$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa File: 4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa (raw, json) Hash identifier: AMPVgzhRn/Q8s0TqTju+t302lEjFUxcvo4L1C3FNcqM= Subject key identifier: 0A:A6:54:C6:D1:FB:A8:96:10:5F:52:AB:AC:28:15:45:0F:BA:76:15 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11729098A5795722229CC680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:90:98:a5:79:57:22:22:9c:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=52ed8444-aed3-4ee6-8c40-e75eb62acc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:15:4d:7a:12:77:88:93:6b:d8:d4:c4:96: ac:94:49:71:9b:86:df:79:ec:56:33:e3:2a:a7:58: a0:71:ae:bb:6d:41:66:fe:e9:86:e5:3c:45:b7:37: 39:8d:ce:4c:74:8f:71:f4:62:a1:d6:1b:bd:83:a1: 99:db:32:ea:f2:20:69:f1:90:8b:5f:aa:4d:fd:4b: be:02:eb:ba:43:a3:e9:37:8f:89:c1:57:aa:0f:a4: 7a:44:4b:40:95:d6:c9:74:d6:2f:b6:b1:fa:5d:4a: cb:f5:2c:29:c3:4a:e5:f1:bf:ad:0b:5b:0d:c3:a4: 4b:1b:ff:b8:fb:d9:8e:65:1f:75:da:f2:13:08:f1: 57:01:06:76:84:ae:fd:6b:61:83:07:68:ec:cd:d4: bd:19:cd:69:3f:a1:7b:27:b6:39:a6:4d:aa:75:f4: 2a:31:d3:17:7e:4a:2e:9a:ef:3a:fe:ac:7e:a7:d5: 2f:47:1b:55:85:c7:cd:e4:19:2e:99:2a:7c:32:fd: d1:51:0d:9c:f6:af:3a:f2:a8:25:ca:62:04:3f:ea: c4:a0:6d:ae:9f:81:f0:21:fd:f4:3d:8b:f7:48:62: 97:26:cf:24:31:0a:d8:34:f9:de:97:5e:8b:b6:cc: 04:b0:3e:51:e2:ee:47:dd:e3:f7:3c:1a:f6:a9:d7: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:54:C6:D1:FB:A8:96:10:5F:52:AB:AC:28:15:45:0F:BA:76:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b1b156b-90ab-3dc9-ae75-7ae0176690af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7e:86:c1:4a:bc:f1:c5:a6:8a:39:09:37:83:74:f9:8c:d3: ac:26:68:ba:68:a0:10:a6:a2:83:9f:d5:79:e9:fa:76:32:25: cf:de:18:cd:fa:98:2d:d8:cb:11:ca:58:f4:25:d9:07:97:bd: a5:51:8a:c5:5e:dc:66:7e:98:a0:5e:11:bc:1e:5c:9e:13:a7: fa:9b:84:64:ba:0f:00:50:cc:3c:d6:18:3a:29:b9:57:64:15: ac:37:7e:08:9f:b1:0a:fb:ba:e0:0e:07:0a:9e:d2:0c:a1:03: 3d:3a:9e:34:49:95:7e:2a:c7:c8:b8:80:47:c3:f7:08:ef:6a: 39:bb:0f:e8:62:26:c0:d3:b6:94:6d:38:53:75:dc:f5:e5:75: ef:e0:2d:67:55:4a:07:11:d6:5d:9c:bf:e7:43:2a:2a:b7:b1: 97:13:0a:a1:de:89:f8:d4:69:bd:75:27:0f:8f:28:25:06:da: 74:48:12:32:c5:87:ab:32:10:1d:90:df:1d:18:8b:87:ea:cb: 20:54:7d:c0:64:d3:6c:7b:15:82:47:dc:f1:55:46:5c:e0:dc: 22:60:de:d4:44:d2:bc:1e:9a:bc:d7:21:da:c0:c5:cd:f1:7f: 96:d2:75:4b:32:c0:dc:d6:2a:b5:ee:59:27:41:f3:f7:b7:33: 61:31:bf:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpCYpXlXIiKcxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NTJlZDg0NDQtYWVkMy00ZWU2LThjNDAtZTc1ZWI2MmFjYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszgVTXoSd4iTa9jUxJaslElxm4bfeexWM+Mq p1igca67bUFm/umG5TxFtzc5jc5MdI9x9GKh1hu9g6GZ2zLq8iBp8ZCLX6pN/Uu+ Auu6Q6PpN4+JwVeqD6R6REtAldbJdNYvtrH6XUrL9Swpw0rl8b+tC1sNw6RLG/+4 +9mOZR912vITCPFXAQZ2hK79a2GDB2jszdS9Gc1pP6F7J7Y5pk2qdfQqMdMXfkou mu86/qx+p9UvRxtVhcfN5BkumSp8Mv3RUQ2c9q868qglymIEP+rEoG2un4HwIf30 PYv3SGKXJs8kMQrYNPnel16LtswEsD5R4u5H3eP3PBr2qdflIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqmVMbR+6iWEF9Sq6woFUUPunYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGIxYjE1NmItOTBhYi0z ZGM5LWFlNzUtN2FlMDE3NjY5MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5+hsFKvPHFpoo5CTeDdPmM06wmaLpooBCmooOf1Xnp+nYyJc/eGM36 mC3YyxHKWPQl2QeXvaVRisVe3GZ+mKBeEbweXJ4Tp/qbhGS6DwBQzDzWGDopuVdk Faw3fgifsQr7uuAOBwqe0gyhAz06njRJlX4qx8i4gEfD9wjvajm7D+hiJsDTtpRt OFN13PXlde/gLWdVSgcR1l2cv+dDKiq3sZcTCqHeifjUab11Jw+PKCUG2nRIEjLF h6syEB2Q3x0Yi4fqyyBUfcBk02x7FYJH3PFVRlzg3CJg3tRE0rwemrzXIdrAxc3x f5bSdUsywNzWKrXuWSdB8/e3M2Exv9g= -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:51 2026 by rpki-client