$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa File: 47cc97f2-3c67-35da-93c6-4033da29eec6.roa (raw, json) Hash identifier: 09cfmVcW1DKUL6+c/K1OT9jobavqpnW9NIIkOPA8sSQ= Subject key identifier: 01:D8:C9:C8:B0:F4:03:67:FA:19:A2:1A:37:F5:B7:42:4B:CF:8D:BA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A7F62BF8F801D1A645F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7f:62:bf:8f:80:1d:1a:64:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=44140fa9-9d37-4ff0-a14d-713d6b497ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:ce:66:69:03:19:fa:76:9d:09:b7:c5:7b: ab:51:c6:88:de:47:f7:08:13:78:c7:8b:30:36:57: 5b:d6:00:b4:e0:7a:ce:b8:3c:47:46:c1:01:77:85: c1:cd:11:f5:66:4a:02:78:95:14:8a:62:c5:03:71: c3:70:3a:71:21:f4:64:0c:13:a8:0d:4a:46:3e:57: 00:7f:e4:cb:3c:0e:0d:0e:2b:1a:4a:25:60:e0:c2: 4e:87:2b:24:40:7d:b9:63:45:58:72:52:48:42:0c: 3b:83:71:d8:39:5c:82:f9:70:bd:5f:96:77:6c:c2: a8:d5:53:d6:39:53:c6:53:dd:9e:66:f4:4b:c5:d3: d9:eb:55:5a:4d:5b:59:ba:94:6b:a4:b9:0d:e5:46: 5c:17:e9:44:10:e8:4b:d4:00:ce:67:cc:d6:ed:24: e1:4b:ab:0d:36:49:df:e4:37:79:1f:37:34:ca:28: e0:52:d8:f4:36:63:2e:49:eb:2a:03:d2:4b:06:38: 04:cc:ec:96:21:d2:9d:6f:b2:5e:b7:0d:fc:b9:b3: 6f:01:da:4e:d3:2b:3c:fe:5c:9b:5b:60:76:f5:2c: 70:b8:72:40:4d:b0:2b:0f:b5:dc:83:b2:6e:c7:ae: ed:9c:ec:cd:4f:91:9c:04:66:8b:a8:bf:62:89:60: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D8:C9:C8:B0:F4:03:67:FA:19:A2:1A:37:F5:B7:42:4B:CF:8D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0f:05:8f:46:3a:39:eb:0a:fc:8d:e1:91:70:94:0e:0a:13: 41:27:b1:6e:a1:cb:4b:28:44:fa:bc:ea:bd:42:0c:2b:d0:f2: 89:89:01:80:0e:42:79:eb:09:bf:cb:5d:81:a8:6b:1d:6b:eb: 7a:3b:d3:f2:32:9e:e3:f9:0c:df:6b:bc:e7:51:5e:c7:96:4c: 06:92:9f:3a:99:14:5b:10:6a:7f:67:eb:8d:13:30:63:a3:79: d8:74:d7:e4:9c:ca:3d:b5:c2:96:26:72:70:bf:29:3f:6e:e7: 23:b0:cf:41:78:6c:93:e6:1f:cd:e2:42:e0:3a:f6:9e:9c:c7: 59:63:7d:41:f9:14:f0:b6:0c:a1:77:13:2f:d7:c9:c9:fb:84: 98:30:a4:19:02:f6:44:2f:bf:f8:1c:7a:da:e1:68:23:7a:67: 0e:8f:bc:77:ac:3a:68:2e:ca:80:8c:92:7c:3c:a5:27:c7:6e: 25:87:ee:64:5c:ce:ff:0e:37:25:d8:4b:e3:6c:be:7d:ea:32: ea:26:ee:5d:60:2b:e1:3c:70:fc:e4:f2:6e:ad:c9:29:40:5e: af:54:da:08:3c:05:00:54:cd:65:65:57:e5:43:2b:55:68:b8: f2:db:46:9a:33:6f:02:59:d3:38:df:ee:10:70:a0:3a:44:e1: 3a:9c:f3:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSn9iv4+AHRpkXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDQxNDBmYTktOWQzNy00ZmYwLWExNGQtNzEzZDZiNDk3ZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+HOZmkDGfp2nQm3xXurUcaI3kf3CBN4x4sw Nldb1gC04HrOuDxHRsEBd4XBzRH1ZkoCeJUUimLFA3HDcDpxIfRkDBOoDUpGPlcA f+TLPA4NDisaSiVg4MJOhyskQH25Y0VYclJIQgw7g3HYOVyC+XC9X5Z3bMKo1VPW OVPGU92eZvRLxdPZ61VaTVtZupRrpLkN5UZcF+lEEOhL1ADOZ8zW7SThS6sNNknf 5Dd5Hzc0yijgUtj0NmMuSesqA9JLBjgEzOyWIdKdb7Jetw38ubNvAdpO0ys8/lyb W2B29SxwuHJATbArD7Xcg7Jux67tnOzNT5GcBGaLqL9iiWCLLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHYyciw9ANn+hmiGjf1t0JLz426MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDdjYzk3ZjItM2M2Ny0z NWRhLTkzYzYtNDAzM2RhMjllZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUPBY9GOjnrCvyN4ZFwlA4KE0EnsW6hy0soRPq86r1CDCvQ8omJAYAO QnnrCb/LXYGoax1r63o70/IynuP5DN9rvOdRXseWTAaSnzqZFFsQan9n640TMGOj edh01+Scyj21wpYmcnC/KT9u5yOwz0F4bJPmH83iQuA69p6cx1ljfUH5FPC2DKF3 Ey/Xycn7hJgwpBkC9kQvv/gcetrhaCN6Zw6PvHesOmguyoCMknw8pSfHbiWH7mRc zv8ONyXYS+Nsvn3qMuom7l1gK+E8cPzk8m6tySlAXq9U2gg8BQBUzWVlV+VDK1Vo uPLbRpozbwJZ0zjf7hBwoDpE4Tqc888= -----END CERTIFICATE-----Generated at Thu Mar 26 11:40:10 2026 by rpki-client