$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa File: 0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa (raw, json) Hash identifier: UG1wkLA+9WCaqJwD2F0Jrcx1n5C9CiDv+Ibi6h1tMxY= Subject key identifier: BE:4D:0F:5A:4A:12:B0:44:F6:9B:51:58:E9:85:FD:E6:9F:65:A8:F2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A7BD0BA59C1C1826B0640 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7b:d0:ba:59:c1:c1:82:6b:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1e986ea0-8036-4dae-a456-aaa98324dfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:5b:b7:2a:b4:3a:bb:23:a2:d1:43:a6:47: 21:e1:7e:8d:0b:6a:cb:eb:fa:c9:c3:ef:4d:ee:ca: d3:2b:b3:78:b9:cc:3c:ec:25:0f:d5:ae:55:e7:da: dc:e7:7c:cb:cd:8f:e9:a9:68:a4:46:a3:00:6a:16: 77:4e:72:81:c1:ff:4e:f3:a2:49:55:da:03:78:92: 25:9c:cf:2e:6b:2c:83:94:6e:e3:2b:0c:af:8d:ae: ce:e8:80:9d:92:1b:44:fa:ec:68:87:d0:2a:28:85: 18:89:96:e1:11:e4:1c:a4:a1:14:0c:aa:47:f6:96: 45:ab:6b:a6:42:07:34:ff:bb:43:f7:20:6b:ee:25: ed:4c:9d:e4:d4:b4:e1:7d:7a:0d:df:79:47:16:63: 7c:23:ba:9d:46:f6:b9:60:8f:72:11:48:ad:a3:dc: 11:e1:78:79:a1:9f:ca:55:f6:a4:ac:91:3b:99:5c: b4:4e:ef:67:54:e8:1c:9e:f8:8d:01:96:c8:1c:0e: ff:41:48:77:a0:a7:74:b2:20:58:18:dd:5e:79:ca: 28:d2:4f:00:a0:fe:a1:26:68:8b:51:11:87:15:23: a6:5f:67:d1:b9:fb:16:c8:12:61:19:03:5d:0d:7a: 58:bf:b6:49:80:7f:cf:fe:64:d7:ca:7b:a3:bb:eb: b1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4D:0F:5A:4A:12:B0:44:F6:9B:51:58:E9:85:FD:E6:9F:65:A8:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2f:6d:b4:18:01:93:ab:be:9a:b1:dc:31:f3:73:a2:e2:d4: 1d:0d:11:1a:0b:76:f2:f5:d7:2f:b5:34:59:c5:b2:d3:c4:0c: 82:86:c1:27:fd:bb:33:1f:a8:18:89:59:26:db:c0:ad:ec:3d: 25:8e:db:ec:8f:87:a6:2b:af:4c:03:33:c4:95:79:c4:63:50: 31:6b:dd:53:54:40:1b:74:74:38:f1:36:c9:f1:6a:08:1f:7a: ae:45:e8:14:79:11:34:2e:6b:27:47:ba:6d:30:16:f1:34:25: ee:76:e5:27:4d:fd:39:97:65:30:54:aa:f3:9a:09:22:17:4a: a6:0d:f1:dd:52:fd:67:da:70:96:6b:58:93:22:73:6c:59:61: 50:ac:96:7a:ca:a2:78:09:e7:67:4e:f6:b9:1f:5b:1c:9b:57: 15:af:11:63:08:9c:f4:35:a9:a3:4f:2b:b7:a6:9d:be:63:cd: db:54:7e:d7:b8:c4:3a:d9:7c:12:b8:8d:19:20:24:d6:23:f2: 43:f8:13:23:c6:a8:68:d3:72:d2:9b:50:b1:dd:9d:bd:1c:b0: ee:0e:9e:14:44:16:78:74:b5:bd:a6:e9:01:a3:4e:f5:3a:f6: 2d:27:db:36:9a:f8:98:f4:f5:48:af:a4:6e:2b:ce:ea:58:39: 08:2b:1d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnvQulnBwYJrBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MWU5ODZlYTAtODAzNi00ZGFlLWE0NTYtYWFhOTgzMjRkZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2dbtyq0OrsjotFDpkch4X6NC2rL6/rJw+9N 7srTK7N4ucw87CUP1a5V59rc53zLzY/pqWikRqMAahZ3TnKBwf9O86JJVdoDeJIl nM8uayyDlG7jKwyvja7O6ICdkhtE+uxoh9AqKIUYiZbhEeQcpKEUDKpH9pZFq2um Qgc0/7tD9yBr7iXtTJ3k1LThfXoN33lHFmN8I7qdRva5YI9yEUito9wR4Xh5oZ/K VfakrJE7mVy0Tu9nVOgcnviNAZbIHA7/QUh3oKd0siBYGN1eecoo0k8AoP6hJmiL URGHFSOmX2fRufsWyBJhGQNdDXpYv7ZJgH/P/mTXynuju+uxgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5ND1pKErBE9ptRWOmF/eafZajyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGJhMzNjMDctM2ExYS0z ZTM5LWFkNmQtMDBhMWRlMzA1YzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsvbbQYAZOrvpqx3DHzc6Li1B0NERoLdvL11y+1NFnFstPEDIKGwSf9 uzMfqBiJWSbbwK3sPSWO2+yPh6Yrr0wDM8SVecRjUDFr3VNUQBt0dDjxNsnxaggf eq5F6BR5ETQuaydHum0wFvE0Je525SdN/TmXZTBUqvOaCSIXSqYN8d1S/WfacJZr WJMic2xZYVCslnrKongJ52dO9rkfWxybVxWvEWMInPQ1qaNPK7emnb5jzdtUfte4 xDrZfBK4jRkgJNYj8kP4EyPGqGjTctKbULHdnb0csO4OnhREFnh0tb2m6QGjTvU6 9i0n2zaa+Jj09UivpG4rzupYOQgrHbQ= -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:26 2026 by rpki-client