$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa File: 1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa (raw, json) Hash identifier: Hnm2ZTyuG6+rkx0AEXP2RAxJfhqzOtgwQQQapVQR7ys= Subject key identifier: 47:F3:2A:8D:1F:3A:FA:B6:00:48:BE:D1:CA:D3:84:B9:6B:B3:A0:70 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A80348403C63D398C9A80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.134.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:80:34:84:03:c6:3d:39:8c:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=adafcd4f-cf8e-4de7-85ee-22e614872dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:da:0f:57:6b:40:d2:33:77:db:c6:42:98:a7: 6a:82:00:01:e6:b5:41:87:80:b5:c4:6e:29:58:0b: 96:1c:8d:b8:06:de:6f:42:6f:bb:fd:42:8d:56:d9: 1e:38:f3:09:66:b6:f3:7e:e2:71:10:b0:23:28:2f: 22:76:f8:99:bd:32:37:f6:d0:0f:f6:7e:0f:ba:ae: c6:fe:c6:7d:fe:32:71:09:f9:11:d6:c9:76:b9:ea: 61:0f:a3:94:36:22:7a:21:51:c7:28:96:95:d4:d6: c7:2a:d4:42:17:19:20:58:43:65:3a:b7:95:dd:0b: aa:ba:fa:0a:1a:91:43:7c:b2:82:11:30:43:84:c0: 99:72:0d:60:1a:46:9c:23:78:13:76:d8:e0:9c:7c: d6:f6:50:47:55:6f:2a:ab:01:03:6d:85:d1:5f:b7: be:d1:65:49:c2:12:43:b2:5c:b0:75:af:25:6d:49: 8d:98:8e:91:75:67:40:3a:b0:b0:30:ca:06:54:77: 7b:ce:09:6e:fc:9b:07:c0:da:af:f3:0b:f0:cb:b2: 2b:08:24:e1:0d:62:ba:c5:6a:b4:f5:db:df:7b:c5: 8a:5c:2c:d9:08:eb:74:88:85:0f:9e:2c:b0:5c:4b: a0:28:14:f5:26:e7:2e:9e:e2:d4:f4:8f:89:a7:56: 5d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:2A:8D:1F:3A:FA:B6:00:48:BE:D1:CA:D3:84:B9:6B:B3:A0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1b32701f-83a8-3c66-b7ae-56dc9ac0cb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5d:6a:36:6c:e9:ad:18:cd:7c:87:8f:f8:0f:be:10:bc:50: c1:ac:38:7e:6c:2d:25:21:e9:f2:1f:0d:7b:2b:bb:d0:9c:1b: 62:6b:38:5b:8e:e6:8c:91:e7:30:12:87:c7:34:85:f0:ef:b7: 78:bb:fc:12:4b:54:6f:7b:8b:7e:a6:79:50:8c:be:06:6b:e5: 65:9d:ed:7c:61:03:e3:1c:06:eb:4a:58:ad:6b:17:43:ea:ab: c9:85:57:10:0a:e6:e3:f9:ba:0d:f9:78:e8:53:aa:91:da:0a: df:17:8b:c3:72:15:28:d8:fa:5d:3f:28:b2:00:45:f2:6e:dc: d8:9b:8c:6c:73:f8:2a:8d:42:30:31:0b:cf:9e:81:f2:34:92: 30:f0:0b:bc:3e:a9:fb:1c:b6:74:07:29:e5:3e:63:3b:7d:83: 67:3f:5f:a5:9d:de:c9:93:c6:25:98:b8:f7:d2:a0:2d:91:01: 01:e7:1f:e4:cd:6e:da:56:86:ba:97:93:7d:9d:6c:4f:82:8c: fc:24:2e:8b:4f:e5:9b:87:bf:92:79:c4:30:5a:4b:a9:ec:36: a4:c3:8d:7e:58:b7:d3:93:bd:a8:66:23:d0:86:da:aa:bb:7f: f1:b8:4b:fd:f8:cc:e3:da:1d:64:ff:4b:00:e0:df:67:57:ff: 14:d9:4f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoA0hAPGPTmMmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YWRhZmNkNGYtY2Y4ZS00ZGU3LTg1ZWUtMjJlNjE0ODcyZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtoPV2tA0jN328ZCmKdqggAB5rVBh4C1xG4p WAuWHI24Bt5vQm+7/UKNVtkeOPMJZrbzfuJxELAjKC8idviZvTI39tAP9n4Puq7G /sZ9/jJxCfkR1sl2uephD6OUNiJ6IVHHKJaV1NbHKtRCFxkgWENlOreV3QuquvoK GpFDfLKCETBDhMCZcg1gGkacI3gTdtjgnHzW9lBHVW8qqwEDbYXRX7e+0WVJwhJD slywda8lbUmNmI6RdWdAOrCwMMoGVHd7zglu/JsHwNqv8wvwy7IrCCThDWK6xWq0 9dvfe8WKXCzZCOt0iIUPniywXEugKBT1JucunuLU9I+Jp1ZdRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfzKo0fOvq2AEi+0crThLlrs6BwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWIzMjcwMWYtODNhOC0z YzY2LWI3YWUtNTZkYzlhYzBjYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9dajZs6a0YzXyHj/gPvhC8UMGsOH5sLSUh6fIfDXsru9CcG2JrOFuO 5oyR5zASh8c0hfDvt3i7/BJLVG97i36meVCMvgZr5WWd7XxhA+McButKWK1rF0Pq q8mFVxAK5uP5ug35eOhTqpHaCt8Xi8NyFSjY+l0/KLIARfJu3NibjGxz+CqNQjAx C8+egfI0kjDwC7w+qfsctnQHKeU+Yzt9g2c/X6Wd3smTxiWYuPfSoC2RAQHnH+TN btpWhrqXk32dbE+CjPwkLotP5ZuHv5J5xDBaS6nsNqTDjX5Yt9OTvahmI9CG2qq7 f/G4S/34zOPaHWT/SwDg32dX/xTZT9k= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:28 2026 by rpki-client