$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa File: 2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa (raw, json) Hash identifier: hxxyt4Z28hMdgKlTI0qH/UyVKMsqLlKh5itnJvrL19o= Subject key identifier: 4E:29:71:ED:EF:A7:72:F6:46:91:9D:64:CE:68:45:BF:87:7A:4F:57 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D86B7A770EC0B3F8488B0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:86:b7:a7:70:ec:0b:3f:84:88:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a973598a-29a1-4813-9286-05d81fcd0103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:35:fc:6b:d1:ac:b5:88:24:15:18:b4:b5: 5e:a4:f7:76:dc:6c:55:45:59:73:2f:87:87:24:8e: 91:73:c0:ef:c2:31:a8:ba:96:8c:30:6c:9a:5d:b2: 90:c2:3c:21:bf:e6:3a:e9:99:c0:e9:e6:9f:e7:06: f2:95:7e:6f:33:5c:ff:76:e3:15:b8:b7:0f:66:46: be:28:02:79:e9:3c:29:f4:3a:35:e6:ce:6f:10:43: 67:37:a7:dc:e9:1a:76:28:a4:b9:20:c2:8a:60:15: 11:4d:9f:94:8b:68:9c:d4:79:e9:1e:2d:c7:ed:e1: 9b:ad:96:15:e6:bb:a9:de:df:51:9c:84:d4:6e:3e: b4:59:c0:79:54:7a:1d:da:44:47:fb:4b:56:52:38: 52:47:45:c0:85:81:4b:dd:45:ea:bd:4a:98:98:c1: 4b:cf:39:71:89:09:2d:bf:c0:94:ba:f2:0c:91:fc: 5e:43:b2:6a:b9:21:10:49:1b:61:5d:68:04:24:f9: 69:84:e4:59:a7:4c:c8:48:52:e4:79:91:2f:88:07: e1:81:8f:21:39:33:1a:d0:73:54:bd:9f:9c:1b:6b: a3:bc:3b:bd:f2:c5:ec:ac:d9:cb:a2:79:1f:ea:86: d8:8b:20:dd:b7:47:35:b9:55:fb:c8:ff:05:f8:96: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:71:ED:EF:A7:72:F6:46:91:9D:64:CE:68:45:BF:87:7A:4F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0d:73:1d:3a:e9:bb:83:76:5a:f8:1d:13:80:56:73:02:2f: 54:9a:37:b8:7b:99:91:01:b7:d0:43:5b:84:35:23:2a:a4:64: 19:fb:7c:a6:46:13:49:9a:39:46:ef:26:41:af:7b:3a:96:19: 97:ad:13:45:a6:a5:99:5c:a5:63:7d:81:7a:35:ab:19:6f:c8: b4:2b:e2:10:dc:12:03:04:fd:06:76:b1:a2:e2:fa:7a:1f:77: 90:1f:24:e7:67:2b:6e:af:3a:38:cc:d7:49:d5:34:82:4a:95: 57:8a:02:35:cb:18:e3:00:91:32:9a:5b:60:ee:f1:da:ba:13: 5e:03:5f:bd:94:81:00:54:ad:6a:22:ae:96:db:d5:74:33:f5: d2:21:8a:55:95:43:ec:b0:43:c9:5a:90:a5:26:b6:c0:e5:59: 69:5c:fb:97:05:c7:9a:14:81:d1:8b:ab:f3:45:17:ee:1a:a4: ce:0f:c3:5c:13:34:68:d7:87:69:47:00:2a:7d:20:13:4e:7c: 8a:42:5b:ef:c6:5d:04:4f:c2:aa:3c:b3:24:0b:c3:62:1a:2c: 6e:53:f3:ea:19:66:ba:35:0f:b9:6a:28:6b:52:69:21:01:b5: f7:69:e3:11:7c:91:e4:0e:44:5b:95:15:a4:7f:97:71:fd:5e: 15:e7:fd:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYa3p3DsCz+EiLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTk3MzU5OGEtMjlhMS00ODEzLTkyODYtMDVkODFmY2QwMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukk1/GvRrLWIJBUYtLVepPd23GxVRVlzL4eH JI6Rc8DvwjGoupaMMGyaXbKQwjwhv+Y66ZnA6eaf5wbylX5vM1z/duMVuLcPZka+ KAJ56Twp9Do15s5vEENnN6fc6Rp2KKS5IMKKYBURTZ+Ui2ic1HnpHi3H7eGbrZYV 5rup3t9RnITUbj60WcB5VHod2kRH+0tWUjhSR0XAhYFL3UXqvUqYmMFLzzlxiQkt v8CUuvIMkfxeQ7JquSEQSRthXWgEJPlphORZp0zISFLkeZEviAfhgY8hOTMa0HNU vZ+cG2ujvDu98sXsrNnLonkf6obYiyDdt0c1uVX7yP8F+JY60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4pce3vp3L2RpGdZM5oRb+Hek9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmE5ZWVhNWUtZmZhZi0z N2ZiLWE2ZjMtZGJlN2IwNGRmYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcNcx066buDdlr4HROAVnMCL1SaN7h7mZEBt9BDW4Q1IyqkZBn7fKZG E0maOUbvJkGvezqWGZetE0WmpZlcpWN9gXo1qxlvyLQr4hDcEgME/QZ2saLi+nof d5AfJOdnK26vOjjM10nVNIJKlVeKAjXLGOMAkTKaW2Du8dq6E14DX72UgQBUrWoi rpbb1XQz9dIhilWVQ+ywQ8lakKUmtsDlWWlc+5cFx5oUgdGLq/NFF+4apM4Pw1wT NGjXh2lHACp9IBNOfIpCW+/GXQRPwqo8syQLw2IaLG5T8+oZZro1D7lqKGtSaSEB tfdp4xF8keQORFuVFaR/l3H9XhXn/RA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:57 2026 by rpki-client