$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa File: 0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa (raw, json) Hash identifier: blMgVTiTJm67tO2T5l6xme1VHc8GUVTG7xxn/zNq4gY= Subject key identifier: 6A:D7:52:67:53:09:E0:9C:43:95:54:2C:4D:FB:61:0B:E9:A4:7C:A3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA50C2B056F6D930C9040 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a5:0c:2b:05:6f:6d:93:0c:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=f5161f25-5dc9-4aad-94ed-373540b863dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:b6:2a:9e:19:e4:4e:72:f9:a7:26:ea:8e: b2:f0:b4:ce:98:ab:e0:19:52:b9:4a:5b:56:53:52: 00:a5:0a:c6:28:25:2a:d2:be:64:36:a4:b4:c7:8e: 7b:6f:39:53:c3:5b:46:60:1b:4a:25:a2:64:c4:65: 76:b8:6f:b0:c5:6f:c7:c7:bb:4f:b2:e8:c6:26:8d: 2d:46:bc:31:2d:f3:6b:63:ae:fa:93:ce:cb:25:2e: d7:14:e2:94:d3:0f:21:54:a9:9e:b1:05:28:5a:f2: f8:56:cc:53:51:a6:ea:a4:2e:b8:11:12:6a:18:5a: 70:9a:75:5a:db:3b:65:3d:f0:90:12:ea:16:c8:51: fc:5e:5c:61:8d:6b:7c:a7:39:1e:1a:4f:a5:20:f5: 8e:e8:5a:cd:0a:a1:77:ed:c2:c2:f9:a4:d7:7b:d7: 7d:0a:0e:f1:ba:f8:d1:1f:cb:db:cc:d4:b8:0a:55: 8d:21:de:d9:f7:bd:d5:52:a5:86:69:43:2b:b0:b6: 5f:a2:12:bf:5f:ac:b0:1a:ba:3b:56:ec:0b:33:dd: 6f:dc:14:fb:3d:c3:d3:37:89:a1:9c:52:e2:b2:77: ca:c5:f9:a7:29:cf:25:cd:d9:c4:bf:de:f3:cd:cf: d6:e5:b0:10:8e:03:b8:56:83:e1:27:ca:90:82:b5: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D7:52:67:53:09:E0:9C:43:95:54:2C:4D:FB:61:0B:E9:A4:7C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:03:2e:a5:57:8d:ae:12:62:5f:ab:4b:cd:55:ae:d3:55:ba: b7:17:8e:72:d6:51:fc:66:dd:ea:e7:1c:ef:5a:40:b4:29:36: c1:dd:d1:2d:80:61:75:5c:5e:7a:67:49:fd:4f:0f:58:3a:f9: 1e:24:58:19:d9:74:a7:12:01:7b:5f:db:53:e1:e2:90:be:00: a0:22:3b:4b:9e:18:24:9f:86:7e:12:6a:d9:51:3d:54:27:7f: 51:f7:34:36:50:95:39:49:54:62:8b:cc:e0:6d:0b:1e:77:a0: 90:da:cf:5c:03:e0:94:3e:45:6c:ba:b5:b2:d9:e9:e7:d6:0a: ca:e6:0c:9d:d1:2b:91:1d:15:79:78:c6:f0:99:7d:00:4e:5e: 89:47:0b:e9:fc:aa:79:86:de:17:d7:8e:16:24:02:24:52:e9: e6:51:bb:fd:8c:4a:96:c0:67:a1:8f:b4:e2:97:86:66:e8:69: 7f:da:bc:94:55:91:fe:8c:03:58:45:c8:fc:8b:cc:08:ff:ba: 42:77:d1:b8:bd:31:f1:30:06:22:09:de:e3:1c:a6:26:d2:1d: da:6a:63:4b:1b:2c:bb:b7:5a:e5:9f:ce:ed:75:53:49:f3:2e: b9:22:b4:d3:57:cd:ec:a6:3e:7b:da:c8:33:82:ab:f5:14:b5: 65:e9:30:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaUMKwVvbZMMkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjUxNjFmMjUtNWRjOS00YWFkLTk0ZWQtMzczNTQwYjg2M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SS2Kp4Z5E5y+acm6o6y8LTOmKvgGVK5SltW U1IApQrGKCUq0r5kNqS0x457bzlTw1tGYBtKJaJkxGV2uG+wxW/Hx7tPsujGJo0t RrwxLfNrY676k87LJS7XFOKU0w8hVKmesQUoWvL4VsxTUabqpC64ERJqGFpwmnVa 2ztlPfCQEuoWyFH8XlxhjWt8pzkeGk+lIPWO6FrNCqF37cLC+aTXe9d9Cg7xuvjR H8vbzNS4ClWNId7Z973VUqWGaUMrsLZfohK/X6ywGro7VuwLM91v3BT7PcPTN4mh nFLisnfKxfmnKc8lzdnEv97zzc/W5bAQjgO4VoPhJ8qQgrWxVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrXUmdTCeCcQ5VULE37YQvppHyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGQzYmI2YzAtNDI2ZC0z OWVlLWE1YmQtNTIyMDE0MGFhNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUDLqVXja4SYl+rS81VrtNVurcXjnLWUfxm3ernHO9aQLQpNsHd0S2A YXVcXnpnSf1PD1g6+R4kWBnZdKcSAXtf21Ph4pC+AKAiO0ueGCSfhn4SatlRPVQn f1H3NDZQlTlJVGKLzOBtCx53oJDaz1wD4JQ+RWy6tbLZ6efWCsrmDJ3RK5EdFXl4 xvCZfQBOXolHC+n8qnmG3hfXjhYkAiRS6eZRu/2MSpbAZ6GPtOKXhmboaX/avJRV kf6MA1hFyPyLzAj/ukJ30bi9MfEwBiIJ3uMcpibSHdpqY0sbLLu3WuWfzu11U0nz LrkitNNXzeymPnvayDOCq/UUtWXpMGU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:57 2026 by rpki-client