$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa File: 53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa (raw, json) Hash identifier: dJHQ+APoBj8kdEVOhY2Z6rlPWMqNgK7Lb04mcExuQhs= Subject key identifier: 2B:5C:BC:C3:7D:73:4A:49:AF:44:BD:36:0B:AF:A4:E9:CD:FB:33:2B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A4CBDD38C60BB3B336900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36411 IP address blocks: 104.135.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:4c:bd:d3:8c:60:bb:3b:33:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5fbf7149-57bd-4a79-947d-197168534f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:b5:d0:ef:32:44:fb:3d:8b:84:30:50:3f: ec:22:f1:cb:ff:52:c8:c0:d4:2d:39:2f:70:bc:df: 61:78:b0:72:2c:64:32:ee:23:20:3d:de:38:1a:64: 17:28:37:43:d7:bf:86:f5:4d:9c:b5:c4:55:d2:de: db:4a:ce:bf:da:19:d8:67:f9:ff:95:11:36:7b:49: e4:97:47:01:68:95:fe:b0:6c:71:73:55:47:d0:cd: 8c:6c:e1:85:e0:cd:e3:30:4d:a9:f9:82:9f:71:fa: cf:c3:45:42:e8:e6:5f:4c:1a:e4:85:92:6c:b3:4d: dc:f1:87:d1:3f:30:9d:ca:98:f0:b1:bd:a9:a1:8f: a5:99:33:d6:58:cf:7e:8c:b5:ba:64:ea:4d:87:bc: 95:fc:e1:57:9a:88:b2:09:4c:0b:f0:9c:92:4a:84: e6:c3:b8:07:96:77:9d:79:31:6c:54:62:b7:64:4e: 1a:76:a5:e9:22:5f:b8:dc:6e:10:82:49:83:86:44: 9a:5d:fe:8c:d7:6b:e2:d5:e5:96:39:65:ce:05:64: 3a:67:5b:87:8b:0f:8e:ed:05:f9:92:7f:07:ae:70: d9:7c:ac:09:93:4e:3b:df:ae:d4:47:59:fe:f0:4d: b2:6f:ec:46:a8:72:d8:8e:1f:52:58:c5:7c:b4:92: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5C:BC:C3:7D:73:4A:49:AF:44:BD:36:0B:AF:A4:E9:CD:FB:33:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:28:c8:ef:2f:c9:68:89:af:b7:5f:23:f8:21:16:11:8e:5a: e7:fa:64:47:af:8a:ed:fc:4a:f9:68:42:20:d7:bb:ff:c3:a0: b5:75:cf:96:2f:3b:d1:c3:eb:83:a2:51:65:90:81:91:34:a5: ce:41:67:bc:3f:28:b7:ad:73:48:84:1b:96:68:6f:17:21:d4: 99:73:21:1c:23:1c:fb:a4:79:7b:0b:a5:6f:c4:5b:03:0b:88: dd:37:de:17:51:cd:de:27:4b:41:35:f6:17:ae:14:80:9a:1f: 38:20:a1:a0:31:ab:35:5f:dc:f2:c4:51:88:76:14:90:9d:f8: 00:7f:57:19:df:64:cf:25:d5:88:a7:9b:d6:1d:08:19:bf:af: a4:83:ac:67:90:7b:a0:9a:dc:e1:4e:5e:10:88:4d:39:ae:92: f1:ab:2e:2f:9f:c8:b2:60:da:c0:c0:1a:c1:5a:3a:9f:2f:35: b9:89:26:fa:16:58:77:a0:3a:a4:db:97:09:42:38:81:c0:ce: 0f:fd:0a:2d:5d:66:b9:48:7b:f3:1b:cf:fa:3d:92:d9:1e:7f: 9a:fc:e1:6a:14:41:3b:7f:3c:1f:54:6a:a8:f4:f3:30:ed:51: 5d:85:e9:2c:bc:1b:f7:2f:89:8e:52:eb:6f:82:be:94:99:d6: c5:5f:e6:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSky904xguzszaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWZiZjcxNDktNTdiZC00YTc5LTk0N2QtMTk3MTY4NTM0ZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhW10O8yRPs9i4QwUD/sIvHL/1LIwNQtOS9w vN9heLByLGQy7iMgPd44GmQXKDdD17+G9U2ctcRV0t7bSs6/2hnYZ/n/lRE2e0nk l0cBaJX+sGxxc1VH0M2MbOGF4M3jME2p+YKfcfrPw0VC6OZfTBrkhZJss03c8YfR PzCdypjwsb2poY+lmTPWWM9+jLW6ZOpNh7yV/OFXmoiyCUwL8JySSoTmw7gHlned eTFsVGK3ZE4adqXpIl+43G4QgkmDhkSaXf6M12vi1eWWOWXOBWQ6Z1uHiw+O7QX5 kn8HrnDZfKwJk047367UR1n+8E2yb+xGqHLYjh9SWMV8tJLvBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtcvMN9c0pJr0S9NguvpOnN+zMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTNlZGRmZGItMThkYy0z OWY0LThlZjAtYzNkNGZlZmEwNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUoyO8vyWiJr7dfI/ghFhGOWuf6ZEeviu38SvloQiDXu//DoLV1z5Yv O9HD64OiUWWQgZE0pc5BZ7w/KLetc0iEG5Zobxch1JlzIRwjHPukeXsLpW/EWwML iN033hdRzd4nS0E19heuFICaHzggoaAxqzVf3PLEUYh2FJCd+AB/VxnfZM8l1Yin m9YdCBm/r6SDrGeQe6Ca3OFOXhCITTmukvGrLi+fyLJg2sDAGsFaOp8vNbmJJvoW WHegOqTblwlCOIHAzg/9Ci1dZrlIe/Mbz/o9ktkef5r84WoUQTt/PB9Uaqj08zDt UV2F6Sy8G/cviY5S62+CvpSZ1sVf5qI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:35:22 2026 by rpki-client