$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04b35298-153a-3d5f-9fa5-c9ea99d46318.roa File: 04b35298-153a-3d5f-9fa5-c9ea99d46318.roa (raw, json) Hash identifier: y8jRYPAXRWMcShXOZ02vw/BROvmPPYcHS4HSzvvFIBw= Subject key identifier: 57:52:77:A9:79:05:60:2A:B1:A7:3B:BA:2D:34:A5:5A:E6:CD:D5:69 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9E65796FDB33B319E380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04b35298-153a-3d5f-9fa5-c9ea99d46318.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9e:65:79:6f:db:33:b3:19:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1803b129-7a65-49ce-97e1-8c233b0d659d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:41:1d:52:71:f2:ed:ab:52:4d:cc:44:b0: 1d:16:4f:98:19:e7:6e:09:5b:5d:e8:00:7d:44:3e: 9f:26:46:0a:c8:89:d2:38:32:9a:7d:d2:ea:f7:32: 3d:29:ca:46:a7:07:67:59:5a:39:83:12:4f:b7:26: e0:1c:b2:c8:3e:37:98:de:70:80:d5:87:5b:12:90: da:fa:e7:60:4e:34:ed:a9:d6:5e:78:52:16:7b:3d: 0e:e7:b8:a8:1f:5e:0a:cd:a6:51:e7:1a:b6:a9:d6: 6e:1a:77:f3:a4:43:d4:c1:10:a6:61:d0:c8:b7:ef: da:0d:32:d2:42:fa:67:44:c5:eb:36:0d:8f:d7:29: 31:b8:cc:81:ac:62:51:72:19:69:b2:a3:fa:5d:39: 72:0a:52:9e:a3:0d:b7:33:e8:b0:01:9e:da:3b:de: 03:98:72:80:73:1b:ba:ea:72:ec:a6:13:fa:77:63: 31:10:de:7f:53:77:ed:08:55:88:23:cc:20:2a:b0: 82:8b:55:03:fd:ce:4b:c5:c0:7b:43:ca:55:dc:df: 22:e7:04:5e:f2:c3:03:56:9c:94:76:58:03:3a:ce: 7f:d1:ff:c6:f1:80:c2:34:eb:01:cc:22:f8:ff:5b: f5:bc:26:8d:43:50:b7:ec:e5:57:eb:66:eb:52:c9: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:52:77:A9:79:05:60:2A:B1:A7:3B:BA:2D:34:A5:5A:E6:CD:D5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04b35298-153a-3d5f-9fa5-c9ea99d46318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f1:c6:73:75:1a:d6:29:cf:8c:a3:dd:7e:3d:e6:5f:ab:e7: cf:42:dc:83:bb:15:13:d2:54:c2:23:a8:53:99:e0:89:c8:3a: da:c3:32:de:0d:3d:f8:fa:3c:71:a0:f9:fc:d5:84:6e:e9:85: 2a:69:19:e8:3c:c4:5e:ac:0f:e2:ad:0d:36:5b:9d:1f:89:f8: f7:3f:d4:8a:22:57:de:45:b9:32:77:ac:ee:11:e5:18:0d:a3: ec:04:cf:78:62:20:05:3b:4a:cc:53:1b:e7:b3:7f:5a:0e:5c: c0:cb:6b:12:13:19:55:7c:2c:fa:ef:52:07:08:96:c2:08:52: 1c:40:b9:14:b9:1b:a9:73:56:31:da:17:b6:0b:1d:37:c4:4f: bc:79:d7:d2:f5:ad:7e:d0:cb:66:ad:b5:7f:a0:e8:27:42:e0: 85:bd:f5:f6:f3:6e:c1:3e:25:93:02:c9:39:72:c6:16:66:30: 2f:f3:13:54:25:8a:28:49:53:c1:92:36:e7:e4:e6:82:9c:bd: d6:43:37:13:b6:0d:64:19:5c:2c:6d:fe:b2:ef:5d:27:d3:3e: 35:45:b6:b7:4b:dd:bd:43:fb:02:ba:1e:3c:2f:3c:d5:18:3f: 1e:3a:57:9f:9d:6e:69:ef:8c:96:f7:58:7c:91:13:41:ec:e9: 81:ad:89:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ5leW/bM7MZ44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTgwM2IxMjktN2E2NS00OWNlLTk3ZTEtOGMyMzNiMGQ2NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5tBHVJx8u2rUk3MRLAdFk+YGeduCVtd6AB9 RD6fJkYKyInSODKafdLq9zI9KcpGpwdnWVo5gxJPtybgHLLIPjeY3nCA1YdbEpDa +udgTjTtqdZeeFIWez0O57ioH14KzaZR5xq2qdZuGnfzpEPUwRCmYdDIt+/aDTLS QvpnRMXrNg2P1ykxuMyBrGJRchlpsqP6XTlyClKeow23M+iwAZ7aO94DmHKAcxu6 6nLsphP6d2MxEN5/U3ftCFWII8wgKrCCi1UD/c5LxcB7Q8pV3N8i5wRe8sMDVpyU dlgDOs5/0f/G8YDCNOsBzCL4/1v1vCaNQ1C37OVX62brUsnnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdSd6l5BWAqsac7ui00pVrmzdVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRiMzUyOTgtMTUzYS0z ZDVmLTlmYTUtYzllYTk5ZDQ2MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLxxnN1GtYpz4yj3X495l+r589C3IO7FRPSVMIjqFOZ4InIOtrDMt4N Pfj6PHGg+fzVhG7phSppGeg8xF6sD+KtDTZbnR+J+Pc/1IoiV95FuTJ3rO4R5RgN o+wEz3hiIAU7SsxTG+ezf1oOXMDLaxITGVV8LPrvUgcIlsIIUhxAuRS5G6lzVjHa F7YLHTfET7x519L1rX7Qy2attX+g6CdC4IW99fbzbsE+JZMCyTlyxhZmMC/zE1Ql iihJU8GSNufk5oKcvdZDNxO2DWQZXCxt/rLvXSfTPjVFtrdL3b1D+wK6HjwvPNUY Px46V5+dbmnvjJb3WHyRE0Hs6YGtiYE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:35:44 2026 by rpki-client