$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50aff6e3-8352-3d3b-bb29-a0240731bc4a.roa File: 50aff6e3-8352-3d3b-bb29-a0240731bc4a.roa (raw, json) Hash identifier: vM05oYlwRfxWJa9TYYf+WbXWwI9ZMt2Q/6r5VhhqbII= Subject key identifier: B9:E2:49:BD:85:D8:BD:36:66:42:28:AC:2E:33:E5:50:A7:97:2B:B2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117285ECFC76EEE6F00FC040 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50aff6e3-8352-3d3b-bb29-a0240731bc4a.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:85:ec:fc:76:ee:e6:f0:0f:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=1989afb5-f01d-4542-b136-f237207edebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:f3:c2:40:14:00:52:0d:c3:6c:3f:15:7d: 5a:f0:f8:bd:a5:0a:a7:b3:9d:76:2e:8b:b7:6e:5e: d7:45:f6:f9:58:ec:76:59:bc:90:93:e2:59:13:e0: 04:0d:a6:0a:4e:b8:46:f5:09:55:3e:0a:4b:24:59: 46:0a:b7:bd:60:f8:66:28:d5:47:10:04:27:6b:ad: 6b:87:03:ad:81:35:37:a1:cf:68:87:78:c0:ca:aa: 01:db:74:ba:53:98:a5:c7:c9:79:e1:ac:3c:bf:c0: 6a:d0:c1:3c:95:06:59:dd:7b:45:87:a3:af:a9:21: 3e:90:5e:3a:ef:fc:42:c2:a3:54:b7:9b:c2:1c:b0: 3e:08:73:bd:46:38:ed:71:e6:b1:44:a5:75:ed:a8: fd:50:6f:02:6c:ad:be:25:66:a3:be:bd:35:a7:7e: 77:53:98:0c:a5:2d:b2:eb:03:1a:8b:4b:04:7e:85: 32:45:f9:97:84:8b:22:b4:e1:cd:40:b0:5e:b8:af: c9:b1:42:bd:14:85:c5:f0:b9:52:99:ac:5a:f4:cc: 3d:e3:e1:52:ba:52:ee:35:39:ca:c9:81:3b:1c:6b: 84:da:cb:9a:26:8c:f5:88:63:45:0c:8c:86:93:02: 2b:b3:80:15:cc:a1:42:cb:8e:ad:54:87:21:51:de: a9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:49:BD:85:D8:BD:36:66:42:28:AC:2E:33:E5:50:A7:97:2B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50aff6e3-8352-3d3b-bb29-a0240731bc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ff:8d:24:bf:3f:37:09:e3:3f:5a:c8:cd:15:29:80:f8:d7: f5:9f:0a:e9:db:c3:cd:7b:4a:8b:c7:f7:ac:5a:92:d5:f8:69: 32:bc:cd:85:ec:1e:ad:92:dd:e4:8e:d6:0a:55:d4:a2:af:f2: 04:04:e0:27:fe:a6:d9:bf:b4:58:3c:6e:48:c0:06:56:97:59: 05:f6:e7:11:46:6f:b0:0a:62:b7:e7:83:8b:33:b4:8a:a6:7c: be:23:b2:88:fb:10:dc:f8:8c:85:7d:bd:f7:59:25:ca:0d:c8: 47:19:7d:ec:18:34:3f:8e:23:21:03:ac:1c:e5:26:4e:4e:a2: 80:b5:ed:83:67:cb:21:b7:76:7f:1a:c9:07:fe:ef:18:3a:c8: b8:b9:25:ef:88:95:00:8e:1e:18:a0:87:01:90:9c:b9:7d:8b: 2b:2d:a1:6f:6f:5c:a6:41:c5:17:1e:08:1a:a3:41:49:57:14: 1e:34:91:78:94:7b:94:79:f8:82:c2:b4:1d:d6:90:49:88:7f: 98:b1:37:93:07:9e:84:9d:02:4b:ba:99:3a:79:87:f6:6c:c4: 02:37:cf:b4:17:87:6b:12:2e:d6:c2:00:d2:38:22:5a:bd:c7: ae:cc:32:bb:9b:29:98:ce:aa:0a:75:70:9b:9a:d1:34:21:1c: 22:6b:b7:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoXs/Hbu5vAPwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MTk4OWFmYjUtZjAxZC00NTQyLWIxMzYtZjIzNzIwN2VkZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSbzwkAUAFINw2w/FX1a8Pi9pQqns512Lou3 bl7XRfb5WOx2WbyQk+JZE+AEDaYKTrhG9QlVPgpLJFlGCre9YPhmKNVHEAQna61r hwOtgTU3oc9oh3jAyqoB23S6U5ilx8l54aw8v8Bq0ME8lQZZ3XtFh6OvqSE+kF46 7/xCwqNUt5vCHLA+CHO9RjjtceaxRKV17aj9UG8CbK2+JWajvr01p353U5gMpS2y 6wMai0sEfoUyRfmXhIsitOHNQLBeuK/JsUK9FIXF8LlSmaxa9Mw94+FSulLuNTnK yYE7HGuE2suaJoz1iGNFDIyGkwIrs4AVzKFCy46tVIchUd6plwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLniSb2F2L02ZkIorC4z5VCnlyuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTBhZmY2ZTMtODM1Mi0z ZDNiLWJiMjktYTAyNDA3MzFiYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT/jSS/PzcJ4z9ayM0VKYD41/WfCunbw817SovH96xaktX4aTK8zYXs Hq2S3eSO1gpV1KKv8gQE4Cf+ptm/tFg8bkjABlaXWQX25xFGb7AKYrfng4sztIqm fL4jsoj7ENz4jIV9vfdZJcoNyEcZfewYND+OIyEDrBzlJk5OooC17YNnyyG3dn8a yQf+7xg6yLi5Je+IlQCOHhighwGQnLl9iystoW9vXKZBxRceCBqjQUlXFB40kXiU e5R5+ILCtB3WkEmIf5ixN5MHnoSdAku6mTp5h/ZsxAI3z7QXh2sSLtbCANI4Ilq9 x67MMrubKZjOqgp1cJua0TQhHCJrt+s= -----END CERTIFICATE-----Generated at Thu Mar 26 19:41:56 2026 by rpki-client