$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1348fd6e-182c-31c6-824a-653289db4d4e.roa File: 1348fd6e-182c-31c6-824a-653289db4d4e.roa (raw, json) Hash identifier: gXPk3jFAQmAT57APFWKyzWo3ULN7uMwN3K8Nyj0fb30= Subject key identifier: 6B:F3:43:A5:BD:8B:E6:2E:2A:18:E5:54:D8:CE:8A:68:80:C5:4D:C7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D923B9B54959AC4EA8CC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1348fd6e-182c-31c6-824a-653289db4d4e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:92:3b:9b:54:95:9a:c4:ea:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=9ccbaafa-9c1c-44d7-b32e-b5884597c92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:d7:93:c0:2e:4b:e8:0e:f3:b4:4c:89:0f: f0:a8:ac:f8:92:3d:71:b9:8e:02:b0:64:53:78:69: 3f:ed:3c:fa:98:b4:28:f3:58:6d:0f:e0:a5:91:25: 39:59:d8:47:0c:85:52:08:98:c7:43:9e:1c:a6:5e: c4:15:6f:31:6b:ac:e0:c7:47:4d:7a:c4:5a:8f:57: 3f:41:d4:50:72:00:b6:08:fd:3e:3d:a1:4d:63:87: a9:8b:3a:d0:04:34:63:9e:56:77:66:91:b9:64:4c: ea:a0:3c:18:9f:df:38:81:25:d7:48:3a:e1:a7:98: bd:82:b0:bb:7b:03:a9:00:aa:bf:58:45:9b:29:bd: 64:d1:a6:76:0b:c3:c2:68:42:5c:f7:4a:da:33:6a: 7a:b9:ea:24:a7:98:57:08:35:9d:0e:89:b9:cb:96: f3:3b:90:65:2d:6c:e6:e7:53:f9:81:10:a2:6d:3d: 0e:42:97:93:22:b7:d6:0f:57:a8:92:11:1d:e8:74: 2a:4c:1a:f2:fd:74:e1:2b:80:cb:ac:39:10:76:d9: 79:60:6f:3e:6d:19:aa:3e:d3:19:24:39:d2:f0:8c: c1:bb:a1:bf:7a:54:70:82:16:37:86:c8:82:27:6a: 56:7d:cc:99:39:bb:9d:58:d8:bd:ac:9d:19:06:67: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F3:43:A5:BD:8B:E6:2E:2A:18:E5:54:D8:CE:8A:68:80:C5:4D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1348fd6e-182c-31c6-824a-653289db4d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:95:e9:64:89:e7:35:6f:77:bd:2d:d9:1e:1d:7a:c3:5a:cb: 4b:2c:a1:43:9a:f0:92:3e:3f:8e:b1:14:a9:5a:b3:76:6c:f0: 30:51:74:9b:d0:af:33:0a:bc:9b:a5:da:9a:55:79:15:26:ba: 95:cc:a5:13:cc:13:25:06:4e:31:9c:43:27:d5:35:0a:a1:16: e7:57:25:82:49:36:88:ea:48:03:6d:06:bb:f1:5a:6c:4d:47: 52:3b:fb:86:67:c7:a8:e8:64:7f:47:94:e2:96:f9:b9:f4:ba: b7:61:4e:a7:c3:8d:b0:b6:6b:c0:8b:6b:40:49:e6:b6:eb:8c: 66:2a:65:89:c5:19:26:34:ca:66:db:06:90:a0:3b:09:e5:9e: 62:74:d0:ba:6b:0f:14:4d:dd:81:43:3f:07:99:8f:14:e3:94: c1:df:d9:87:75:19:1d:b3:13:20:c7:66:cd:32:80:2a:84:ee: 6e:96:ba:c9:18:56:2e:0c:ae:06:58:c0:59:da:2a:22:83:bb: 2f:85:ef:ab:8d:3d:e3:43:40:8f:d5:0f:a6:84:ed:25:49:a9: 39:98:37:8f:f2:5f:6a:4f:df:bc:32:78:4c:3d:af:07:59:5c: ab:5f:7d:16:d9:dc:e3:ce:21:7f:e2:0b:12:73:62:17:ee:c4: 42:dd:cc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZI7m1SVmsTqjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OWNjYmFhZmEtOWMxYy00NGQ3LWIzMmUtYjU4ODQ1OTdjOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCLXk8AuS+gO87RMiQ/wqKz4kj1xuY4CsGRT eGk/7Tz6mLQo81htD+ClkSU5WdhHDIVSCJjHQ54cpl7EFW8xa6zgx0dNesRaj1c/ QdRQcgC2CP0+PaFNY4epizrQBDRjnlZ3ZpG5ZEzqoDwYn984gSXXSDrhp5i9grC7 ewOpAKq/WEWbKb1k0aZ2C8PCaEJc90raM2p6ueokp5hXCDWdDom5y5bzO5BlLWzm 51P5gRCibT0OQpeTIrfWD1eokhEd6HQqTBry/XThK4DLrDkQdtl5YG8+bRmqPtMZ JDnS8IzBu6G/elRwghY3hsiCJ2pWfcyZObudWNi9rJ0ZBmf4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvzQ6W9i+YuKhjlVNjOimiAxU3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTM0OGZkNmUtMTgyYy0z MWM2LTgyNGEtNjUzMjg5ZGI0ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmV6WSJ5zVvd70t2R4desNay0ssoUOa8JI+P46xFKlas3Zs8DBRdJvQ rzMKvJul2ppVeRUmupXMpRPMEyUGTjGcQyfVNQqhFudXJYJJNojqSANtBrvxWmxN R1I7+4Znx6joZH9HlOKW+bn0urdhTqfDjbC2a8CLa0BJ5rbrjGYqZYnFGSY0ymbb BpCgOwnlnmJ00LprDxRN3YFDPweZjxTjlMHf2Yd1GR2zEyDHZs0ygCqE7m6WuskY Vi4MrgZYwFnaKiKDuy+F76uNPeNDQI/VD6aE7SVJqTmYN4/yX2pP37wyeEw9rwdZ XKtffRbZ3OPOIX/iCxJzYhfuxELdzDA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:42 2026 by rpki-client