$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa File: ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa (raw, json) Hash identifier: bnA1lPnygmTEHXL3P3l4gvMNpYyq8K7QiS7Nz+V4GgY= Subject key identifier: A1:A1:EE:83:19:A6:D1:BB:D2:DC:62:E6:DD:19:AA:A3:F0:16:56:BE Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584CD407735E19D11138EADDE280 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 393653 IP address blocks: 104.128.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:73:5e:19:d1:11:38:ea:dd:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=1d6eaf5c-34bf-4005-9524-c57da634c11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:17:d3:1f:e9:44:37:74:5e:58:f4:af:e0: 5f:b1:86:67:3f:e7:55:0f:fd:e1:25:51:6c:ae:97: 6a:cc:7b:b6:b6:98:ce:16:d6:18:57:8b:9a:0a:0b: 42:91:cd:02:2f:f3:3a:04:be:a6:b8:b6:83:0f:69: 1e:01:9c:67:b4:ed:57:fc:f3:6d:59:b9:79:cd:3d: af:d4:ec:6b:b0:19:1d:b8:a2:0c:22:1e:18:a2:0e: 3a:7c:aa:09:69:1d:57:a0:50:4a:fb:bd:98:da:3c: bc:40:cd:ea:6a:b1:62:3d:f3:4d:8a:81:dd:47:59: b0:fe:1d:33:76:d0:53:a7:30:21:13:52:1e:05:26: 21:56:0a:82:bd:93:d4:fb:de:ea:77:d2:65:c5:b8: 38:92:3f:02:9e:d4:8f:71:06:47:88:2f:c7:39:6c: 3c:87:ab:f8:1a:44:db:1f:ed:3e:a9:12:18:a5:47: 21:c6:35:ac:fa:ca:67:0d:e8:18:f0:78:40:23:5c: f2:5a:d5:be:0b:59:da:28:2c:4e:97:30:a4:16:90: eb:ba:be:f2:4e:f3:2f:a6:66:49:25:1f:9e:6f:4a: 92:ed:ac:02:84:4c:42:b4:79:05:b8:fa:24:a9:67: 6c:ac:64:ba:66:3b:c2:a3:cf:68:c0:0a:cc:9b:d8: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A1:EE:83:19:A6:D1:BB:D2:DC:62:E6:DD:19:AA:A3:F0:16:56:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ec:c5:92:c5:17:ca:83:2f:50:3b:9b:9f:5a:18:49:db:58: 52:4e:16:08:d3:ad:b0:c5:23:a4:77:fd:ba:8e:92:0f:ad:d3: 7d:72:42:04:df:51:0b:3e:51:57:ba:4b:c0:95:14:89:fd:15: ca:f4:9a:f0:c6:05:cd:d5:e8:da:39:2c:29:63:e2:a7:7f:66: 98:d6:39:ee:5a:df:25:de:b4:67:bb:be:d9:dc:43:04:35:a8: 0e:0f:a1:1e:6f:5a:da:48:a8:06:bd:3e:d4:fd:f7:bb:81:f7: f7:82:bb:4a:14:58:83:e4:be:a2:5b:65:b7:cc:68:dc:fc:65: bc:f2:d0:6f:8b:5e:2c:11:9a:ed:da:bd:92:6b:6c:84:df:a3: 82:6a:1a:1d:ae:70:c4:c0:61:54:58:60:00:e6:63:b2:7e:43: 12:98:19:3b:68:df:2f:cd:d6:28:25:fd:92:e2:f6:23:af:c2: 4d:89:50:42:b6:b5:b3:da:59:f9:e5:08:71:2c:ee:6b:97:1c: 85:4a:ca:a2:cd:c2:f2:4f:74:68:67:ae:d6:3e:ce:11:1e:c3: d6:70:91:b0:68:84:e8:41:18:a7:5f:9e:b8:b8:9e:37:4b:c7: c7:ea:8d:59:a6:39:83:b1:00:d0:1d:1b:c4:35:6f:93:70:27: 8a:21:7a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB3NeGdEROOrd4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk MWQ2ZWFmNWMtMzRiZi00MDA1LTk1MjQtYzU3ZGE2MzRjMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a4X0x/pRDd0Xlj0r+BfsYZnP+dVD/3hJVFs rpdqzHu2tpjOFtYYV4uaCgtCkc0CL/M6BL6muLaDD2keAZxntO1X/PNtWbl5zT2v 1OxrsBkduKIMIh4Yog46fKoJaR1XoFBK+72Y2jy8QM3qarFiPfNNioHdR1mw/h0z dtBTpzAhE1IeBSYhVgqCvZPU+97qd9Jlxbg4kj8CntSPcQZHiC/HOWw8h6v4GkTb H+0+qRIYpUchxjWs+spnDegY8HhAI1zyWtW+C1naKCxOlzCkFpDrur7yTvMvpmZJ JR+eb0qS7awChExCtHkFuPokqWdsrGS6ZjvCo89owArMm9jpKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGh7oMZptG70txi5t0ZqqPwFla+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvZWJiYWI4Y2EtNTYzZi0z N2RlLWEyMjktMmZhZDFmNWZlMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLsxZLFF8qDL1A7m59aGEnbWFJOFgjTrbDFI6R3/bqOkg+t031yQgTf UQs+UVe6S8CVFIn9Fcr0mvDGBc3V6No5LClj4qd/ZpjWOe5a3yXetGe7vtncQwQ1 qA4PoR5vWtpIqAa9PtT997uB9/eCu0oUWIPkvqJbZbfMaNz8Zbzy0G+LXiwRmu3a vZJrbITfo4JqGh2ucMTAYVRYYADmY7J+QxKYGTto3y/N1igl/ZLi9iOvwk2JUEK2 tbPaWfnlCHEs7muXHIVKyqLNwvJPdGhnrtY+zhEew9ZwkbBohOhBGKdfnri4njdL x8fqjVmmOYOxANAdG8Q1b5NwJ4ohekQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:16 2026 by rpki-client