$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761f8cd-b891-32b3-8fab-93555377d9a0.roa File: 1761f8cd-b891-32b3-8fab-93555377d9a0.roa (raw, json) Hash identifier: z3kqQi8G3V8DvnebW28dPtrusiZSO+GQzBNM404xP+E= Subject key identifier: 4B:E7:0D:15:51:A4:07:A5:64:18:5C:D6:4C:83:7B:16:5D:F9:E8:5A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D922AD7D6818BE2A1D200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761f8cd-b891-32b3-8fab-93555377d9a0.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:92:2a:d7:d6:81:8b:e2:a1:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=376bffa7-3432-450e-bb1b-ad875dd374ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:57:75:42:ed:cc:a9:95:7d:54:6d:0d:04: 22:54:a2:e7:91:9a:72:fd:08:d4:14:8e:4f:47:2b: 1f:25:72:09:df:f5:cb:46:8f:57:a0:8e:73:b9:97: 9b:d3:e2:90:be:7a:4f:33:25:0b:e6:56:86:2e:0f: bd:51:38:43:4d:50:ea:e7:7d:b8:38:08:ce:6c:15: eb:c2:03:9f:01:e0:0b:89:f1:c3:44:78:c8:6a:4c: b3:87:f0:b6:61:69:fd:9f:40:b2:b9:c7:8a:32:61: db:ac:8a:77:0a:6c:38:51:d7:e2:25:7d:4f:22:48: 99:1f:20:9b:2e:6e:07:b8:e1:68:3f:ef:fb:97:58: d1:80:7e:f9:b6:80:16:8c:c3:37:5a:33:0b:57:bd: 04:d9:a9:cd:ef:20:cd:1c:89:f1:ff:7b:c0:dd:50: 5a:57:f0:43:9c:91:ca:c8:8c:c1:a5:b6:7f:ad:aa: 54:b2:26:a5:0f:e4:c3:ef:ed:f0:0e:a0:43:e2:6e: 5f:0e:42:79:0d:e7:58:96:57:23:77:e7:d5:c3:a9: 02:21:0c:19:e1:f1:a0:b4:2b:f6:64:11:e0:74:8d: 5e:c1:e2:a7:7f:41:a1:da:49:d7:98:76:d2:ef:6e: 72:d7:0f:74:64:4d:d3:92:1c:b6:ed:a4:b1:25:57: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E7:0D:15:51:A4:07:A5:64:18:5C:D6:4C:83:7B:16:5D:F9:E8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761f8cd-b891-32b3-8fab-93555377d9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ca:6a:5a:af:91:00:69:8b:ba:a2:11:79:e8:5a:db:58:7a: 04:ab:7a:1d:42:db:27:48:8a:44:24:62:15:41:9e:7a:69:fe: ed:93:5d:0b:75:bf:dc:91:6f:93:a7:3e:bf:37:a3:64:8e:f2: df:df:c0:11:63:2d:14:87:56:2e:35:c6:7c:5b:55:1c:9e:5e: 17:a7:8a:14:25:5f:c9:ec:07:8c:63:5e:15:08:6c:3a:6c:d8: 31:68:fd:f5:2b:6d:25:d4:1d:04:0f:99:c0:4a:2f:cb:85:54: 39:96:f4:74:26:38:2d:a9:25:4c:9e:f1:03:af:55:56:1c:a8: f9:3a:31:ad:68:9c:f6:c0:60:7f:f6:9e:ae:8a:3d:36:a1:e1: 53:9f:23:97:d4:a6:58:e5:7d:90:b8:a5:04:31:aa:0b:4c:8c: ba:08:49:c0:cc:2a:40:1d:e6:a3:31:e9:98:8c:9a:cf:3d:d3: 4f:ab:b1:ff:06:3a:9f:a4:88:89:6b:2d:4d:e2:6c:88:4a:e8: 04:ce:b8:a0:27:ba:19:42:bb:a6:e4:f5:1d:f5:b8:62:69:77: 3b:c6:c5:13:31:b9:25:22:98:a9:67:cf:cc:25:74:06:cb:f4: 0c:35:52:0c:76:30:af:c3:30:dc:93:31:f3:7a:1c:27:94:05: 5f:e6:cb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZIq19aBi+Kh0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Mzc2YmZmYTctMzQzMi00NTBlLWJiMWItYWQ4NzVkZDM3NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoVXdULtzKmVfVRtDQQiVKLnkZpy/QjUFI5P RysfJXIJ3/XLRo9XoI5zuZeb0+KQvnpPMyUL5laGLg+9UThDTVDq5324OAjObBXr wgOfAeALifHDRHjIakyzh/C2YWn9n0CyuceKMmHbrIp3Cmw4UdfiJX1PIkiZHyCb Lm4HuOFoP+/7l1jRgH75toAWjMM3WjMLV70E2anN7yDNHInx/3vA3VBaV/BDnJHK yIzBpbZ/rapUsialD+TD7+3wDqBD4m5fDkJ5DedYllcjd+fVw6kCIQwZ4fGgtCv2 ZBHgdI1eweKnf0Gh2knXmHbS725y1w90ZE3Tkhy27aSxJVfagwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvnDRVRpAelZBhc1kyDexZd+ehaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTc2MWY4Y2QtYjg5MS0z MmIzLThmYWItOTM1NTUzNzdkOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXKalqvkQBpi7qiEXnoWttYegSreh1C2ydIikQkYhVBnnpp/u2TXQt1 v9yRb5OnPr83o2SO8t/fwBFjLRSHVi41xnxbVRyeXhenihQlX8nsB4xjXhUIbDps 2DFo/fUrbSXUHQQPmcBKL8uFVDmW9HQmOC2pJUye8QOvVVYcqPk6Ma1onPbAYH/2 nq6KPTah4VOfI5fUpljlfZC4pQQxqgtMjLoIScDMKkAd5qMx6ZiMms8900+rsf8G Op+kiIlrLU3ibIhK6ATOuKAnuhlCu6bk9R31uGJpdzvGxRMxuSUimKlnz8wldAbL 9Aw1Ugx2MK/DMNyTMfN6HCeUBV/my0k= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:33 2026 by rpki-client