$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa File: 348bd322-b2ad-3bdd-8570-245f1a6574e0.roa (raw, json) Hash identifier: hYJk/6ufQypp6OPB07o9FOU0o/z9L94u1fkq+qB0N04= Subject key identifier: 25:C8:35:89:2D:5A:A1:DB:9E:1D:AE:C2:13:07:31:4A:F5:57:66:4B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7CDF0CCD0CD168BBCC760 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cd:f0:cc:d0:cd:16:8b:bc:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=5231bba6-c811-4b3b-8eee-6d4f479af668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:24:6e:b6:63:99:98:3f:11:be:1c:24:d8: 9b:0d:d8:2c:8c:4a:ba:00:87:96:2b:90:5d:0f:54: 8a:12:42:01:bc:0d:7b:ef:48:ac:14:a0:be:f2:cc: 29:71:b0:85:77:9d:b7:e4:1f:a5:88:eb:20:14:08: 8a:98:30:34:39:10:b8:60:f0:ea:56:08:9a:8a:c1: 38:8d:18:5a:7f:1c:e3:b3:80:9a:c1:29:4e:45:0a: 2f:79:ca:b0:02:7a:a8:4e:b3:52:ee:ac:44:c3:97: 8d:4e:d6:91:0a:d1:be:af:9b:84:b0:3e:c7:43:c5: c0:bb:3c:9d:ce:e2:f8:6b:27:8f:bd:ca:01:bf:62: d0:5a:de:b5:df:5f:f8:19:f0:fa:62:18:7e:47:53: cb:ee:40:d7:8d:fe:34:a7:89:15:cf:f4:c5:66:56: fc:6a:f2:dd:dd:cf:d7:35:22:63:9e:2c:b1:88:83: 84:e5:58:3c:f4:9a:58:87:dc:ff:75:90:50:84:1b: ca:64:07:f9:f7:5f:2e:60:82:bd:77:ea:26:82:cb: 2e:c3:1c:68:a7:70:a2:97:d5:09:dd:58:5c:37:35: 1d:b1:df:07:78:33:65:95:be:7f:20:09:a1:97:04: cc:9c:0e:bf:b1:f9:0e:34:ea:8b:68:15:aa:3d:a8: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C8:35:89:2D:5A:A1:DB:9E:1D:AE:C2:13:07:31:4A:F5:57:66:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:86:13:6c:0f:94:f2:31:b2:e3:89:d9:91:18:04:cc:e8:e2: 1f:53:13:ad:ea:dc:49:58:64:5e:94:57:42:e9:2e:da:ab:66: a3:5e:ea:5f:be:9e:4f:8f:a6:8a:b5:c1:b4:c2:a7:a7:be:a1: ba:cf:d6:ea:df:14:6d:a1:ad:5f:76:26:28:87:a5:85:a4:42: 7c:ee:55:05:69:5f:9d:2d:5d:f8:bc:8c:59:4e:30:fd:8c:a3: 99:f4:dc:38:b2:97:70:5e:08:09:2e:9d:6d:2f:fa:b0:b1:0c: fb:fa:aa:dc:1f:71:a6:a3:bf:d6:87:a7:2c:39:0e:06:67:45: 09:fa:81:a6:c9:d4:e2:d5:df:e9:21:ca:fa:96:92:0d:31:2e: 55:b1:43:6e:f5:e7:0e:c1:df:5d:da:42:2f:27:13:df:fd:3b: 06:8c:86:90:b8:bd:2c:e0:2b:d6:ed:9a:7d:ad:3f:00:0c:b6: 6d:57:71:f8:7d:08:4d:0e:9f:9b:87:fe:81:3c:43:8f:b3:e9: f4:80:ec:82:70:0a:4f:28:9d:a2:24:aa:95:88:11:7d:43:f1: 99:ae:9a:0a:0a:cf:94:ec:cd:b7:92:f6:76:4a:d6:ed:6c:ac: 17:1c:31:b5:07:9b:20:5b:fe:4b:95:77:25:d0:ea:e2:af:45: ca:c7:3a:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op83wzNDNFou8x2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NTIzMWJiYTYtYzgxMS00YjNiLThlZWUtNmQ0ZjQ3OWFmNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23YkbrZjmZg/Eb4cJNibDdgsjEq6AIeWK5Bd D1SKEkIBvA1770isFKC+8swpcbCFd5235B+liOsgFAiKmDA0ORC4YPDqVgiaisE4 jRhafxzjs4CawSlORQovecqwAnqoTrNS7qxEw5eNTtaRCtG+r5uEsD7HQ8XAuzyd zuL4ayePvcoBv2LQWt6131/4GfD6Yhh+R1PL7kDXjf40p4kVz/TFZlb8avLd3c/X NSJjniyxiIOE5Vg89JpYh9z/dZBQhBvKZAf5918uYIK9d+omgssuwxxop3Cil9UJ 3VhcNzUdsd8HeDNllb5/IAmhlwTMnA6/sfkONOqLaBWqPajzGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXINYktWqHbnh2uwhMHMUr1V2ZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzQ4YmQzMjItYjJhZC0z YmRkLTg1NzAtMjQ1ZjFhNjU3NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiGE2wPlPIxsuOJ2ZEYBMzo4h9TE63q3ElYZF6UV0LpLtqrZqNe6l++ nk+Ppoq1wbTCp6e+obrP1urfFG2hrV92JiiHpYWkQnzuVQVpX50tXfi8jFlOMP2M o5n03Diyl3BeCAkunW0v+rCxDPv6qtwfcaajv9aHpyw5DgZnRQn6gabJ1OLV3+kh yvqWkg0xLlWxQ2715w7B313aQi8nE9/9OwaMhpC4vSzgK9btmn2tPwAMtm1Xcfh9 CE0On5uH/oE8Q4+z6fSA7IJwCk8onaIkqpWIEX1D8ZmumgoKz5TszbeS9nZK1u1s rBccMbUHmyBb/kuVdyXQ6uKvRcrHOg0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:40 2026 by rpki-client