$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa File: 35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa (raw, json) Hash identifier: iN4xnvBIV9iWSMlqMpjtH6JcrBgZ4uwwoSBCOoS1M50= Subject key identifier: 0A:34:6C:3B:F6:35:56:57:B6:E8:34:B5:C9:97:B2:5A:90:36:27:87 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D879D02E0B117339C3F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:87:9d:02:e0:b1:17:33:9c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=474bf83c-1f62-4606-8840-f46b86afb76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:96:4b:e1:9e:6e:39:5f:97:c4:81:33:f7:e1: b2:7a:01:17:5f:bc:64:25:48:50:28:ca:8d:02:d6: e1:4a:63:19:1c:29:bf:fe:38:95:7d:f3:e2:70:a8: da:60:13:bd:00:cd:65:7e:71:4c:07:ba:a3:c9:0c: a5:c0:e2:fe:54:d0:26:f5:11:0c:64:7b:53:7e:08: 1c:78:44:1e:c8:3b:95:62:7a:14:f2:d3:d3:ee:78: 03:d9:c4:c9:c8:4c:ed:91:b1:01:59:1e:a5:c5:4c: eb:5c:1a:fa:87:4a:2d:7d:11:9b:d2:64:c5:4d:59: a9:e9:df:b5:3b:e3:e4:70:38:51:49:f7:4d:72:9b: 5e:8a:a6:87:7b:c7:1f:60:75:51:66:dc:e5:53:58: fc:02:c6:25:00:f2:7c:06:95:84:d2:a0:0c:25:0c: ea:15:79:9c:be:39:61:10:6f:9a:de:72:c4:63:5d: b9:dc:64:46:38:fa:2b:0a:de:c5:c9:ea:40:82:56: 3a:29:6f:3a:d6:63:22:10:b0:a8:f3:a9:ec:4c:f1: 41:a2:e0:57:1b:67:13:e6:d0:2a:d2:7b:1c:8c:db: 7f:14:18:82:9a:d4:d1:60:b3:36:4b:69:30:b0:d3: 20:02:d0:5b:a1:d8:f0:ba:3f:e0:4d:db:dc:fa:df: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:34:6C:3B:F6:35:56:57:B6:E8:34:B5:C9:97:B2:5A:90:36:27:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35989c9a-d14e-3e3b-a4c8-7a591055ec2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:00:fd:99:c1:b7:99:29:a7:9f:10:64:01:45:f2:70:f9:45: 98:28:e8:cc:d0:bb:51:af:a0:e0:b5:36:31:db:df:1f:6e:94: 67:61:2f:88:d2:b6:89:38:fa:20:26:df:00:ea:74:b7:c0:8c: 91:2b:48:43:4e:62:87:14:94:c9:3b:29:38:84:02:25:b0:e1: 8c:50:21:f8:4b:09:7e:06:d1:c1:ad:4c:25:30:ba:b9:23:08: 2b:6c:5a:d4:0a:76:8a:6b:ff:17:18:9d:6b:34:64:e2:60:a1: 0a:80:c8:12:20:be:ef:27:db:01:2f:64:7e:7a:3a:a1:42:b1: 56:19:77:9d:ae:af:85:0e:07:4c:a2:21:df:df:b6:ec:63:59: e0:e2:89:e3:f2:e7:07:57:1b:63:55:de:3d:e9:f1:8d:59:f2: 7e:64:a7:a1:a3:fb:f7:5d:d9:d1:f5:fb:27:03:c0:9f:52:83: 51:d3:62:ad:30:84:d2:4f:c1:2c:b2:9d:25:d5:c9:b3:4e:53: 44:ca:a8:8b:20:36:53:f6:70:e6:ff:36:ba:52:99:6d:e8:10: 6e:4d:04:e1:db:db:38:61:58:0a:3d:52:3c:48:d3:a2:80:32: 84:e1:a9:39:31:a5:dc:b5:9a:53:93:25:b8:a4:b3:ac:d5:0a: 41:d8:a2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYedAuCxFzOcPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDc0YmY4M2MtMWY2Mi00NjA2LTg4NDAtZjQ2Yjg2YWZiNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pZL4Z5uOV+XxIEz9+GyegEXX7xkJUhQKMqN AtbhSmMZHCm//jiVffPicKjaYBO9AM1lfnFMB7qjyQylwOL+VNAm9REMZHtTfggc eEQeyDuVYnoU8tPT7ngD2cTJyEztkbEBWR6lxUzrXBr6h0otfRGb0mTFTVmp6d+1 O+PkcDhRSfdNcpteiqaHe8cfYHVRZtzlU1j8AsYlAPJ8BpWE0qAMJQzqFXmcvjlh EG+a3nLEY1253GRGOPorCt7FyepAglY6KW861mMiELCo86nsTPFBouBXG2cT5tAq 0nscjNt/FBiCmtTRYLM2S2kwsNMgAtBbodjwuj/gTdvc+t9WTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAo0bDv2NVZXtug0tcmXslqQNieHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU5ODljOWEtZDE0ZS0z ZTNiLWE0YzgtN2E1OTEwNTVlYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0A/ZnBt5kpp58QZAFF8nD5RZgo6MzQu1GvoOC1NjHb3x9ulGdhL4jS tok4+iAm3wDqdLfAjJErSENOYocUlMk7KTiEAiWw4YxQIfhLCX4G0cGtTCUwurkj CCtsWtQKdopr/xcYnWs0ZOJgoQqAyBIgvu8n2wEvZH56OqFCsVYZd52ur4UOB0yi Id/ftuxjWeDiiePy5wdXG2NV3j3p8Y1Z8n5kp6Gj+/dd2dH1+ycDwJ9Sg1HTYq0w hNJPwSyynSXVybNOU0TKqIsgNlP2cOb/NrpSmW3oEG5NBOHb2zhhWAo9UjxI06KA MoThqTkxpdy1mlOTJbiks6zVCkHYooI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:35:05 2026 by rpki-client