$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa File: 291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa (raw, json) Hash identifier: zAuGdkJBE5DsXL+3CYBoaM5fzE16p4Q3CH+SRv1qOlA= Subject key identifier: 75:16:2D:9D:EF:4D:28:78:22:15:B8:2C:D7:9F:2B:6D:14:49:8A:4C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11727F333F6F922E8CE25A20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:7f:33:3f:6f:92:2e:8c:e2:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=a1f1de63-eb35-44fc-94d3-0ede102de859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:55:52:5f:3c:1e:76:10:f3:c8:ed:bb:ab: d7:85:d2:de:94:60:98:12:72:36:e1:e7:67:a4:65: f3:8e:47:f1:29:70:f6:12:fd:b2:6d:b4:bc:32:e3: 63:62:96:a2:28:6f:1c:51:49:0f:ad:74:02:7a:52: 36:aa:a4:fd:8d:0d:f4:a5:ce:6c:01:63:b0:b5:95: fa:37:99:d9:fe:5b:82:8b:9b:1b:2a:30:10:9a:1b: c1:bb:9c:e3:45:73:66:cc:6e:42:90:5a:ec:8b:d4: 11:ff:8f:be:55:73:4a:58:3c:3b:d3:62:27:65:b4: b2:f8:5a:06:6b:bb:9f:89:8f:f1:eb:31:51:f5:33: cc:a3:10:30:da:0b:d6:fc:19:1e:7f:7f:4a:ae:f4: 2c:c1:09:45:eb:33:fe:8d:98:8a:ef:02:5c:2f:a6: c0:a3:96:7d:0b:cb:83:59:e8:75:cf:17:27:7b:3d: 37:91:f9:49:8e:5c:ce:37:b3:bf:fc:17:7f:2c:1b: 2f:85:93:8d:aa:d9:c2:ab:c7:8b:7e:ba:f5:e0:ff: 64:a3:65:da:7f:04:76:d1:cc:30:f7:14:6d:60:b2: 88:c6:57:ea:6d:eb:a3:48:13:69:6b:d6:4f:21:0f: fd:9b:8d:06:ca:24:4b:4c:1f:d8:69:e3:fa:8d:14: ea:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:16:2D:9D:EF:4D:28:78:22:15:B8:2C:D7:9F:2B:6D:14:49:8A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/291a0ab2-bb94-342b-9988-78abf1c8dfcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5b:6c:e5:cf:16:d9:02:29:c6:01:4d:19:77:5c:b7:37:b7: b0:eb:3f:87:2d:b3:6f:f8:2c:36:cf:ea:58:28:e6:14:e6:8c: 42:c1:be:d7:9f:2a:b2:72:7e:ad:49:ff:a1:6a:91:9b:e9:9a: 64:4c:3f:af:a4:98:2b:1c:41:24:83:bb:4a:c8:93:71:13:2b: 75:ec:77:a4:00:54:fd:3d:61:8c:66:80:f3:35:73:bf:24:be: 24:14:47:46:83:e2:d5:85:de:56:60:0e:b3:a4:f3:8c:0e:38: 96:ab:88:cb:0f:4a:31:62:61:8c:9e:56:ec:f3:e6:33:ba:51: 5b:bf:4f:1f:00:fd:8d:11:fc:6a:8a:42:62:74:35:34:74:6c: a2:9a:3e:84:aa:a3:99:9a:c0:60:95:d1:d2:2d:43:eb:c0:34: 2c:a4:e8:a6:63:5f:d1:70:6b:f8:68:0e:6e:45:85:a7:f2:bd: 91:fb:1f:0c:70:31:a3:fc:fb:15:9b:fe:33:76:10:52:99:46: 3e:b6:07:53:b1:c4:38:b5:d1:ad:2b:1d:32:9e:48:df:84:74: 02:69:c6:08:f0:bf:5d:8f:90:06:b8:15:98:4e:ac:83:c1:6f: 11:94:50:d2:24:0f:e7:47:83:07:82:00:b0:7f:06:f1:59:2c: 25:d6:77:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcn8zP2+SLoziWiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk YTFmMWRlNjMtZWIzNS00NGZjLTk0ZDMtMGVkZTEwMmRlODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuftVUl88HnYQ88jtu6vXhdLelGCYEnI24edn pGXzjkfxKXD2Ev2ybbS8MuNjYpaiKG8cUUkPrXQCelI2qqT9jQ30pc5sAWOwtZX6 N5nZ/luCi5sbKjAQmhvBu5zjRXNmzG5CkFrsi9QR/4++VXNKWDw702InZbSy+FoG a7ufiY/x6zFR9TPMoxAw2gvW/Bkef39KrvQswQlF6zP+jZiK7wJcL6bAo5Z9C8uD Weh1zxcnez03kflJjlzON7O//Bd/LBsvhZONqtnCq8eLfrr14P9ko2XafwR20cww 9xRtYLKIxlfqbeujSBNpa9ZPIQ/9m40GyiRLTB/YaeP6jRTqBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUWLZ3vTSh4IhW4LNefK20USYpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjkxYTBhYjItYmI5NC0z NDJiLTk5ODgtNzhhYmYxYzhkZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBbbOXPFtkCKcYBTRl3XLc3t7DrP4cts2/4LDbP6lgo5hTmjELBvtef KrJyfq1J/6FqkZvpmmRMP6+kmCscQSSDu0rIk3ETK3Xsd6QAVP09YYxmgPM1c78k viQUR0aD4tWF3lZgDrOk84wOOJariMsPSjFiYYyeVuzz5jO6UVu/Tx8A/Y0R/GqK QmJ0NTR0bKKaPoSqo5mawGCV0dItQ+vANCyk6KZjX9Fwa/hoDm5FhafyvZH7Hwxw MaP8+xWb/jN2EFKZRj62B1OxxDi10a0rHTKeSN+EdAJpxgjwv12PkAa4FZhOrIPB bxGUUNIkD+dHgweCALB/BvFZLCXWd84= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:19 2026 by rpki-client