$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa File: 2e33a78a-a08a-30af-89e7-9b336e2d0057.roa (raw, json) Hash identifier: N36XRS8C9ZhaGMm4jcI0VB3L7rUPKkrF2gDd7gninxQ= Subject key identifier: 66:02:D9:29:0F:73:60:24:1A:E0:04:B2:BA:90:58:B7:3C:73:32:9B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D86A6DFC976D761150300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:86:a6:df:c9:76:d7:61:15:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=500c549a-a807-49c4-bfc9-8b737193330c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:aa:fa:51:54:8d:d2:3e:8e:eb:19:8e:99: ce:8e:b7:44:5a:d4:9e:09:dc:06:93:99:09:b8:dc: b6:c6:1c:97:ec:cf:bf:f0:f2:e5:02:99:67:93:64: 83:6d:bc:f5:f6:0e:49:56:07:56:81:67:64:58:2a: 61:db:e4:52:ff:f0:10:5b:e9:29:31:d7:bd:61:dc: b9:04:2d:61:7e:e1:ac:6c:cf:98:2c:66:6e:b9:85: c1:9a:88:1b:d3:e4:a1:19:6a:77:ac:21:fa:5b:8e: 17:9c:ce:68:b2:b0:80:9d:c7:e4:84:7a:79:35:bb: da:70:0b:26:98:36:e1:8e:d3:66:d3:4c:94:7c:6e: 16:bc:21:2b:42:8e:ad:58:57:53:56:65:e4:9a:42: 99:af:7a:97:82:b3:6b:b4:a0:76:83:ca:bc:1a:29: 5d:cb:f0:12:d4:86:f5:a9:d4:31:f0:26:68:15:84: 3d:74:26:76:1a:9c:83:a1:4a:56:f8:c6:d6:23:8f: d2:4f:24:ed:25:f3:50:c9:a0:be:d0:81:6d:b6:c4: 1e:93:37:89:ab:01:57:42:9e:85:7e:0d:fb:42:f4: 3a:bb:0c:b6:82:70:7d:5f:4c:a1:88:12:81:47:a3: 00:8c:e4:8b:a8:9d:4f:e0:f5:94:6f:d6:f4:7f:30: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:02:D9:29:0F:73:60:24:1A:E0:04:B2:BA:90:58:B7:3C:73:32:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2e33a78a-a08a-30af-89e7-9b336e2d0057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:51:77:02:6c:17:9e:d9:90:c9:98:1d:82:00:05:6c:1a:42: 2c:81:3e:fc:9f:77:b9:0b:35:2a:5b:be:74:f8:95:5a:5a:cc: f2:a9:3c:cc:25:bc:51:09:66:16:1c:b4:1f:ca:dd:dd:9b:db: 55:63:84:9e:5f:74:4a:97:36:46:ff:f9:61:6f:85:49:06:31: 2c:25:a9:45:4c:85:b0:a3:fe:9d:ef:cf:c7:f3:92:1a:b8:17: 2c:26:ef:90:d4:23:78:b0:30:9e:14:66:32:f3:15:03:a9:73: 0b:87:c4:1c:68:09:c2:c7:dc:56:dc:4b:84:c9:f9:a8:39:df: e6:f3:de:1e:1c:45:78:13:a0:bf:75:cd:3b:61:67:72:b6:7c: 34:b8:e9:a7:af:cc:50:43:94:f7:e6:cb:30:ad:17:c9:b0:98: 07:f6:e2:f1:ee:5a:5e:8b:50:95:5e:ec:04:e3:7f:64:f6:84: c4:c2:75:f1:1c:66:70:b1:9b:82:af:35:80:85:51:da:e4:60: 22:fa:60:ca:f3:c1:27:0f:66:a6:fb:98:8f:a9:c7:ef:85:2c: 67:98:e6:87:51:82:2d:68:7e:cb:9c:e9:b0:fe:51:e1:87:04: 81:29:77:a4:cc:65:72:d3:0b:a4:00:79:d6:f1:34:85:3f:f1: 83:6c:71:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYam38l212EVAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NTAwYzU0OWEtYTgwNy00OWM0LWJmYzktOGI3MzcxOTMzMzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnGq+lFUjdI+jusZjpnOjrdEWtSeCdwGk5kJ uNy2xhyX7M+/8PLlAplnk2SDbbz19g5JVgdWgWdkWCph2+RS//AQW+kpMde9Ydy5 BC1hfuGsbM+YLGZuuYXBmogb0+ShGWp3rCH6W44XnM5osrCAncfkhHp5NbvacAsm mDbhjtNm00yUfG4WvCErQo6tWFdTVmXkmkKZr3qXgrNrtKB2g8q8Gildy/AS1Ib1 qdQx8CZoFYQ9dCZ2GpyDoUpW+MbWI4/STyTtJfNQyaC+0IFttsQekzeJqwFXQp6F fg37QvQ6uwy2gnB9X0yhiBKBR6MAjOSLqJ1P4PWUb9b0fzC9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYC2SkPc2AkGuAEsrqQWLc8czKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmUzM2E3OGEtYTA4YS0z MGFmLTg5ZTctOWIzMzZlMmQwMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9RdwJsF57ZkMmYHYIABWwaQiyBPvyfd7kLNSpbvnT4lVpazPKpPMwl vFEJZhYctB/K3d2b21VjhJ5fdEqXNkb/+WFvhUkGMSwlqUVMhbCj/p3vz8fzkhq4 Fywm75DUI3iwMJ4UZjLzFQOpcwuHxBxoCcLH3FbcS4TJ+ag53+bz3h4cRXgToL91 zTthZ3K2fDS46aevzFBDlPfmyzCtF8mwmAf24vHuWl6LUJVe7ATjf2T2hMTCdfEc ZnCxm4KvNYCFUdrkYCL6YMrzwScPZqb7mI+px++FLGeY5odRgi1ofsuc6bD+UeGH BIEpd6TMZXLTC6QAedbxNIU/8YNscYs= -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:45 2026 by rpki-client