$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa File: 39d05664-addf-360b-a99c-36ec6279d45b.roa (raw, json) Hash identifier: onl4r3v91hkYQLHkSjSPq+2UcYYYcLDWpTG1fhvOdaE= Subject key identifier: 8C:01:94:02:36:EF:45:86:77:FF:14:10:B1:F4:CF:9D:06:E5:33:64 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9DB312D08BD224F01BA8 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9d:b3:12:d0:8b:d2:24:f0:1b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b7029fd7-5117-4c94-b207-4b7d0e2695a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:99:1e:76:65:4a:24:a7:2c:ae:76:fc:6e:9b: 1c:b9:87:dc:45:4b:1c:91:26:c0:0b:4b:e3:a1:a6: 93:90:2d:c5:ea:c4:7f:76:7f:19:e1:06:59:39:e5: e3:f2:6c:81:53:8f:09:f1:a5:a3:ec:d1:04:4a:ea: 0d:4e:c7:95:05:2e:26:10:f1:6c:9a:46:6e:65:9e: c4:70:63:37:a1:8c:fa:58:af:23:c3:85:19:12:72: 12:1d:f1:0d:d3:a8:d0:d9:22:07:b0:b5:c9:94:f4: 30:9d:d6:b7:c3:dd:dc:54:36:2b:88:52:ea:db:2e: a4:37:11:5b:f2:a7:83:26:e7:a2:ea:96:ed:44:63: 81:06:cb:e9:ea:67:71:37:c1:bb:6c:df:1a:04:0b: 4b:be:20:2f:4a:ef:95:89:e6:1d:1d:79:5d:32:45: 0c:4c:24:24:64:9e:2c:81:ae:be:6a:4b:6f:a9:7c: 72:07:4d:ca:21:52:96:a1:d5:cb:07:20:c9:41:23: 78:4a:23:76:d2:11:c1:9c:7e:ec:d7:ed:21:46:64: 05:05:e5:31:cb:6f:ec:68:61:3f:4a:8d:42:b6:9f: 98:73:a6:c5:04:c3:65:0d:fc:ae:27:05:cb:b2:f8: b7:a5:b0:07:14:b8:0b:c2:d7:e6:32:36:0b:72:93: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:01:94:02:36:EF:45:86:77:FF:14:10:B1:F4:CF:9D:06:E5:33:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39d05664-addf-360b-a99c-36ec6279d45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f8:68:38:1c:23:cd:0a:ea:62:45:b2:cc:c7:0a:6e:24:80: 5b:6e:78:c1:0d:7e:a0:6b:a7:8f:51:b0:98:66:29:74:fe:7c: c0:c9:ad:89:48:06:45:4d:c8:16:da:2e:7b:b7:38:2c:b7:71: d9:60:a0:44:70:cc:dd:11:a4:7c:b6:92:db:fe:68:90:09:60: 4a:e4:5a:e1:be:87:01:99:5e:5d:05:a0:66:b0:f7:f8:8a:1f: 80:2e:6b:05:d3:3c:fc:86:e9:38:ce:c0:52:cd:16:47:c5:f4: 3a:2a:4c:94:42:17:a7:ce:dd:ac:50:b8:c4:81:d1:20:9b:f3: 5d:8d:a4:7a:f4:fc:ca:8b:6f:aa:f2:0c:46:c1:2f:f4:17:4f: 35:ff:ac:3f:40:04:51:9a:89:06:ec:3b:6a:ea:79:12:81:9c: d0:6c:82:3e:b6:91:50:8a:43:ac:bc:17:9a:31:05:e1:a2:0e: 2b:66:f2:3c:a7:31:70:a1:32:eb:7b:c3:69:98:cd:6d:a9:cb: 9e:8f:a7:22:84:7c:fb:16:ee:72:d4:2c:11:00:43:b8:b9:39: e0:11:a9:0f:c0:bf:38:51:82:fa:cb:eb:c2:24:11:d4:b9:90: 1e:85:fc:0a:c4:79:8f:cb:2b:da:9f:ef:f7:62:ef:d0:d8:de: 64:a5:54:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ2zEtCL0iTwG6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjcwMjlmZDctNTExNy00Yzk0LWIyMDctNGI3ZDBlMjY5NWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5kedmVKJKcsrnb8bpscuYfcRUsckSbAC0vj oaaTkC3F6sR/dn8Z4QZZOeXj8myBU48J8aWj7NEESuoNTseVBS4mEPFsmkZuZZ7E cGM3oYz6WK8jw4UZEnISHfEN06jQ2SIHsLXJlPQwnda3w93cVDYriFLq2y6kNxFb 8qeDJuei6pbtRGOBBsvp6mdxN8G7bN8aBAtLviAvSu+VieYdHXldMkUMTCQkZJ4s ga6+aktvqXxyB03KIVKWodXLByDJQSN4SiN20hHBnH7s1+0hRmQFBeUxy2/saGE/ So1Ctp+Yc6bFBMNlDfyuJwXLsvi3pbAHFLgLwtfmMjYLcpPhTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwBlAI270WGd/8UELH0z50G5TNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzlkMDU2NjQtYWRkZi0z NjBiLWE5OWMtMzZlYzYyNzlkNDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj4aDgcI80K6mJFsszHCm4kgFtueMENfqBrp49RsJhmKXT+fMDJrYlI BkVNyBbaLnu3OCy3cdlgoERwzN0RpHy2ktv+aJAJYErkWuG+hwGZXl0FoGaw9/iK H4AuawXTPPyG6TjOwFLNFkfF9DoqTJRCF6fO3axQuMSB0SCb812NpHr0/MqLb6ry DEbBL/QXTzX/rD9ABFGaiQbsO2rqeRKBnNBsgj62kVCKQ6y8F5oxBeGiDitm8jyn MXChMut7w2mYzW2py56PpyKEfPsW7nLULBEAQ7i5OeARqQ/AvzhRgvrL68IkEdS5 kB6F/ArEeY/LK9qf7/di79DY3mSlVJs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:17 2026 by rpki-client