65:c5:79:72:e1:6c:d3: c9:d5:aa:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30229j7LtepEb70YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MDY0ZGQxNDUtNjVlOC00MWFjLWI1NzMtYmVmNjYzYjNmMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD46pZ/T6YxqMN4u36Qn9Ta6PxzieC5AJHAf gtWaQ+Qp+u0I9iMxSZwwS8b9H75zWrmxi2J55vjnwn9EiIrE3f8sztAVoDE8x9dl rjB96m82WKMY0ZGaPuCYzr+BLseLo4XWG0GDMcNv0ql3n/pq3g8kUIn6uahnfp98 I7q0NGN4luVRrindX20RzZ2vFVQLtVkD0HLFOO4U7VFSO+fmMpTbo8CyjiskpbIS uxYjvY4H4mxHE1r9an8mlFpFz0CVO2QHzB8pMoKvrxSmDm1hYNrTRmkr62ozcPii 9BaL1Z85KG9UAfZ/vCnLJLauyfLGHHQeZ0nenSvR19r/15KK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa6hwqoA2zEjmIiyev1ke/WNw6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWNhYWJlYTEtZTUwMC0z ZTk2LTljNDYtMGRjMGI5ZmU5N2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBHJLaHVakqwZiaBJUoed/OwlypbulASxWZqz/qu7ld6h0gf+EFWmLq oGVwYxBXv42pHFFwD65v14GiK9OHfNgZA2x6x6VVFNzrpZf33uuUrxUMT96Brz50 XJA52woZNcFl/B3yfq7Tsw/R4Ry/Aaphpf17+Qh3+SG77kPjy/ueemILf8cm1bEE S2J033IiCBOGwAT3yAOGBUXUT8GEUm3h3q+c/ro31CzcK9dEp7PLWkDrYFCiYDaC sNdDg4euJfIY8qqO0rkNcvEhHsHaue6PSGjgx3grcoQcQNjAqjPOcJbQiJb17w0H LeK3eLMVjnG9XaJ/ZcV5cuFs08nVqkQ= -----END CERTIFICATE-----Generated at Fri Jun 12 08:29:42 2026 by rpki-client