$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa File: 1a5f887f-53ef-3852-8ecd-31eb4511b635.roa (raw, json) Hash identifier: I2YMfKavt+nfotzCXvmpJlb64O2TiS+gZFR5Ye7TxCo= Subject key identifier: CA:CE:9B:35:A9:81:C8:2B:B1:A5:65:B1:9B:C2:CF:33:8D:32:A1:FE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9435EC4EE67B528FDA50 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:94:35:ec:4e:e6:7b:52:8f:da:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=bafe1a76-6c5d-4225-b990-a5fe7affc6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:8b:b0:21:f0:eb:73:3c:3e:14:be:d0:d2: af:65:49:f5:ae:bf:de:73:73:78:5b:78:1a:66:d3: 36:af:ac:1c:7b:2f:a6:2a:a2:e8:4e:06:52:a2:bd: c2:c3:ce:1f:9e:50:04:79:25:f3:5a:11:5d:ad:5b: d6:cc:17:22:6d:45:a9:ea:14:98:ad:4e:80:4e:10: 3f:f7:ed:0f:c3:8c:c9:ff:64:6c:03:a1:25:46:8b: fa:19:c5:ad:d0:95:b7:83:ac:98:17:0a:fa:8e:33: a5:d6:cd:40:9c:35:ea:3d:b1:07:68:c1:d9:14:b4: ba:6c:39:88:82:b7:0f:c3:c5:9c:79:be:48:ce:ed: 95:08:ba:a5:14:93:bf:ca:1f:1a:bd:5f:dc:eb:df: 14:37:41:95:d8:1a:62:48:48:1a:8b:71:78:88:d2: dc:c0:53:25:5e:d0:07:c2:de:2d:54:eb:f8:6e:0c: 27:70:62:4c:62:92:4e:af:d3:ed:0c:bd:80:51:30: 3b:bf:70:bb:72:85:0f:c0:c2:ea:2e:43:e1:76:23: 7b:e9:a1:07:ec:b2:16:da:61:0b:10:a6:37:8d:a9: b4:f9:a3:46:6f:db:5c:76:de:fe:c1:1f:2f:05:d8: 4b:4b:95:ca:4a:38:c0:cf:be:39:cb:89:ff:1a:29: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CE:9B:35:A9:81:C8:2B:B1:A5:65:B1:9B:C2:CF:33:8D:32:A1:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:80:c1:c4:68:9b:21:96:a7:75:5a:98:da:9b:bc:aa:b5:dd: 29:7c:02:af:f2:44:1d:8b:ae:2d:93:7f:ba:78:5e:18:69:58: c6:76:15:09:bc:29:09:5e:13:10:b6:c4:59:e2:b5:bc:be:2a: 41:ab:02:50:d3:e0:ad:16:58:32:b7:a8:e5:ce:60:76:78:3c: 77:0a:db:a5:a1:c8:6d:aa:49:c1:5c:41:1d:a7:c4:27:d0:fd: 13:9c:88:b6:5c:4a:a9:63:f7:d2:15:5a:07:47:88:26:53:64: f9:27:31:02:b8:cb:ac:47:a4:51:19:75:ff:c9:72:d3:a3:0f: 94:f3:4a:92:58:ac:e4:65:67:f5:dc:34:9c:02:c8:30:06:a0: 2b:ea:12:14:26:85:ac:c5:ab:ae:8d:cd:ac:46:a7:a8:83:3b: 09:5e:bb:e9:c9:ec:92:ab:dc:da:66:ed:e9:1f:3c:23:ef:f3: a7:ee:a6:b0:40:ef:0b:32:8b:c5:0e:5e:58:ee:f1:4a:78:9b: ec:91:e4:6e:cd:95:65:31:bc:06:2b:4a:92:b9:64:e0:d3:de: 82:99:7c:d4:78:b2:8f:27:7e:45:60:29:4c:eb:8e:08:c7:a8: ce:60:d0:e2:91:da:0b:7c:dc:a4:21:99:86:06:a5:57:46:d1: f6:7b:99:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZQ17E7me1KP2lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YmFmZTFhNzYtNmM1ZC00MjI1LWI5OTAtYTVmZTdhZmZjNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLmLsCHw63M8PhS+0NKvZUn1rr/ec3N4W3ga ZtM2r6wcey+mKqLoTgZSor3Cw84fnlAEeSXzWhFdrVvWzBcibUWp6hSYrU6AThA/ 9+0Pw4zJ/2RsA6ElRov6GcWt0JW3g6yYFwr6jjOl1s1AnDXqPbEHaMHZFLS6bDmI grcPw8Wceb5Izu2VCLqlFJO/yh8avV/c698UN0GV2BpiSEgai3F4iNLcwFMlXtAH wt4tVOv4bgwncGJMYpJOr9PtDL2AUTA7v3C7coUPwMLqLkPhdiN76aEH7LIW2mEL EKY3jam0+aNGb9tcdt7+wR8vBdhLS5XKSjjAz745y4n/Gimc6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrOmzWpgcgrsaVlsZvCzzONMqH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWE1Zjg4N2YtNTNlZi0z ODUyLThlY2QtMzFlYjQ1MTFiNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOAwcRomyGWp3VamNqbvKq13Sl8Aq/yRB2Lri2Tf7p4XhhpWMZ2FQm8 KQleExC2xFnitby+KkGrAlDT4K0WWDK3qOXOYHZ4PHcK26WhyG2qScFcQR2nxCfQ /ROciLZcSqlj99IVWgdHiCZTZPknMQK4y6xHpFEZdf/JctOjD5TzSpJYrORlZ/Xc NJwCyDAGoCvqEhQmhazFq66NzaxGp6iDOwleu+nJ7JKr3Npm7ekfPCPv86fuprBA 7wsyi8UOXlju8Up4m+yR5G7NlWUxvAYrSpK5ZODT3oKZfNR4so8nfkVgKUzrjgjH qM5g0OKR2gt83KQhmYYGpVdG0fZ7mVM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:16 2026 by rpki-client