$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30356c2b-0120-3f50-a466-7a00a21cec6b.roa File: 30356c2b-0120-3f50-a466-7a00a21cec6b.roa (raw, json) Hash identifier: eS2sjeXZ8vqQASKknRIqweAXsADflmOUoxR9GQj51QY= Subject key identifier: 5E:AE:FB:99:5E:0F:07:28:A7:94:D9:7F:D2:52:22:F8:8A:7F:E0:BB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9E879D5DECCD1DDF8800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30356c2b-0120-3f50-a466-7a00a21cec6b.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9e:87:9d:5d:ec:cd:1d:df:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1acca684-8b69-4bba-bb88-eb38b52525c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:de:7f:8f:6d:73:87:98:6d:e6:ad:f5:18: bd:f7:06:27:37:80:83:03:87:6b:55:f6:e3:82:4b: c5:e1:31:8c:f3:05:d0:e5:31:1a:d4:47:ef:ca:01: cb:24:6d:4e:27:1d:88:62:4a:c3:d9:5d:3f:19:59: 0a:fb:b1:67:98:15:d1:32:bd:9a:03:3a:99:a2:78: aa:26:87:69:9f:f9:8b:0c:6e:6a:98:92:7c:da:e5: 88:24:ab:59:9f:77:07:27:11:f6:8d:6c:72:3d:62: 3d:75:7b:c0:5e:d8:a8:fa:2f:1a:49:3f:1d:bb:d9: b2:c5:3d:79:78:03:e1:8a:a9:9e:b3:46:d0:9f:2a: 60:a0:7a:a7:92:25:d5:0a:24:93:42:a8:f0:23:c0: c3:da:1e:97:ee:d9:36:a3:e0:99:0d:d3:c7:80:64: d5:a4:af:37:2d:02:b6:c8:05:30:a0:43:8a:41:63: 55:3e:41:c1:ec:99:4e:9b:5a:21:35:3a:ee:d9:96: 55:f1:52:ca:0b:58:fb:50:46:7f:c5:c4:71:84:82: 63:d2:da:5c:61:63:fd:0a:77:71:ea:fc:a2:16:28: 95:22:6f:86:29:84:a0:fe:ea:b1:63:03:14:c5:98: bb:c7:18:88:4b:cc:55:d2:dc:ad:d8:9b:b0:68:b3: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AE:FB:99:5E:0F:07:28:A7:94:D9:7F:D2:52:22:F8:8A:7F:E0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30356c2b-0120-3f50-a466-7a00a21cec6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0f:51:17:c9:3c:1b:3f:94:06:9f:52:00:3d:d4:63:29:e1: ad:55:fb:a4:dd:ef:43:d6:89:fe:8e:3a:4a:e8:93:f1:7b:a8: e0:80:5b:f8:69:ad:e4:ba:01:83:e8:9e:1e:88:45:42:42:2b: 9d:d2:6d:fe:b7:8b:44:b8:b5:d1:e9:a5:ed:d8:dd:65:d5:4f: bd:81:c4:f3:9a:cb:71:9a:33:d6:d4:15:0d:35:cd:50:5c:65: 18:8c:56:7c:2b:e3:7c:5f:4a:10:76:1e:c9:34:3b:77:6b:8b: f4:ac:da:a0:11:d9:b7:15:2d:f4:f8:3b:e6:8a:c4:55:e4:6e: 6b:7d:ad:1b:47:51:f3:f2:65:73:6b:c1:e8:1f:2c:ac:2f:c5: 5c:a8:7e:ec:39:e8:81:e2:93:28:89:20:80:f1:16:aa:3f:9e: eb:fc:b1:03:2b:c4:8b:18:99:f3:15:ef:be:14:26:fa:24:0b: bb:67:17:53:5f:39:1c:64:1f:46:77:dc:5e:1f:c7:16:23:2d: 03:ce:40:9e:c9:4c:6a:ee:58:04:8b:c6:ee:6f:42:38:6c:37: c2:1b:cc:ed:15:68:c6:80:34:b9:65:b7:14:3b:0d:88:9b:19: 72:56:18:40:e7:4d:fc:c8:1f:91:15:e7:02:71:41:a2:c6:41: f8:a4:7f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ6HnV3szR3fiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWFjY2E2ODQtOGI2OS00YmJhLWJiODgtZWIzOGI1MjUyNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiTef49tc4eYbeat9Ri99wYnN4CDA4drVfbj gkvF4TGM8wXQ5TEa1EfvygHLJG1OJx2IYkrD2V0/GVkK+7FnmBXRMr2aAzqZoniq Jodpn/mLDG5qmJJ82uWIJKtZn3cHJxH2jWxyPWI9dXvAXtio+i8aST8du9myxT15 eAPhiqmes0bQnypgoHqnkiXVCiSTQqjwI8DD2h6X7tk2o+CZDdPHgGTVpK83LQK2 yAUwoEOKQWNVPkHB7JlOm1ohNTru2ZZV8VLKC1j7UEZ/xcRxhIJj0tpcYWP9Cndx 6vyiFiiVIm+GKYSg/uqxYwMUxZi7xxiIS8xV0tyt2JuwaLNGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6u+5leDwcop5TZf9JSIviKf+C7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzAzNTZjMmItMDEyMC0z ZjUwLWE0NjYtN2EwMGEyMWNlYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYPURfJPBs/lAafUgA91GMp4a1V+6Td70PWif6OOkrok/F7qOCAW/hp reS6AYPonh6IRUJCK53Sbf63i0S4tdHppe3Y3WXVT72BxPOay3GaM9bUFQ01zVBc ZRiMVnwr43xfShB2Hsk0O3dri/Ss2qAR2bcVLfT4O+aKxFXkbmt9rRtHUfPyZXNr wegfLKwvxVyofuw56IHikyiJIIDxFqo/nuv8sQMrxIsYmfMV774UJvokC7tnF1Nf ORxkH0Z33F4fxxYjLQPOQJ7JTGruWASLxu5vQjhsN8IbzO0VaMaANLlltxQ7DYib GXJWGEDnTfzIH5EV5wJxQaLGQfikf2U= -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:41 2026 by rpki-client