$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa File: 2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa (raw, json) Hash identifier: FGawwM9Ro9S6ACK+cvs3QJqf59e+BwXaKIZ9TWexSDY= Subject key identifier: 4D:7E:A9:C3:55:3D:44:EF:5B:94:F9:54:36:1D:D6:EF:80:72:15:F4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D878C27DFF95E7BAD3850 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:87:8c:27:df:f9:5e:7b:ad:38:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=797fe1d4-af1a-4e05-b285-6bcf354c83bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:1e:6d:33:28:02:06:d9:92:97:e8:a4:24: 8c:95:8b:2e:2b:e3:bd:ac:39:16:c7:f8:f4:08:2d: c0:34:cc:81:fe:6c:d6:d2:28:36:dc:ec:41:c0:de: d3:7a:f0:6c:34:05:e2:27:34:58:ce:b4:8b:aa:f4: 3a:6f:ed:f1:ae:8c:99:e1:97:8f:7f:9b:fe:f6:06: a1:4a:b5:8a:7c:2d:9e:9f:54:3f:d5:d5:c7:dc:bc: c7:d8:a5:2e:d7:70:22:cb:08:29:20:3b:9e:ad:49: 60:66:9b:ff:94:12:e1:1c:ef:47:ea:34:a8:1e:c3: 36:94:a4:f9:fc:0a:a9:94:d4:db:5a:29:63:81:bc: da:a4:22:41:2d:29:1c:c7:74:f2:19:a2:49:d0:da: 6a:25:a8:42:06:6c:32:6b:be:5f:13:83:ba:65:97: 01:96:27:b0:98:75:de:0d:15:9d:4e:64:7a:5a:46: f1:01:fe:72:b6:a0:07:86:0e:ea:5e:7b:f2:e4:43: 16:23:7b:bc:49:c9:03:6e:aa:c7:6f:bd:72:40:b9: 81:81:8e:0d:f9:4a:a6:cc:4a:fc:c1:77:00:63:68: 7c:1f:5f:0b:76:a8:ce:f5:47:40:34:d6:32:62:33: c2:69:76:a7:be:7f:45:e4:d6:02:68:37:22:03:1c: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7E:A9:C3:55:3D:44:EF:5B:94:F9:54:36:1D:D6:EF:80:72:15:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2bd8d665-eb6d-3ad0-b8d9-8a375003614a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8f:67:97:fe:d8:a7:d4:fe:54:b0:bc:85:8b:2f:60:90:5a: 82:82:55:b5:aa:76:23:05:da:c3:98:21:24:50:79:7b:f2:70: 7e:b0:12:c2:b3:65:fa:78:f3:76:d3:e7:a1:f4:07:c5:6e:cd: 29:aa:e7:0e:19:a4:56:0f:df:dc:54:bd:5c:39:12:77:26:00: a5:27:bf:14:8d:a6:b3:17:e3:a8:bb:94:d2:a8:b2:a0:85:22: 8a:01:08:50:27:45:9b:73:8a:67:87:e6:0d:1d:b5:6a:44:9b: d2:c5:61:5b:2f:2e:77:7a:5b:a7:9f:d4:52:04:8d:76:34:e0: 92:a6:e7:70:cf:65:92:6e:c3:b4:57:a4:e6:12:9a:30:fc:3a: 70:7a:90:75:90:42:b7:2c:a4:03:7e:7b:10:a8:82:6f:62:fe: af:99:ca:4a:cd:f7:4e:b3:e7:9b:61:49:50:57:05:40:21:9a: 1a:09:23:00:4e:1c:d8:ed:aa:5d:29:75:cd:2d:41:5a:82:29: 95:ea:a1:f9:40:03:4e:46:e0:b8:27:09:6b:8c:cd:e4:02:30: 86:27:11:fe:6d:c1:80:64:27:2d:7e:6e:dd:ca:44:81:62:c9: c5:f4:5d:3a:97:83:1c:84:33:24:52:df:7f:07:45:98:09:04: bd:5d:9c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYeMJ9/5XnutOFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Nzk3ZmUxZDQtYWYxYS00ZTA1LWIyODUtNmJjZjM1NGM4M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeUebTMoAgbZkpfopCSMlYsuK+O9rDkWx/j0 CC3ANMyB/mzW0ig23OxBwN7TevBsNAXiJzRYzrSLqvQ6b+3xroyZ4ZePf5v+9gah SrWKfC2en1Q/1dXH3LzH2KUu13AiywgpIDuerUlgZpv/lBLhHO9H6jSoHsM2lKT5 /AqplNTbWiljgbzapCJBLSkcx3TyGaJJ0NpqJahCBmwya75fE4O6ZZcBliewmHXe DRWdTmR6WkbxAf5ytqAHhg7qXnvy5EMWI3u8SckDbqrHb71yQLmBgY4N+UqmzEr8 wXcAY2h8H18LdqjO9UdANNYyYjPCaXanvn9F5NYCaDciAxxPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1+qcNVPUTvW5T5VDYd1u+AchX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmJkOGQ2NjUtZWI2ZC0z YWQwLWI4ZDktOGEzNzUwMDM2MTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6PZ5f+2KfU/lSwvIWLL2CQWoKCVbWqdiMF2sOYISRQeXvycH6wEsKz Zfp483bT56H0B8VuzSmq5w4ZpFYP39xUvVw5EncmAKUnvxSNprMX46i7lNKosqCF IooBCFAnRZtzimeH5g0dtWpEm9LFYVsvLnd6W6ef1FIEjXY04JKm53DPZZJuw7RX pOYSmjD8OnB6kHWQQrcspAN+exCogm9i/q+ZykrN906z55thSVBXBUAhmhoJIwBO HNjtql0pdc0tQVqCKZXqoflAA05G4LgnCWuMzeQCMIYnEf5twYBkJy1+bt3KRIFi ycX0XTqXgxyEMyRS338HRZgJBL1dnMA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:24 2026 by rpki-client