$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3487eb9a-986a-36e8-9039-f826dd5ddf92.roa File: 3487eb9a-986a-36e8-9039-f826dd5ddf92.roa (raw, json) Hash identifier: Ox8bXpqJurO0tvZZKOjNa0l2iWmmP27zZG85dCWg/7k= Subject key identifier: 57:A1:17:52:B8:17:A6:4D:47:2D:C4:43:E5:F8:3D:1A:B1:3D:F8:A1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA169F22A9CCF8B617840 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3487eb9a-986a-36e8-9039-f826dd5ddf92.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a1:69:f2:2a:9c:cf:8b:61:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=19ea3e55-31eb-488b-8aa3-9e6666745ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:ad:db:58:97:e1:db:f8:3d:f6:a0:f4:ee: d3:af:1d:c8:65:cc:e4:38:78:38:7f:67:68:63:53: 7a:05:a2:00:88:6a:88:92:13:16:39:53:b3:63:72: 9b:eb:c0:24:3b:46:e6:a2:fa:0c:e4:cb:97:9a:eb: 39:0d:10:d0:9e:3b:e9:c7:91:b7:8f:d6:c9:cc:71: f8:38:66:74:59:3c:67:f8:1c:e0:af:a9:1a:f2:d5: cd:07:9e:5c:0c:e2:01:9e:27:6d:4a:94:56:9e:fb: 14:63:bc:56:8b:d4:39:fe:84:4f:67:56:d1:4e:0a: 39:58:f6:cb:dc:1b:7b:d2:09:ac:f0:6b:2d:1a:84: 6b:6c:10:3d:bc:5e:1b:fe:a3:59:0d:34:7e:4c:9c: 59:1f:46:a0:51:11:ae:f1:39:51:2b:e1:1c:13:44: aa:1f:bd:33:54:3b:d8:2a:19:3d:d2:06:7c:da:66: 80:d3:b8:cd:f4:7b:c4:e8:e1:50:f0:56:32:29:aa: 1f:f0:27:44:b5:4f:b3:61:44:36:a2:99:d9:42:cf: 80:bd:06:93:75:af:31:42:0a:96:cf:9c:6e:af:5c: 46:1e:aa:d1:1b:de:80:d0:55:92:af:75:d8:19:74: df:7f:a4:ef:42:38:04:68:b8:99:d6:62:1e:6e:df: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A1:17:52:B8:17:A6:4D:47:2D:C4:43:E5:F8:3D:1A:B1:3D:F8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3487eb9a-986a-36e8-9039-f826dd5ddf92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:47:f3:24:8d:01:89:b2:f3:bd:dd:29:6e:82:b6:bc:02:4f: 05:86:03:b4:e5:fa:36:b9:ad:1c:e2:b2:ef:51:7a:2a:26:24: 5e:3f:6e:6c:f9:4b:ff:8c:5d:32:2f:c4:5e:4f:9e:8c:3b:d5: fe:ec:06:e3:e4:23:a5:0d:10:d2:50:0f:86:33:d3:33:57:81: 75:80:06:6e:16:00:3d:d2:8e:5b:33:a2:14:af:2a:c4:f8:f8: f7:4e:a4:6e:26:67:e1:a1:ba:42:ec:11:de:10:48:b8:5b:b5: 66:12:c8:6f:4c:77:0a:66:49:ee:fe:6d:54:7e:42:6d:f1:25: 1c:3e:e4:2f:b9:fe:6d:12:8f:06:95:c9:24:9f:21:c9:c0:f6: 58:40:d0:1e:ad:98:b0:db:99:ac:2f:5b:58:20:9d:6a:25:63: 31:6c:b3:18:cb:8e:0e:7c:70:11:9c:d2:53:74:b7:26:db:88: 3d:cc:8b:d0:5b:00:2b:6b:90:b0:2e:70:c1:4c:59:6d:19:6f: 51:40:50:ba:fe:3e:f8:f2:6f:2a:5d:ce:92:36:51:af:4f:c5: ef:7d:5a:df:9c:71:06:fe:2d:a5:1c:50:15:4d:f1:a4:64:53: a8:d4:22:2d:17:37:a2:1b:b6:30:2f:76:12:65:ac:a8:9c:dd: fe:ed:0e:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaFp8iqcz4theEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTllYTNlNTUtMzFlYi00ODhiLThhYTMtOWU2NjY2NzQ1ZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFyt21iX4dv4Pfag9O7Trx3IZczkOHg4f2do Y1N6BaIAiGqIkhMWOVOzY3Kb68AkO0bmovoM5MuXmus5DRDQnjvpx5G3j9bJzHH4 OGZ0WTxn+Bzgr6ka8tXNB55cDOIBnidtSpRWnvsUY7xWi9Q5/oRPZ1bRTgo5WPbL 3Bt70gms8GstGoRrbBA9vF4b/qNZDTR+TJxZH0agURGu8TlRK+EcE0SqH70zVDvY Khk90gZ82maA07jN9HvE6OFQ8FYyKaof8CdEtU+zYUQ2opnZQs+AvQaTda8xQgqW z5xur1xGHqrRG96A0FWSr3XYGXTff6TvQjgEaLiZ1mIebt8+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFehF1K4F6ZNRy3EQ+X4PRqxPfihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzQ4N2ViOWEtOTg2YS0z NmU4LTkwMzktZjgyNmRkNWRkZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxH8ySNAYmy873dKW6CtrwCTwWGA7Tl+ja5rRzisu9ReiomJF4/bmz5 S/+MXTIvxF5Pnow71f7sBuPkI6UNENJQD4Yz0zNXgXWABm4WAD3SjlszohSvKsT4 +PdOpG4mZ+GhukLsEd4QSLhbtWYSyG9MdwpmSe7+bVR+Qm3xJRw+5C+5/m0SjwaV ySSfIcnA9lhA0B6tmLDbmawvW1ggnWolYzFssxjLjg58cBGc0lN0tybbiD3Mi9Bb ACtrkLAucMFMWW0Zb1FAULr+PvjybypdzpI2Ua9Pxe99Wt+ccQb+LaUcUBVN8aRk U6jUIi0XN6IbtjAvdhJlrKic3f7tDuc= -----END CERTIFICATE-----Generated at Thu Mar 26 23:03:46 2026 by rpki-client