$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/009bd559-8692-3aa4-b28b-c0cea02f3d3c.roa File: 009bd559-8692-3aa4-b28b-c0cea02f3d3c.roa (raw, json) Hash identifier: c6Xxa1rPQwqEIP1oQckYTik7xLxltqR8+LxOt3wcVVU= Subject key identifier: 13:95:6C:91:CA:21:A8:97:50:01:21:3E:FD:48:F8:DA:8F:93:5D:D7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117281152FEC07EC5536F600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/009bd559-8692-3aa4-b28b-c0cea02f3d3c.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:81:15:2f:ec:07:ec:55:36:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=dc9fa1e7-6c0e-499c-9d98-c1ba1645dc1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:0a:ec:5f:6e:01:5f:62:9d:3f:0d:f2:2b: 64:b0:e3:aa:cf:5a:11:07:eb:dc:0a:0b:4e:69:8a: a0:b9:5b:5a:43:11:98:70:3c:00:54:49:f6:2b:f0: 35:90:8e:3b:34:84:b5:1d:33:23:3a:75:64:fd:0c: 86:e7:63:33:a1:fc:64:df:ae:e3:3d:54:de:a4:a2: 0c:ad:49:0b:ba:8d:5e:46:10:03:58:66:00:06:bb: 8c:89:ab:9e:21:a8:45:71:09:4e:b7:59:68:60:34: 37:fa:48:9b:6d:47:f2:80:33:3d:5a:dc:16:9a:d9: 42:70:d1:76:74:16:26:11:41:30:07:b1:7c:a8:fc: 3e:fd:f2:17:b0:b4:cc:2e:6d:71:78:aa:61:29:82: d2:bb:ec:94:1e:72:77:4d:c4:d6:76:3b:cc:3e:f8: 03:fd:5f:0b:76:c1:8e:a3:d5:d5:9e:9f:71:1f:5a: a6:55:0c:3c:c0:fc:36:11:3e:02:18:4b:e3:96:3d: bb:e9:01:32:ee:36:e8:8e:6f:63:f3:4a:4e:c4:cd: fa:1f:0a:48:8d:15:ea:1b:e0:ff:b9:c3:60:a2:39: 81:95:8b:8a:ca:b9:a4:84:d7:81:f4:3d:b7:8b:2f: f6:93:f0:58:ec:dd:35:c6:d2:6b:de:21:08:d2:fc: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:95:6C:91:CA:21:A8:97:50:01:21:3E:FD:48:F8:DA:8F:93:5D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/009bd559-8692-3aa4-b28b-c0cea02f3d3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:78:e6:c7:3b:a4:df:9c:9b:c6:60:6c:82:ac:b3:8d:53:02: e6:0f:17:e6:00:90:50:84:e1:a9:ae:d2:93:3b:0f:a2:b4:28: 15:58:46:1e:8a:69:5e:da:9f:7b:92:a7:c3:9c:06:57:72:f0: f4:f2:28:23:27:25:f6:70:01:82:01:0e:f7:cc:c1:2c:8a:1b: c2:5e:0c:e6:e1:78:16:99:67:e2:5a:56:58:f6:d4:9b:98:04: 60:2c:4c:0c:18:24:5e:b2:1d:3a:8f:28:f6:15:72:b3:f8:4c: 02:d2:00:22:96:23:2e:3a:25:f3:d5:dc:cd:4a:8b:88:c3:a9: f0:a5:5d:bd:46:98:c8:55:ba:3a:5b:77:f5:bd:10:13:d3:5c: 30:27:48:da:30:db:37:e5:a5:bf:e5:79:f7:6b:f2:83:5d:16: 9b:42:21:02:17:c2:7c:8d:7f:e9:bb:d9:8c:88:70:63:cc:d3: 69:cb:96:19:25:45:7a:92:4a:4b:c2:9f:45:37:fe:6b:a3:62: c9:5b:c7:4b:8d:17:62:bf:35:d2:60:cf:9f:1c:7f:6d:95:7e: 36:42:d6:0e:2c:8e:94:58:ae:df:25:03:a7:33:2b:bc:c2:04: 41:2c:67:2f:a9:1c:24:fb:87:9c:66:d5:a1:61:53:c8:cd:b8: 50:f8:ea:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoEVL+wH7FU29gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZGM5ZmExZTctNmMwZS00OTljLTlkOTgtYzFiYTE2NDVkYzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZUK7F9uAV9inT8N8itksOOqz1oRB+vcCgtO aYqguVtaQxGYcDwAVEn2K/A1kI47NIS1HTMjOnVk/QyG52Mzofxk367jPVTepKIM rUkLuo1eRhADWGYABruMiaueIahFcQlOt1loYDQ3+kibbUfygDM9WtwWmtlCcNF2 dBYmEUEwB7F8qPw+/fIXsLTMLm1xeKphKYLSu+yUHnJ3TcTWdjvMPvgD/V8LdsGO o9XVnp9xH1qmVQw8wPw2ET4CGEvjlj276QEy7jbojm9j80pOxM36HwpIjRXqG+D/ ucNgojmBlYuKyrmkhNeB9D23iy/2k/BY7N01xtJr3iEI0vzndQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOVbJHKIaiXUAEhPv1I+NqPk13XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDA5YmQ1NTktODY5Mi0z YWE0LWIyOGItYzBjZWEwMmYzZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB45sc7pN+cm8ZgbIKss41TAuYPF+YAkFCE4amu0pM7D6K0KBVYRh6K aV7an3uSp8OcBldy8PTyKCMnJfZwAYIBDvfMwSyKG8JeDObheBaZZ+JaVlj21JuY BGAsTAwYJF6yHTqPKPYVcrP4TALSACKWIy46JfPV3M1Ki4jDqfClXb1GmMhVujpb d/W9EBPTXDAnSNow2zflpb/lefdr8oNdFptCIQIXwnyNf+m72YyIcGPM02nLlhkl RXqSSkvCn0U3/mujYslbx0uNF2K/NdJgz58cf22VfjZC1g4sjpRYrt8lA6czK7zC BEEsZy+pHCT7h5xm1aFhU8jNuFD46vI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:59 2026 by rpki-client