$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa File: 0420b0b8-286f-3424-a553-e98e12f985bc.roa (raw, json) Hash identifier: QyfjA0NFTkkTGm0r/VwvykQNiQN8ZtLKhXA+M2ycYZI= Subject key identifier: A4:51:DB:42:BE:8E:88:0C:E2:7A:43:BE:EE:0D:EC:61:AE:FA:02:AD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A783C909CD7B5B5E6F890 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395973 IP address blocks: 104.134.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:78:3c:90:9c:d7:b5:b5:e6:f8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=abe85d49-d242-4393-9ce2-6ba6260a6341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:53:60:ad:18:5f:0d:08:85:89:fb:ed:cd: d0:a3:50:1e:2f:3e:14:bb:47:8b:84:2e:d8:de:09: eb:1b:0a:01:2d:21:be:f8:0c:26:18:a8:46:3c:eb: 30:b6:ec:fc:de:a2:c3:24:b4:32:84:28:90:4f:4c: 04:cb:13:b5:12:ca:91:34:e0:aa:4a:98:aa:b8:f0: 2c:2e:e5:d7:28:c4:fd:74:ce:34:7e:7a:f8:bc:66: cd:c2:46:33:f5:56:c4:8c:27:24:41:9b:61:a0:5f: 61:0b:ce:41:c0:50:41:85:02:5a:09:96:c6:ec:8a: b7:85:b4:4f:ec:c4:c6:79:8d:bf:55:e6:ca:1a:27: da:da:fa:7d:79:d9:5f:6e:56:f0:67:ef:3e:c0:bd: 9a:b1:ea:0f:20:79:e8:3e:9a:8a:58:b8:74:18:ec: 1c:eb:01:a9:a8:2d:28:2d:4d:ba:b9:f6:eb:fa:d4: 9f:0d:93:1c:66:bc:83:3e:bb:2f:d8:41:24:3d:a5: 46:ad:01:f9:b1:1d:40:74:93:23:9c:d7:42:db:10: 18:ee:8c:5e:c7:15:4a:4d:d8:c3:8d:6c:a1:31:c6: a0:c7:bf:56:a2:b6:62:79:25:c9:4b:05:87:83:26: 6a:1a:67:fe:2a:32:87:66:d8:dc:4f:4c:1b:56:34: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:DB:42:BE:8E:88:0C:E2:7A:43:BE:EE:0D:EC:61:AE:FA:02:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:40:29:8a:70:ea:cd:6c:a4:5d:da:c6:89:7c:41:c9:df:98: 88:e8:56:28:0f:f1:08:b4:68:19:51:32:43:a7:1b:aa:47:01: 41:9a:26:41:40:b8:6b:33:0f:6e:88:55:90:84:5f:cb:a0:fc: 80:23:99:aa:4c:62:5e:b8:4c:b3:22:f8:54:57:92:a6:bd:de: 2b:1c:b1:90:26:d7:7f:d9:d1:19:86:42:7a:b2:0c:ff:87:06: ae:90:2c:6c:66:bd:c0:da:78:bd:6c:63:5e:1e:9e:62:e2:cf: fc:9d:ee:48:59:cc:5d:c2:f5:95:ed:bb:90:d7:97:9a:6f:e0: 02:e7:11:90:12:91:74:4f:90:f5:39:b0:e2:ad:44:4a:bc:aa: 0a:46:36:4a:fa:74:f1:63:ab:7e:df:8a:59:c0:61:bf:82:4a: a5:35:bc:9d:aa:87:dc:a9:05:42:92:f6:8e:65:90:59:6f:90: 09:cf:26:56:a8:b0:91:bc:25:81:d1:57:cc:05:51:b1:7b:2e: cf:2d:8e:28:ae:2c:d4:39:ad:59:a3:69:30:91:3f:1c:09:87: b0:aa:62:7e:43:b1:b0:af:55:c2:4e:c7:78:e3:44:fe:6e:80: c8:dd:fb:09:73:95:a1:3d:7e:b6:ca:f0:82:69:59:6f:71:4e: a6:4e:35:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSng8kJzXtbXm+JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YWJlODVkNDktZDI0Mi00MzkzLTljZTItNmJhNjI2MGE2MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGNTYK0YXw0IhYn77c3Qo1AeLz4Uu0eLhC7Y 3gnrGwoBLSG++AwmGKhGPOswtuz83qLDJLQyhCiQT0wEyxO1EsqRNOCqSpiquPAs LuXXKMT9dM40fnr4vGbNwkYz9VbEjCckQZthoF9hC85BwFBBhQJaCZbG7Iq3hbRP 7MTGeY2/VebKGifa2vp9edlfblbwZ+8+wL2aseoPIHnoPpqKWLh0GOwc6wGpqC0o LU26ufbr+tSfDZMcZryDPrsv2EEkPaVGrQH5sR1AdJMjnNdC2xAY7oxexxVKTdjD jWyhMcagx79WorZieSXJSwWHgyZqGmf+KjKHZtjcT0wbVjRFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRR20K+jogM4npDvu4N7GGu+gKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDQyMGIwYjgtMjg2Zi0z NDI0LWE1NTMtZTk4ZTEyZjk4NWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZAKYpw6s1spF3axol8QcnfmIjoVigP8Qi0aBlRMkOnG6pHAUGaJkFA uGszD26IVZCEX8ug/IAjmapMYl64TLMi+FRXkqa93iscsZAm13/Z0RmGQnqyDP+H Bq6QLGxmvcDaeL1sY14enmLiz/yd7khZzF3C9ZXtu5DXl5pv4ALnEZASkXRPkPU5 sOKtREq8qgpGNkr6dPFjq37filnAYb+CSqU1vJ2qh9ypBUKS9o5lkFlvkAnPJlao sJG8JYHRV8wFUbF7Ls8tjiiuLNQ5rVmjaTCRPxwJh7CqYn5DsbCvVcJOx3jjRP5u gMjd+wlzlaE9frbK8IJpWW9xTqZONZE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:12 2026 by rpki-client