$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa File: 3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa (raw, json) Hash identifier: V/kPt7bGSPlHZlcMGU+SreJQOb//XDxITOatX4Nc3RA= Subject key identifier: 21:86:55:B3:15:6E:DE:14:91:83:A7:4B:E5:C3:09:87:F9:86:E2:7D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A5CDB3686E3338C111D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:5c:db:36:86:e3:33:8c:11:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=480476f9-40fd-4dd2-b777-a7d61923c5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:5f:7d:58:d9:df:5b:39:44:d5:62:9a:13: 9f:99:49:42:d5:ce:04:be:3b:d1:9d:47:b9:8a:ab: 90:90:b0:ce:63:28:25:2c:a3:05:12:db:1c:5f:fa: a1:c7:44:99:f8:b0:90:8d:5d:0d:2f:f7:f6:b5:25: 93:58:75:d8:22:d9:8e:17:1c:7b:60:0e:a3:3c:a0: ea:4b:85:56:a6:d5:1b:21:a6:32:56:1d:04:b2:e7: 26:41:13:7f:42:07:a5:e9:1a:6c:e4:3c:3c:84:ff: 25:d7:01:ff:25:e4:a1:17:89:e9:77:66:24:e4:74: ff:1c:72:fe:06:28:35:ba:be:62:53:94:15:99:b2: 92:87:24:48:65:e9:40:4b:a3:0d:dc:ae:52:96:7c: f7:29:66:3e:45:1e:5e:61:f8:96:93:57:72:0e:61: 5f:8b:25:e3:4f:76:7c:cf:59:94:7b:8f:54:27:53: 14:3e:69:29:a9:1b:d3:07:51:7a:b6:0b:81:e7:31: ff:6c:93:61:5b:d5:e7:39:45:a8:62:ea:aa:8f:d9: 8a:fa:11:2f:ca:0c:b2:fa:a8:70:e5:08:83:03:a3: 68:73:40:f1:6b:5f:ff:63:59:c4:d8:28:42:6f:58: 22:be:e1:49:84:b0:bc:44:35:9d:f2:52:3e:6f:3b: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:86:55:B3:15:6E:DE:14:91:83:A7:4B:E5:C3:09:87:F9:86:E2:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cb:52:d4:8a:03:a5:08:4b:84:b9:a2:bb:48:23:c3:7b:a2: 02:93:75:19:93:ed:3b:15:20:65:dc:4e:17:d3:79:27:85:0e: 63:bf:b8:6d:25:5d:e7:78:81:f0:4d:37:e0:da:64:fe:6b:44: cb:9a:86:34:58:fb:0e:4e:b4:a4:a9:a2:01:de:2c:d4:84:b5: 32:df:a1:d7:21:28:e9:ff:2b:7d:31:fa:50:5a:d5:c0:57:59: 51:be:ab:e4:d7:c6:a2:d0:20:69:f8:bc:2e:ab:a8:d1:f1:22: 5f:f7:1d:37:8a:09:72:34:8f:c5:3a:e9:f7:6d:bb:ea:f7:53: 47:b9:04:a7:f1:35:67:b5:b9:21:3a:28:43:33:a3:86:8d:0d: 2f:5f:8a:05:b8:97:31:65:8d:89:55:50:fd:10:a2:4a:ad:73: 24:e0:c7:67:33:30:8a:d5:b3:5f:a7:8e:f2:98:47:01:4a:17: 34:73:41:f0:56:5c:5a:d4:f3:20:a1:b5:ec:bf:b9:6b:33:6f: ba:96:b0:e1:e5:90:68:2c:a8:06:40:26:e7:ff:03:05:56:b9: fd:97:8b:22:de:42:ec:10:fb:12:33:d6:64:32:3c:34:14:0e: 59:f6:fa:7a:3e:4d:95:b9:48:2c:3d:65:93:86:90:4c:a2:9e: 0e:3a:49:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlzbNobjM4wRHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDgwNDc2ZjktNDBmZC00ZGQyLWI3NzctYTdkNjE5MjNjNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlRffVjZ31s5RNVimhOfmUlC1c4EvjvRnUe5 iquQkLDOYyglLKMFEtscX/qhx0SZ+LCQjV0NL/f2tSWTWHXYItmOFxx7YA6jPKDq S4VWptUbIaYyVh0EsucmQRN/Qgel6Rps5Dw8hP8l1wH/JeShF4npd2Yk5HT/HHL+ Big1ur5iU5QVmbKShyRIZelAS6MN3K5Slnz3KWY+RR5eYfiWk1dyDmFfiyXjT3Z8 z1mUe49UJ1MUPmkpqRvTB1F6tguB5zH/bJNhW9XnOUWoYuqqj9mK+hEvygyy+qhw 5QiDA6Noc0Dxa1//Y1nE2ChCb1givuFJhLC8RDWd8lI+bzszdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGGVbMVbt4UkYOnS+XDCYf5huJ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2NmZmFlNDAtNjI2MS0z NWVlLTlmZjktNmRlM2Y2ZWUzOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXLUtSKA6UIS4S5ortII8N7ogKTdRmT7TsVIGXcThfTeSeFDmO/uG0l Xed4gfBNN+DaZP5rRMuahjRY+w5OtKSpogHeLNSEtTLfodchKOn/K30x+lBa1cBX WVG+q+TXxqLQIGn4vC6rqNHxIl/3HTeKCXI0j8U66fdtu+r3U0e5BKfxNWe1uSE6 KEMzo4aNDS9figW4lzFljYlVUP0QokqtcyTgx2czMIrVs1+njvKYRwFKFzRzQfBW XFrU8yChtey/uWszb7qWsOHlkGgsqAZAJuf/AwVWuf2XiyLeQuwQ+xIz1mQyPDQU Dln2+no+TZW5SCw9ZZOGkEying46SSU= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:03 2026 by rpki-client