$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa File: 41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa (raw, json) Hash identifier: 0phPQaj9AijEaPn2XFXekU2TDokh8epxgSuyjCEtXbM= Subject key identifier: D0:DD:CF:51:6A:86:4C:1F:D8:AB:DA:07:08:74:B8:0F:E4:7C:05:12 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117292BDCC1F16CA1AF2F580 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:92:bd:cc:1f:16:ca:1a:f2:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=653021cb-7bc8-43e5-a428-d22a393a31ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:f7:e9:52:a0:0c:18:55:6e:64:49:9f:3c: e0:f8:9a:01:68:8b:ab:35:aa:5c:3a:5a:8f:fb:b1: 11:e3:ce:7f:35:31:66:2a:09:2d:60:ae:60:b9:ef: 0b:4d:f5:06:66:f3:1f:ab:83:de:ab:f0:34:a6:5e: 2a:81:2d:d4:7b:ad:4b:a9:b7:ab:f2:21:15:20:63: a2:84:4a:93:08:31:8d:cc:58:61:f7:8b:4a:78:2a: 92:0f:c9:35:9f:cb:98:2d:eb:5c:6a:f0:21:6d:f1: 40:d5:ee:14:8d:15:c3:3b:e5:5b:20:06:96:53:d0: 23:b1:4d:c2:0a:2d:f5:12:90:b6:10:6c:fc:63:66: c9:b7:3c:02:0f:ca:e9:88:32:7b:8f:01:1c:46:ae: 26:99:29:46:9b:da:47:13:e3:e1:9f:a4:2e:f9:74: c0:d7:98:05:a5:d4:22:b2:ad:a8:8b:d0:3f:05:c6: 6a:52:07:77:19:79:6f:53:8c:0d:a3:48:99:34:34: b7:03:5a:d9:ed:48:96:1e:b8:8d:9c:9f:d5:30:64: ca:9d:89:30:56:e3:31:eb:1c:e4:68:9f:20:cf:cc: 29:66:b1:b1:e7:80:c4:6f:c4:be:ec:d6:70:32:6a: d7:66:3e:d7:8d:dd:67:2d:e3:f4:88:ad:0d:bb:8f: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DD:CF:51:6A:86:4C:1F:D8:AB:DA:07:08:74:B8:0F:E4:7C:05:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d9:1c:de:c5:f2:23:78:02:c5:67:67:77:6d:04:80:61:0f: 88:95:0c:3d:2d:0f:a9:52:b9:27:94:a5:d2:f3:3b:e4:4a:05: 40:5a:4c:d2:96:b3:7a:4c:78:f1:46:7d:44:c6:13:50:64:c0: e8:51:14:3c:1e:e6:83:63:bb:c0:0f:c9:0c:c6:5b:2b:db:d6: 81:b2:82:f2:3e:e0:ad:b4:83:85:bd:fe:7a:84:49:b0:34:b4: 82:a2:b1:10:df:cc:fe:df:ba:53:91:68:32:5b:a9:90:10:46: 52:5e:f2:47:9b:22:73:a3:56:fe:51:b5:ae:5f:c8:ad:be:56: ae:d7:0b:1f:14:56:ea:31:c6:41:c7:07:a8:c7:05:15:bb:ef: 96:ae:d9:68:56:20:0e:c2:5b:66:59:9e:74:50:20:5c:80:2b: b3:65:e3:ae:32:c5:13:d5:43:46:ba:14:1d:af:85:0e:90:da: e4:23:4a:28:b4:e2:3c:e3:f4:16:c5:fe:dc:5f:c3:68:1a:f4: ea:21:5a:12:83:f4:72:f8:a5:bc:ce:ca:b8:92:41:95:bb:bd: 6e:43:40:60:de:3e:db:72:95:9f:17:87:b5:12:e5:f5:c8:29: 99:ae:10:06:a5:09:10:e2:26:7f:e5:b4:48:0a:92:56:66:18: 5b:e2:7f:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpK9zB8Wyhry9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NjUzMDIxY2ItN2JjOC00M2U1LWE0MjgtZDIyYTM5M2EzMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIv36VKgDBhVbmRJnzzg+JoBaIurNapcOlqP +7ER485/NTFmKgktYK5gue8LTfUGZvMfq4Peq/A0pl4qgS3Ue61Lqber8iEVIGOi hEqTCDGNzFhh94tKeCqSD8k1n8uYLetcavAhbfFA1e4UjRXDO+VbIAaWU9AjsU3C Ci31EpC2EGz8Y2bJtzwCD8rpiDJ7jwEcRq4mmSlGm9pHE+Phn6Qu+XTA15gFpdQi sq2oi9A/BcZqUgd3GXlvU4wNo0iZNDS3A1rZ7UiWHriNnJ/VMGTKnYkwVuMx6xzk aJ8gz8wpZrGx54DEb8S+7NZwMmrXZj7Xjd1nLeP0iK0Nu4+QAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDdz1Fqhkwf2KvaBwh0uA/kfAUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFjZjBiNjctNTcwYS0z MGQ2LWI4Y2MtZTg0ZmJkYjE2MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvZHN7F8iN4AsVnZ3dtBIBhD4iVDD0tD6lSuSeUpdLzO+RKBUBaTNKW s3pMePFGfUTGE1BkwOhRFDwe5oNju8APyQzGWyvb1oGygvI+4K20g4W9/nqESbA0 tIKisRDfzP7fulORaDJbqZAQRlJe8kebInOjVv5Rta5fyK2+Vq7XCx8UVuoxxkHH B6jHBRW775au2WhWIA7CW2ZZnnRQIFyAK7Nl464yxRPVQ0a6FB2vhQ6Q2uQjSii0 4jzj9BbF/txfw2ga9OohWhKD9HL4pbzOyriSQZW7vW5DQGDePttylZ8Xh7US5fXI KZmuEAalCRDiJn/ltEgKklZmGFvif18= -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:10 2026 by rpki-client