$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2beaf43d-cadb-35b2-8177-98ca27ff1332.roa File: 2beaf43d-cadb-35b2-8177-98ca27ff1332.roa (raw, json) Hash identifier: jK5zHa58wXK/g+B8EFpg1MoT0iC93UkNwvRSNI37tB8= Subject key identifier: 75:B7:B3:6A:34:BD:6A:F9:90:FE:37:1A:45:0D:FF:EF:D4:D3:3A:90 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8E26FB8632CDD39E9D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2beaf43d-cadb-35b2-8177-98ca27ff1332.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8e:26:fb:86:32:cd:d3:9e:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=c591a82b-fb2c-4ef3-b3e8-23302656598c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:f6:4c:af:ee:db:27:5c:26:27:13:3d:06: 09:4f:69:09:8c:68:37:11:db:04:d5:ef:a0:f9:6f: 1b:35:5f:8e:d5:ea:cd:bd:08:15:d6:07:e3:81:10: 2c:08:b9:6f:f6:18:64:ed:a5:19:aa:3b:78:5a:4e: 2f:4f:8a:48:01:fe:fc:09:21:0a:8a:b8:5c:ea:a6: 00:8c:9e:50:8e:11:2f:12:dc:5f:cf:70:1f:f9:24: b7:f5:8f:ee:27:3a:e6:b4:74:92:bd:55:d8:dd:f9: 21:cb:e7:64:a2:b1:9f:70:bf:2b:2b:c3:21:8b:7a: b4:6e:21:a3:e7:b3:aa:16:d5:e1:60:94:94:0b:54: 9a:2d:8f:d1:ad:94:7c:d5:55:8f:18:79:59:7e:a1: 16:97:01:40:46:85:5b:04:53:77:f7:ff:f4:20:85: bc:17:a4:ac:b2:83:ab:4c:bf:8a:ed:85:3a:5f:be: f4:00:a2:8a:9b:01:1e:72:1f:75:d2:0d:40:5a:db: 3d:0d:39:9f:ca:89:a3:02:9d:52:2e:7e:17:3a:a0: 18:c8:2b:ae:0f:73:44:7b:03:cb:eb:c0:95:be:09: 55:6b:bc:61:bf:a4:ed:03:a8:42:e3:0a:98:cb:a6: 1d:19:c4:73:e6:ed:da:a1:2a:7c:d2:5e:75:3c:2a: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B7:B3:6A:34:BD:6A:F9:90:FE:37:1A:45:0D:FF:EF:D4:D3:3A:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2beaf43d-cadb-35b2-8177-98ca27ff1332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:96:ac:e2:37:6f:a3:e3:a0:ef:44:b2:02:65:1c:22:7e:ea: 71:98:2a:22:1f:c0:23:92:13:1d:96:ca:c8:ac:43:39:ca:d2: a6:6d:27:a2:75:81:f0:45:44:b9:ac:eb:dc:5b:3a:91:47:23: 25:42:18:fd:62:9a:03:7a:95:8f:f4:fb:df:f3:0d:48:81:a0: f4:11:4f:d2:4f:58:7c:74:2a:37:49:5c:1d:18:5a:ab:8e:e5: 17:7b:6a:4d:19:55:d5:a5:a5:d5:76:9e:36:81:25:ca:60:ad: 81:8c:51:91:f5:ee:52:f6:73:1d:68:8f:7b:19:1f:1c:75:25: 0d:0d:b0:a6:a1:92:32:40:0c:6d:f4:6c:23:39:27:10:f9:44: a6:f1:84:96:66:a2:e2:d7:87:67:48:60:df:8c:a5:9c:87:27: e1:09:bb:f7:12:59:5f:0f:e1:bb:b5:6b:d8:8f:49:4d:d5:4f: 10:6f:76:c3:d7:54:dc:4a:fc:79:ae:7c:0a:ee:10:d4:a6:5a: 7f:be:27:87:52:2e:a8:87:35:17:a1:18:fe:5a:6c:ac:48:e3: 57:92:ff:81:a8:b2:cf:83:44:3c:30:47:ee:72:da:82:d1:b2: 0f:2f:b8:de:d3:93:85:8f:74:ea:9b:92:ec:9e:82:60:c3:48: c0:31:fe:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY4m+4YyzdOenQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YzU5MWE4MmItZmIyYy00ZWYzLWIzZTgtMjMzMDI2NTY1OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNb2TK/u2ydcJicTPQYJT2kJjGg3EdsE1e+g +W8bNV+O1erNvQgV1gfjgRAsCLlv9hhk7aUZqjt4Wk4vT4pIAf78CSEKirhc6qYA jJ5QjhEvEtxfz3Af+SS39Y/uJzrmtHSSvVXY3fkhy+dkorGfcL8rK8Mhi3q0biGj 57OqFtXhYJSUC1SaLY/RrZR81VWPGHlZfqEWlwFARoVbBFN39//0IIW8F6SssoOr TL+K7YU6X770AKKKmwEech910g1AWts9DTmfyomjAp1SLn4XOqAYyCuuD3NEewPL 68CVvglVa7xhv6TtA6hC4wqYy6YdGcRz5u3aoSp80l51PCq0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW3s2o0vWr5kP43GkUN/+/U0zqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmJlYWY0M2QtY2FkYi0z NWIyLTgxNzctOThjYTI3ZmYxMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmWrOI3b6PjoO9EsgJlHCJ+6nGYKiIfwCOSEx2WysisQznK0qZtJ6J1 gfBFRLms69xbOpFHIyVCGP1imgN6lY/0+9/zDUiBoPQRT9JPWHx0KjdJXB0YWquO 5Rd7ak0ZVdWlpdV2njaBJcpgrYGMUZH17lL2cx1oj3sZHxx1JQ0NsKahkjJADG30 bCM5JxD5RKbxhJZmouLXh2dIYN+MpZyHJ+EJu/cSWV8P4bu1a9iPSU3VTxBvdsPX VNxK/HmufAruENSmWn++J4dSLqiHNRehGP5abKxI41eS/4Goss+DRDwwR+5y2oLR sg8vuN7Tk4WPdOqbkuyegmDDSMAx/no= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:05 2026 by rpki-client