$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/140876a2-38f5-3c76-923f-6349cba8f747.roa File: 140876a2-38f5-3c76-923f-6349cba8f747.roa (raw, json) Hash identifier: uouZlYGSZqBsoQkIrdfz6iqtaP8fIeEMSGIev1QjcLU= Subject key identifier: 25:FB:49:30:26:40:5E:AB:A3:4C:A0:AC:80:D0:F0:E9:31:29:5D:FF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA6339C79812EF05BA620 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/140876a2-38f5-3c76-923f-6349cba8f747.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a6:33:9c:79:81:2e:f0:5b:a6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=093a023c-53ed-4074-8751-73fac65b6e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:91:89:8a:69:cd:79:9c:ec:45:8d:e6:75: d1:da:28:91:42:29:c7:18:42:01:97:b3:86:92:76: cd:0a:0c:47:6f:52:eb:f6:1a:13:8d:87:b4:c0:1b: 97:b1:21:88:4a:95:c6:a7:cb:13:a3:9c:07:d6:6d: e3:c3:bb:94:e7:09:1b:3d:fb:d2:c5:ae:cf:bc:41: 50:bd:6f:62:08:e8:86:c2:db:3a:8a:e9:15:58:a3: b7:3e:42:72:22:a3:f0:2e:3c:4a:d7:99:64:c3:96: a2:77:96:24:a3:1f:97:78:bc:aa:2c:e2:ec:b0:a2: 31:67:22:38:8b:df:71:48:4e:89:c6:e3:e8:1a:cd: fa:ff:42:ed:b8:17:d1:3c:bc:e2:1e:b9:45:f6:9f: 11:4a:c8:f0:02:2a:dc:a4:fa:bd:6f:90:d7:4d:38: 27:0c:d7:e4:c4:01:d2:0f:b1:e2:19:e2:64:06:94: c6:4e:ec:80:6f:8a:8c:ed:c0:95:6e:93:2e:ed:55: 80:a3:2e:05:76:af:96:de:d6:09:95:96:6e:57:db: 81:e6:21:47:dc:96:43:fe:7e:70:09:9a:5f:1d:50: 58:5a:ce:48:61:8b:d1:67:5b:b2:bf:24:28:7c:09: 53:95:09:6e:f9:74:bf:cf:1e:e9:af:8d:bc:29:8a: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FB:49:30:26:40:5E:AB:A3:4C:A0:AC:80:D0:F0:E9:31:29:5D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/140876a2-38f5-3c76-923f-6349cba8f747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:88:bc:a9:2c:3c:19:7f:05:bb:77:24:2f:bb:7c:90:63:3a: 7f:8d:6c:a3:84:fc:3d:3a:0c:e2:67:92:c7:4e:ff:a8:9e:53: 2d:0b:a8:0b:59:96:2b:27:4f:73:1f:be:b7:34:09:b1:d0:ff: 5a:1e:18:53:9f:df:87:67:e6:18:79:b4:28:d5:32:13:64:40: 4d:24:c5:6a:82:6b:4e:fd:d6:14:c3:ab:0c:87:f9:8d:dc:80: 7f:62:c4:a6:32:f9:63:bb:ec:36:03:97:02:af:02:1d:58:57: 4c:15:d4:77:7e:8f:b5:4f:e8:c0:cb:6f:36:55:e5:59:8e:ab: a9:7b:b6:34:5c:fb:df:49:cc:7d:a3:4e:07:b6:77:e4:56:fd: 97:0e:ec:c3:c7:c3:37:d6:7b:83:ad:b0:6f:7c:61:82:2b:6d: b8:94:1b:33:52:33:11:49:40:21:40:f8:7b:fc:53:61:5a:9f: 76:83:de:f0:b7:73:c0:b0:18:99:4e:eb:4d:bf:05:dc:7c:c6: c8:d8:ae:03:72:96:bd:9d:f7:0b:aa:3d:6a:dd:a3:dc:db:9c: 18:12:c3:09:0a:88:f9:56:27:43:04:93:bc:87:d4:28:ad:3c: 38:a4:70:19:a5:08:3e:20:f2:a9:d7:fb:42:34:06:7e:4e:6e: a4:a0:df:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaYznHmBLvBbpiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MDkzYTAyM2MtNTNlZC00MDc0LTg3NTEtNzNmYWM2NWI2ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAureRiYppzXmc7EWN5nXR2iiRQinHGEIBl7OG knbNCgxHb1Lr9hoTjYe0wBuXsSGISpXGp8sTo5wH1m3jw7uU5wkbPfvSxa7PvEFQ vW9iCOiGwts6iukVWKO3PkJyIqPwLjxK15lkw5aid5Ykox+XeLyqLOLssKIxZyI4 i99xSE6JxuPoGs36/0LtuBfRPLziHrlF9p8RSsjwAircpPq9b5DXTTgnDNfkxAHS D7HiGeJkBpTGTuyAb4qM7cCVbpMu7VWAoy4Fdq+W3tYJlZZuV9uB5iFH3JZD/n5w CZpfHVBYWs5IYYvRZ1uyvyQofAlTlQlu+XS/zx7pr428KYpy1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX7STAmQF6ro0ygrIDQ8OkxKV3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTQwODc2YTItMzhmNS0z Yzc2LTkyM2YtNjM0OWNiYThmNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuIvKksPBl/Bbt3JC+7fJBjOn+NbKOE/D06DOJnksdO/6ieUy0LqAtZ lisnT3Mfvrc0CbHQ/1oeGFOf34dn5hh5tCjVMhNkQE0kxWqCa0791hTDqwyH+Y3c gH9ixKYy+WO77DYDlwKvAh1YV0wV1Hd+j7VP6MDLbzZV5VmOq6l7tjRc+99JzH2j Tge2d+RW/ZcO7MPHwzfWe4OtsG98YYIrbbiUGzNSMxFJQCFA+Hv8U2Fan3aD3vC3 c8CwGJlO602/Bdx8xsjYrgNylr2d9wuqPWrdo9zbnBgSwwkKiPlWJ0MEk7yH1Cit PDikcBmlCD4g8qnX+0I0Bn5ObqSg39c= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:49 2026 by rpki-client