$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa File: 2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa (raw, json) Hash identifier: cUfNU3gYgL4sym6QgkZ0VIKN4DXxJW9U0LP2n3tooaA= Subject key identifier: BD:31:6D:8E:08:94:6E:40:7A:BC:A9:2C:DE:F6:22:3F:F0:C8:2D:7C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D85F2E7D6D625130C0C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:85:f2:e7:d6:d6:25:13:0c:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=5086cb72-c6e8-4832-8d16-35eb8920773f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:92:93:26:04:cf:c6:0b:9b:83:76:14:11: 89:a4:b8:61:be:c7:b7:c4:27:96:fb:91:cc:33:e1: d6:d9:47:82:97:e1:3a:ea:01:f3:06:e1:ae:ff:6b: c7:9a:42:34:89:c7:3d:ce:cd:bf:fc:6d:46:32:5c: 04:22:ee:3b:e3:fc:83:ce:1b:f6:3b:68:55:a1:10: 79:0f:48:5e:50:b6:cd:8b:d7:a9:6d:e0:cc:a1:1f: 50:31:de:11:c8:52:41:8a:ad:4e:5a:df:b1:c5:d3: 66:0f:4e:6d:5c:83:aa:cb:aa:fe:ce:f9:da:5a:f0: af:9d:7b:3d:78:80:79:cc:4c:c8:78:71:7e:92:2a: 7d:73:f3:f5:d5:7d:87:f2:66:03:eb:77:26:21:01: 85:1e:a3:08:00:2b:49:b2:86:ed:9f:f3:82:73:43: 60:91:ae:53:b4:74:c2:d6:50:b5:4c:f5:c0:a2:a1: 64:aa:71:39:75:af:5e:ae:8c:2c:02:8d:70:6a:43: 3a:9a:1d:90:d9:ab:d8:65:df:02:60:06:e2:b8:0f: 71:81:c1:f0:40:33:60:5f:de:c5:b5:af:66:e5:99: e9:f9:55:36:35:13:04:d5:77:ab:15:8f:01:9a:ca: 13:f0:97:66:c4:fd:52:0e:84:b4:19:35:b1:ce:0b: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:31:6D:8E:08:94:6E:40:7A:BC:A9:2C:DE:F6:22:3F:F0:C8:2D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9b:74:2e:88:53:10:80:11:cf:f0:65:e3:92:ce:3e:a2:40: 09:59:38:12:63:b3:e5:98:4b:00:41:e4:26:92:e0:a7:30:70: 00:08:55:16:c5:33:6c:ce:cb:7d:8f:b0:eb:5a:02:54:58:54: d5:4d:8c:91:35:42:43:16:2b:d4:ba:e9:1b:8a:66:ab:d5:7c: 84:07:f5:73:da:90:83:67:95:c1:b2:12:01:4f:bf:7d:f7:36: 2e:a4:e1:34:5e:a4:de:4c:32:4b:e7:a9:bc:b3:de:5c:9c:84: 29:48:96:95:d0:3e:09:77:20:ca:b3:6b:4d:05:da:8d:dd:4c: ea:6d:7d:d0:3d:8d:3c:31:1f:cc:ec:bd:9a:7b:38:99:aa:c0: 97:1b:20:82:47:7c:73:b7:b2:2e:42:e9:3f:dd:d8:cf:41:39: a6:2c:cc:36:4e:e7:c5:fd:65:4d:78:5d:cf:e9:b7:16:71:65: b6:1b:ef:da:de:69:c3:99:01:a1:f9:18:e9:e5:09:33:f1:89: c5:9a:3b:50:e1:3b:ab:08:67:d7:02:63:14:2d:65:2c:42:02: df:97:cb:7d:84:0a:d1:43:3c:5c:2e:9a:4a:1b:50:1f:60:8e: 0b:2c:ad:cf:e2:4c:d0:f1:84:f3:e5:25:60:aa:fa:24:33:90: 1b:f7:17:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYXy59bWJRMMDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NTA4NmNiNzItYzZlOC00ODMyLThkMTYtMzVlYjg5MjA3NzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwaSkyYEz8YLm4N2FBGJpLhhvse3xCeW+5HM M+HW2UeCl+E66gHzBuGu/2vHmkI0icc9zs2//G1GMlwEIu474/yDzhv2O2hVoRB5 D0heULbNi9epbeDMoR9QMd4RyFJBiq1OWt+xxdNmD05tXIOqy6r+zvnaWvCvnXs9 eIB5zEzIeHF+kip9c/P11X2H8mYD63cmIQGFHqMIACtJsobtn/OCc0Ngka5TtHTC 1lC1TPXAoqFkqnE5da9erowsAo1wakM6mh2Q2avYZd8CYAbiuA9xgcHwQDNgX97F ta9m5Znp+VU2NRME1XerFY8BmsoT8JdmxP1SDoS0GTWxzgsiuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0xbY4IlG5AerypLN72Ij/wyC18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmFiODExYjQtNmY0OS0z Y2Y1LTg0MmItMGUwNjE4YWFkYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+bdC6IUxCAEc/wZeOSzj6iQAlZOBJjs+WYSwBB5CaS4KcwcAAIVRbF M2zOy32PsOtaAlRYVNVNjJE1QkMWK9S66RuKZqvVfIQH9XPakINnlcGyEgFPv333 Ni6k4TRepN5MMkvnqbyz3lychClIlpXQPgl3IMqza00F2o3dTOptfdA9jTwxH8zs vZp7OJmqwJcbIIJHfHO3si5C6T/d2M9BOaYszDZO58X9ZU14Xc/ptxZxZbYb79re acOZAaH5GOnlCTPxicWaO1DhO6sIZ9cCYxQtZSxCAt+Xy32ECtFDPFwumkobUB9g jgssrc/iTNDxhPPlJWCq+iQzkBv3F0U= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:45 2026 by rpki-client