$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/19d29848-5b48-3a59-92c9-a8eb193e5d10.roa File: 19d29848-5b48-3a59-92c9-a8eb193e5d10.roa (raw, json) Hash identifier: dJZXTMfxSFUSr/8sAJaX5zcZTweU6e3iUfSr4qe64YU= Subject key identifier: B7:2D:25:CB:11:B3:88:AB:5D:1E:FB:63:5D:D0:42:E5:0D:FF:E2:95 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7E8EDE0D7474711841F40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/19d29848-5b48-3a59-92c9-a8eb193e5d10.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e8:ed:e0:d7:47:47:11:84:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=db659509-e7a6-41cd-8aec-7049eb25b7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:83:d3:16:97:90:72:52:be:13:4b:d8:d2:c0: c1:d9:a5:5b:c7:ec:f1:8c:ee:94:be:c5:e5:7d:17: b4:3d:ad:34:48:d5:92:84:82:68:1a:14:e9:d5:7e: 08:75:b3:1a:f0:49:3a:ff:ff:6b:0d:c9:b0:a9:73: 6c:61:30:4f:54:3e:b2:bd:2e:fc:65:14:65:5a:47: 54:5b:32:29:8c:e3:37:f6:41:b9:44:9c:e6:c4:7d: d8:8b:4a:59:7d:79:ea:1c:65:78:21:6e:d0:f6:ed: da:4d:f6:6d:3d:77:dc:f2:87:ed:1b:76:67:67:8a: d2:3e:2f:be:0e:f7:de:0b:f7:80:86:72:f6:de:78: e6:6e:d0:89:2b:b2:00:5c:49:af:65:7b:f5:94:31: a9:4d:87:98:38:6b:c2:fc:9c:26:93:e1:5e:a2:a0: 82:1d:21:1f:5d:c6:38:15:ad:94:b2:f5:c5:9c:6a: 75:30:33:d9:3f:9b:2e:e9:2b:24:15:d6:11:ab:2b: 20:0e:c2:0f:6d:a8:77:2b:64:8c:0b:b3:2a:69:81: 9a:90:5b:33:bc:45:d6:50:1c:db:f5:40:69:29:80: 15:6f:09:47:c4:fb:73:cc:aa:77:c5:46:29:bb:f5: 2b:3e:5b:95:e9:80:9d:45:89:72:77:fd:c9:3e:21: 93:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2D:25:CB:11:B3:88:AB:5D:1E:FB:63:5D:D0:42:E5:0D:FF:E2:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/19d29848-5b48-3a59-92c9-a8eb193e5d10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:54:fb:e0:31:d9:ae:39:a9:2d:9a:08:34:d8:5a:7e:b7:c3: 46:e0:36:e2:ec:55:cd:73:6b:d7:e6:87:a1:26:4e:56:d0:e7: 1b:4c:d9:7c:7e:91:51:20:9e:d3:f8:27:fd:1e:f2:ed:f7:3a: 32:14:7a:72:88:a8:b7:56:2b:8c:59:7a:33:99:04:76:93:4f: 62:ca:6d:fc:ef:70:51:39:5d:69:ef:08:8f:b1:3c:84:14:18: a5:90:7f:d5:3a:3c:45:8d:f4:75:7b:00:24:f9:b6:74:47:0f: a1:f1:2b:f4:a2:cf:d9:75:21:3a:c0:77:74:da:25:8e:99:00: 8e:49:a3:bf:9c:39:a4:9c:8f:36:57:ae:dd:d8:c6:a9:2c:78: c0:af:9a:06:76:03:ee:26:45:dc:96:9a:64:e8:ec:d4:30:e2: 43:c9:de:89:d3:82:d7:c3:f9:5a:76:ae:87:ef:68:8b:f8:ac: c5:5a:bb:79:03:59:85:88:87:22:86:71:38:c1:02:c7:c2:d1: 8e:fc:18:d5:7d:70:4c:8f:fe:d1:1c:f0:02:81:dc:ca:a5:c2: fe:ef:2f:bc:92:a8:a0:97:c4:17:bd:62:70:f6:b8:0d:9c:a3: 24:d3:4f:c9:0e:0b:55:b5:36:b5:cf:91:6d:b1:03:cb:ed:9e: 37:ce:58:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+jt4NdHRxGEH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZGI2NTk1MDktZTdhNi00MWNkLThhZWMtNzA0OWViMjViN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4PTFpeQclK+E0vY0sDB2aVbx+zxjO6UvsXl fRe0Pa00SNWShIJoGhTp1X4IdbMa8Ek6//9rDcmwqXNsYTBPVD6yvS78ZRRlWkdU WzIpjOM39kG5RJzmxH3Yi0pZfXnqHGV4IW7Q9u3aTfZtPXfc8oftG3ZnZ4rSPi++ DvfeC/eAhnL23njmbtCJK7IAXEmvZXv1lDGpTYeYOGvC/Jwmk+FeoqCCHSEfXcY4 Fa2UsvXFnGp1MDPZP5su6SskFdYRqysgDsIPbah3K2SMC7MqaYGakFszvEXWUBzb 9UBpKYAVbwlHxPtzzKp3xUYpu/UrPluV6YCdRYlyd/3JPiGT1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLctJcsRs4irXR77Y13QQuUN/+KVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTlkMjk4NDgtNWI0OC0z YTU5LTkyYzktYThlYjE5M2U1ZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZU++Ax2a45qS2aCDTYWn63w0bgNuLsVc1za9fmh6EmTlbQ5xtM2Xx+ kVEgntP4J/0e8u33OjIUenKIqLdWK4xZejOZBHaTT2LKbfzvcFE5XWnvCI+xPIQU GKWQf9U6PEWN9HV7ACT5tnRHD6HxK/Siz9l1ITrAd3TaJY6ZAI5Jo7+cOaScjzZX rt3YxqkseMCvmgZ2A+4mRdyWmmTo7NQw4kPJ3onTgtfD+Vp2rofvaIv4rMVau3kD WYWIhyKGcTjBAsfC0Y78GNV9cEyP/tEc8AKB3Mqlwv7vL7ySqKCXxBe9YnD2uA2c oyTTT8kOC1W1NrXPkW2xA8vtnjfOWOI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:20 2026 by rpki-client