$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a381c78-b1e9-3b2d-95cf-2eb0af0b7320.roa File: 1a381c78-b1e9-3b2d-95cf-2eb0af0b7320.roa (raw, json) Hash identifier: QNUyXdhPjbGKDQn2ibZ7FG8SREXa259SiJ6Y81j9xoY= Subject key identifier: DA:40:B8:24:D0:AA:57:77:AD:C2:1B:DA:13:E6:D7:44:DC:19:EC:38 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8E489AB3271D5AB61DC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a381c78-b1e9-3b2d-95cf-2eb0af0b7320.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8e:48:9a:b3:27:1d:5a:b6:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=c68dade5-b5dd-43f4-b226-5f5da6aa08b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:a9:0f:e7:98:ab:0d:fe:d6:8d:a9:a3:1c: 21:5b:b6:3f:34:65:89:ca:70:2f:61:9c:86:2d:3e: 0c:08:15:b6:3a:c5:c2:a2:4f:10:68:e4:27:fc:24: 8b:02:ab:6c:27:86:45:e4:46:06:f3:05:05:99:30: 29:21:bb:8f:3c:90:ee:9f:fa:dd:19:18:39:59:6b: 36:20:cc:98:15:a5:d4:98:ba:33:43:09:9a:1d:28: 24:71:ff:9b:c9:4b:33:c2:7f:38:4e:cf:a4:9f:74: 3d:c9:0d:5a:18:ca:6e:48:09:15:b9:e0:cf:f2:8a: d0:d4:d9:f6:69:5b:61:00:94:40:3d:be:dc:4b:89: da:94:9c:97:7a:75:f6:73:b0:38:32:0f:03:1d:93: d1:6d:51:33:61:9a:fd:1d:d7:b1:1b:ca:22:8d:51: f8:62:85:74:73:48:35:51:88:d9:6a:d8:cd:8c:64: 5b:46:59:9f:7c:22:c7:79:d8:72:0d:0b:f1:cd:9d: dd:5b:7d:38:a7:5a:e5:50:42:fe:36:7a:77:90:f2: f0:66:4a:08:1e:0e:50:57:27:87:4e:da:b3:29:33: 30:7c:64:09:fc:56:4d:49:60:1f:a8:b4:86:8a:42: e9:93:b1:1f:5e:6b:7a:41:9f:43:35:c8:64:c2:84: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:B8:24:D0:AA:57:77:AD:C2:1B:DA:13:E6:D7:44:DC:19:EC:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a381c78-b1e9-3b2d-95cf-2eb0af0b7320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:81:74:47:21:cd:a6:5a:93:6c:8d:6d:d6:77:0d:5e:49:32: 0f:21:41:4b:f3:77:4e:46:4a:e1:dd:7b:43:d3:6f:07:fe:d7: c1:7e:b3:f2:d5:ff:99:62:8d:20:31:7b:49:2d:97:eb:8d:4f: e2:da:30:f7:38:20:e6:82:15:e5:f7:cd:3c:a2:66:7e:77:51: ba:6b:3d:77:30:c0:b6:19:53:60:b5:dc:4f:c0:cb:8c:3e:2d: b6:6a:7f:08:f1:f0:a3:7f:4d:1a:bc:0a:86:51:19:ac:e7:60: 5f:39:66:2c:3c:7e:46:50:ff:fa:18:32:24:71:b6:b6:6f:73: 42:5c:74:3e:fd:dc:d1:68:be:3b:0d:da:89:2f:e4:16:ba:87: ed:85:f0:aa:6f:a1:84:7c:2c:86:d1:26:68:12:b3:6e:55:0f: ea:ed:50:f7:d1:cc:1e:08:5e:2b:f9:de:44:c2:2c:ba:10:0c: 57:ec:27:99:1c:79:a1:32:da:e4:08:84:fa:b9:65:b2:13:dd: 5a:e5:87:bf:f4:32:e0:af:21:06:04:30:ad:e3:9f:c6:75:da: 9a:0a:38:ce:bc:50:a5:41:ff:e1:2c:ee:c9:66:ed:2f:68:5f: 0d:a5:28:55:5a:72:fe:61:70:23:15:22:b9:0c:0e:c9:21:3a: c5:b0:d2:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY5ImrMnHVq2HcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YzY4ZGFkZTUtYjVkZC00M2Y0LWIyMjYtNWY1ZGE2YWEwOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbipD+eYqw3+1o2poxwhW7Y/NGWJynAvYZyG LT4MCBW2OsXCok8QaOQn/CSLAqtsJ4ZF5EYG8wUFmTApIbuPPJDun/rdGRg5WWs2 IMyYFaXUmLozQwmaHSgkcf+byUszwn84Ts+kn3Q9yQ1aGMpuSAkVueDP8orQ1Nn2 aVthAJRAPb7cS4nalJyXenX2c7A4Mg8DHZPRbVEzYZr9HdexG8oijVH4YoV0c0g1 UYjZatjNjGRbRlmffCLHedhyDQvxzZ3dW304p1rlUEL+Nnp3kPLwZkoIHg5QVyeH TtqzKTMwfGQJ/FZNSWAfqLSGikLpk7EfXmt6QZ9DNchkwoTcYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpAuCTQqld3rcIb2hPm10TcGew4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWEzODFjNzgtYjFlOS0z YjJkLTk1Y2YtMmViMGFmMGI3MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmBdEchzaZak2yNbdZ3DV5JMg8hQUvzd05GSuHde0PTbwf+18F+s/LV /5lijSAxe0ktl+uNT+LaMPc4IOaCFeX3zTyiZn53UbprPXcwwLYZU2C13E/Ay4w+ LbZqfwjx8KN/TRq8CoZRGaznYF85Ziw8fkZQ//oYMiRxtrZvc0JcdD793NFovjsN 2okv5Ba6h+2F8KpvoYR8LIbRJmgSs25VD+rtUPfRzB4IXiv53kTCLLoQDFfsJ5kc eaEy2uQIhPq5ZbIT3Vrlh7/0MuCvIQYEMK3jn8Z12poKOM68UKVB/+Es7slm7S9o Xw2lKFVacv5hcCMVIrkMDskhOsWw0lU= -----END CERTIFICATE-----Generated at Thu Mar 26 20:28:01 2026 by rpki-client