$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af3f7240-a8ba-3ae8-9089-1c565c75051a.roa File: af3f7240-a8ba-3ae8-9089-1c565c75051a.roa (raw, json) Hash identifier: XZ8XVcko9FlaenDwGWNMc1/974TypNcQtsI6J6XV770= Subject key identifier: D8:4E:B2:E5:66:8F:E2:9D:89:D0:DC:37:88:BB:1D:8E:96:71:7C:A0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D5884DC658D72EC59AF97C380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af3f7240-a8ba-3ae8-9089-1c565c75051a.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 15169 IP address blocks: 104.134.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:dc:65:8d:72:ec:59:af:97:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=d665a9df-b18a-4536-903f-81165b48d9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:ae:c7:7d:b0:75:f1:97:80:58:27:72:3c: 97:22:31:5f:ad:fb:f8:c9:d8:53:5d:96:bd:ba:66: ca:39:d9:87:31:2e:e7:57:72:a5:bd:8b:d6:ad:c1: 58:38:ce:ba:63:ac:dd:66:f4:ed:9b:d3:05:e9:d3: fb:e4:b0:58:12:4a:ec:02:ed:32:fc:57:1b:67:cf: a3:71:15:68:f1:96:4a:4c:0e:1a:5b:70:2f:9c:66: 9f:ca:87:00:3c:3a:76:b9:b8:b8:21:9c:87:0b:45: e1:c0:3f:09:dc:56:85:ec:14:40:28:70:f8:1d:06: 14:c7:ea:85:58:2d:44:1f:13:a9:46:93:4f:ec:0f: 51:99:5c:37:80:a7:e6:79:e6:05:4f:69:12:70:31: 8c:3f:3e:d5:d8:84:42:fc:60:77:0b:71:01:e0:a7: 3d:67:4e:31:74:8c:a0:72:b1:88:fe:69:31:52:c8: 99:24:4a:f9:37:dc:2e:17:1e:32:28:4d:46:d6:5e: 15:5f:87:7b:7e:83:4f:64:29:2a:31:af:27:ca:4c: 78:34:a5:49:4f:32:49:c1:ff:82:5c:43:bb:34:31: c2:e7:4f:ce:67:20:0b:e4:db:c9:a1:0c:a0:3a:f1: dd:17:c8:b6:d3:75:a7:05:8b:3e:94:50:1a:48:26: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4E:B2:E5:66:8F:E2:9D:89:D0:DC:37:88:BB:1D:8E:96:71:7C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/af3f7240-a8ba-3ae8-9089-1c565c75051a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a9:39:de:78:c6:de:5d:21:81:40:f2:8c:3d:93:4c:af:43: 0f:d6:d0:86:da:36:40:a6:d8:06:c1:78:6a:52:79:99:c1:59: 12:75:4a:ff:7f:e6:0c:1e:b4:3d:ba:dc:94:79:fe:1a:c8:a6: aa:e0:7f:3f:58:4e:f5:54:67:58:75:5a:76:18:c4:9e:3d:e1: f9:e0:1c:11:3a:5a:3a:f0:91:bc:ec:ec:92:c7:40:08:85:53: 3f:a3:f7:c5:f5:d4:21:80:90:d2:a2:ed:1f:ea:26:7d:7c:b1: c9:2a:08:9d:d0:6b:50:8d:e7:7c:61:c5:a0:b5:5a:e1:a0:28: b8:e8:dd:da:ae:98:4e:8e:04:33:f1:11:d6:c5:38:d0:77:38: d3:78:d1:95:ea:e9:59:c3:85:91:6a:f4:e7:1a:ca:ec:d0:9e: 52:da:73:a6:f7:1c:a0:95:f6:1c:4d:70:4f:07:4a:d9:e3:df: 84:1b:d8:d8:36:bb:b7:7d:b0:31:26:10:58:1f:03:ae:45:95: 6f:57:db:a4:eb:7a:5c:11:41:d9:28:8c:d0:57:c6:f1:41:ac: a4:d5:53:cc:e7:14:9f:9a:6b:e0:8d:74:8f:59:16:46:71:6e: bd:92:9b:1e:91:78:96:0b:4b:66:73:65:71:ef:a5:17:a6:ab: 2c:f1:33:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhNxljXLsWa+Xw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk ZDY2NWE5ZGYtYjE4YS00NTM2LTkwM2YtODExNjViNDhkOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FGux32wdfGXgFgncjyXIjFfrfv4ydhTXZa9 umbKOdmHMS7nV3KlvYvWrcFYOM66Y6zdZvTtm9MF6dP75LBYEkrsAu0y/FcbZ8+j cRVo8ZZKTA4aW3AvnGafyocAPDp2ubi4IZyHC0XhwD8J3FaF7BRAKHD4HQYUx+qF WC1EHxOpRpNP7A9RmVw3gKfmeeYFT2kScDGMPz7V2IRC/GB3C3EB4Kc9Z04xdIyg crGI/mkxUsiZJEr5N9wuFx4yKE1G1l4VX4d7foNPZCkqMa8nykx4NKVJTzJJwf+C XEO7NDHC50/OZyAL5NvJoQygOvHdF8i203WnBYs+lFAaSCYoZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhOsuVmj+KdidDcN4i7HY6WcXygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWYzZjcyNDAtYThiYS0z YWU4LTkwODktMWM1NjVjNzUwNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOpOd54xt5dIYFA8ow9k0yvQw/W0IbaNkCm2AbBeGpSeZnBWRJ1Sv9/ 5gwetD263JR5/hrIpqrgfz9YTvVUZ1h1WnYYxJ494fngHBE6Wjrwkbzs7JLHQAiF Uz+j98X11CGAkNKi7R/qJn18sckqCJ3Qa1CN53xhxaC1WuGgKLjo3dqumE6OBDPx EdbFONB3ONN40ZXq6VnDhZFq9OcayuzQnlLac6b3HKCV9hxNcE8HStnj34Qb2Ng2 u7d9sDEmEFgfA65FlW9X26TrelwRQdkojNBXxvFBrKTVU8znFJ+aa+CNdI9ZFkZx br2Smx6ReJYLS2ZzZXHvpRemqyzxMwg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:15 2026 by rpki-client