$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa File: 2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa (raw, json) Hash identifier: dncDym29tvRr4c0OrvxHplVPnl/CJkpW54StwqYXgG8= Subject key identifier: 32:98:A9:C2:65:F9:32:E0:60:58:EC:22:30:07:33:DE:22:F2:89:6D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1172807F910E1B831FBCA180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:80:7f:91:0e:1b:83:1f:bc:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=c2cadfa2-3a5e-4e6a-943c-8e5373db8167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:14:55:f1:25:61:d0:a4:db:c0:3d:a7:12:df: a5:9d:af:04:c2:26:a1:cb:07:4f:40:1f:00:53:a3: 01:c1:c3:2e:5f:eb:f6:58:bb:77:d2:2f:e6:ee:8f: 38:b9:b8:6a:19:34:1f:75:44:ea:c8:77:a5:79:14: a8:be:cf:49:96:ac:42:f9:dc:14:62:e1:bc:9e:aa: 00:c5:4f:7a:57:00:c5:ff:f2:cc:1a:b8:77:5d:ae: 44:1d:1e:2d:e1:f8:d1:63:2b:c5:1a:a5:51:07:15: 1c:36:d1:a6:46:cc:d0:bc:5c:c1:d1:12:58:67:a5: 3d:f0:95:1d:92:b3:c2:56:6c:56:98:55:b4:e1:e3: 01:ef:7b:c7:07:7e:44:0d:2f:36:ab:42:df:77:e5: c6:b6:62:fd:1e:06:57:96:c7:3a:3e:3d:f2:27:d7: 70:03:d0:c5:2e:ff:62:d4:d2:63:00:6a:5d:7e:2d: 59:c9:d6:7b:62:53:93:db:d5:21:87:5e:be:28:63: 9e:f5:32:e7:84:7b:4b:3e:bd:81:f0:95:c1:ab:a6: f5:e0:16:4c:d2:68:ef:cf:e1:54:ec:8a:de:40:6e: 93:b0:4d:4e:52:e1:bf:d4:a4:74:df:51:b1:c1:8f: a0:65:05:1e:53:41:5c:05:eb:9f:42:e8:7b:6a:9e: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:A9:C2:65:F9:32:E0:60:58:EC:22:30:07:33:DE:22:F2:89:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3e:8f:6f:2a:1d:92:59:37:f3:48:7f:25:86:a2:4d:87:60: 27:bb:af:63:05:a7:63:74:8e:1e:58:3f:bb:fe:0d:67:e8:ce: dd:42:da:cc:2f:5b:4b:a9:fa:13:36:54:05:51:78:da:1c:e3: 3f:50:10:61:5f:60:d2:c7:c6:36:d7:32:ea:e4:6a:33:be:68: 50:17:ec:18:85:ea:39:0a:61:90:82:4d:c3:43:05:5c:c5:b0: 75:f5:02:eb:77:57:1a:62:cc:c8:fa:3a:9c:c0:2a:e7:50:7a: 79:64:d2:2d:f1:15:e6:a4:fc:6a:02:e1:da:39:e9:c7:b5:7b: b3:f9:73:0f:49:0f:e7:af:41:2d:4b:b8:10:69:d3:66:86:d8: 84:78:0d:79:8b:e4:be:c4:f9:26:f2:c5:92:b2:80:be:4c:b7: 24:04:5f:5d:6d:83:e6:89:d9:db:58:d6:86:f6:58:91:ae:8e: 50:44:b8:69:0d:38:4b:cd:9c:df:48:e0:15:6d:ce:f5:7a:37: af:78:d7:39:69:db:f6:aa:c6:89:d0:0f:2f:9e:fe:33:cc:10: aa:87:d3:c3:de:56:9b:bb:6f:ed:01:31:c4:36:6b:39:e3:ba: 2d:0a:f9:8d:6f:9b:29:b3:fc:53:d8:d5:1c:66:cc:cb:28:bc: d1:e2:ac:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoB/kQ4bgx+8oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk YzJjYWRmYTItM2E1ZS00ZTZhLTk0M2MtOGU1MzczZGI4MTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBRV8SVh0KTbwD2nEt+lna8EwiahywdPQB8A U6MBwcMuX+v2WLt30i/m7o84ubhqGTQfdUTqyHeleRSovs9JlqxC+dwUYuG8nqoA xU96VwDF//LMGrh3Xa5EHR4t4fjRYyvFGqVRBxUcNtGmRszQvFzB0RJYZ6U98JUd krPCVmxWmFW04eMB73vHB35EDS82q0Lfd+XGtmL9HgZXlsc6Pj3yJ9dwA9DFLv9i 1NJjAGpdfi1ZydZ7YlOT29Uhh16+KGOe9TLnhHtLPr2B8JXBq6b14BZM0mjvz+FU 7IreQG6TsE1OUuG/1KR031GxwY+gZQUeU0FcBeufQuh7ap4+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKYqcJl+TLgYFjsIjAHM94i8oltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmEwZjBjN2UtY2NhMy0z ZjYwLThiZDktNGVlN2Y4ZGRiOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY+j28qHZJZN/NIfyWGok2HYCe7r2MFp2N0jh5YP7v+DWfozt1C2swv W0up+hM2VAVReNoc4z9QEGFfYNLHxjbXMurkajO+aFAX7BiF6jkKYZCCTcNDBVzF sHX1Aut3VxpizMj6OpzAKudQenlk0i3xFeak/GoC4do56ce1e7P5cw9JD+evQS1L uBBp02aG2IR4DXmL5L7E+SbyxZKygL5MtyQEX11tg+aJ2dtY1ob2WJGujlBEuGkN OEvNnN9I4BVtzvV6N6941zlp2/aqxonQDy+e/jPMEKqH08PeVpu7b+0BMcQ2aznj ui0K+Y1vmymz/FPY1RxmzMsovNHirOc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:30:39 2026 by rpki-client