$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa File: 01620e47-da9e-39c7-a15b-342b4b54372f.roa (raw, json) Hash identifier: 1aC2+qwdTUPnAlHYOtWjNTBynnMI2tC64GeLfScmO7s= Subject key identifier: AA:FD:80:BA:76:5E:AA:52:E8:CB:77:15:4E:EC:C4:AF:C1:42:1D:59 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8F3D9C80268507A9C350 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8f:3d:9c:80:26:85:07:a9:c3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=653f89d7-eab4-4412-8520-b8dfa3d14a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:c3:61:67:7e:09:6d:a9:99:3e:ea:a1:b0: 4b:34:d3:0a:85:e4:ea:c8:1d:99:e5:c4:19:63:77: e3:71:bb:31:a2:7e:3d:62:f6:e3:1e:42:3d:fb:22: 11:d8:d2:f8:57:12:03:d5:f4:79:2c:d7:31:a7:18: fd:8c:05:24:bc:f0:9f:25:e3:87:7c:2e:d6:09:55: 01:b0:dd:9b:db:cd:f3:32:99:44:55:84:3b:28:7f: 33:80:22:d4:67:18:e3:b1:50:0d:e5:df:0f:64:51: a0:0f:b0:24:3b:71:cd:47:61:ee:c6:8e:12:eb:ac: a0:b8:31:9a:8d:80:69:54:17:bc:23:29:40:a4:f9: 93:81:1a:7a:4d:c2:11:69:21:b7:88:d1:36:87:e9: 06:11:24:e0:29:1b:0a:72:53:af:84:4b:80:1a:e3: af:1a:6b:23:11:7b:3f:57:d1:a8:e3:ed:db:b6:1e: 95:fe:5d:ad:fc:96:46:2f:18:5d:e7:b2:28:94:59: b0:f4:d8:a5:6f:6f:f2:81:be:db:ec:34:d6:1d:6f: cb:41:2d:5d:5c:c3:f8:e3:ce:54:4a:60:7a:a8:ac: 91:c3:a7:9b:39:d7:d9:35:46:9d:32:1a:a9:90:2b: 1a:42:af:24:7e:9e:ea:be:13:27:4a:3d:c7:c7:b2: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FD:80:BA:76:5E:AA:52:E8:CB:77:15:4E:EC:C4:AF:C1:42:1D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:66:cf:f6:d8:8e:67:05:21:af:20:79:c6:de:17:7c:92:6d: e7:c8:ee:25:ec:6e:2a:cc:57:c0:e7:d7:81:44:a3:62:4a:3d: 68:73:06:06:c6:6e:de:c8:cd:b8:61:10:86:0b:95:3c:98:e1: 72:e3:0b:78:e3:bc:c1:06:1c:2d:0c:06:cc:c4:13:df:1f:06: 3e:f7:e7:69:b8:6a:ba:44:4b:b1:92:f5:9a:34:3b:dc:bc:4b: cd:ec:4b:c4:15:4f:04:c9:db:1c:aa:5a:02:c5:00:2f:a2:f5: eb:4f:09:bd:d9:9d:24:09:2c:b4:6f:63:4f:b1:07:77:b0:4d: bf:33:1f:b5:24:b7:04:b8:dd:40:9f:43:13:0e:91:28:c9:ff: 1c:fe:e7:d9:8f:26:cf:43:28:39:6a:de:35:31:83:b1:fe:41: 55:00:d0:f3:8b:c2:69:66:0c:ea:74:71:09:63:85:83:b3:88: f5:e1:a4:11:2c:9b:06:4b:57:7a:57:72:7d:29:87:45:a0:e0: 8f:e2:f1:8a:f9:9e:03:0b:51:c4:b1:73:bd:36:04:45:a7:6e: 03:a6:5d:a0:31:80:1e:0b:4b:22:8a:f3:ab:8a:45:58:45:d0: bb:85:3a:d5:d3:ba:4e:44:94:97:53:88:e0:75:7f:fc:bf:f3: d7:f8:a5:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY89nIAmhQepw1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NjUzZjg5ZDctZWFiNC00NDEyLTg1MjAtYjhkZmEzZDE0YTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggbDYWd+CW2pmT7qobBLNNMKheTqyB2Z5cQZ Y3fjcbsxon49YvbjHkI9+yIR2NL4VxID1fR5LNcxpxj9jAUkvPCfJeOHfC7WCVUB sN2b283zMplEVYQ7KH8zgCLUZxjjsVAN5d8PZFGgD7AkO3HNR2Huxo4S66yguDGa jYBpVBe8IylApPmTgRp6TcIRaSG3iNE2h+kGESTgKRsKclOvhEuAGuOvGmsjEXs/ V9Go4+3bth6V/l2t/JZGLxhd57IolFmw9Nilb2/ygb7b7DTWHW/LQS1dXMP4485U SmB6qKyRw6ebOdfZNUadMhqpkCsaQq8kfp7qvhMnSj3Hx7J0oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKr9gLp2XqpS6Mt3FU7sxK/BQh1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDE2MjBlNDctZGE5ZS0z OWM3LWExNWItMzQyYjRiNTQzNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNmz/bYjmcFIa8gecbeF3ySbefI7iXsbirMV8Dn14FEo2JKPWhzBgbG bt7IzbhhEIYLlTyY4XLjC3jjvMEGHC0MBszEE98fBj7352m4arpES7GS9Zo0O9y8 S83sS8QVTwTJ2xyqWgLFAC+i9etPCb3ZnSQJLLRvY0+xB3ewTb8zH7UktwS43UCf QxMOkSjJ/xz+59mPJs9DKDlq3jUxg7H+QVUA0POLwmlmDOp0cQljhYOziPXhpBEs mwZLV3pXcn0ph0Wg4I/i8Yr5ngMLUcSxc702BEWnbgOmXaAxgB4LSyKK86uKRVhF 0LuFOtXTuk5ElJdTiOB1f/y/89f4pRs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:18 2026 by rpki-client