$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/554644c6-bfc2-3054-8bb1-b578305cea99.roa File: 554644c6-bfc2-3054-8bb1-b578305cea99.roa (raw, json) Hash identifier: QXTR4+nmMniW0c47WJUE45llimEY27U7DEpjbsMMZG0= Subject key identifier: D3:63:BE:9D:2D:EA:52:16:0E:10:C2:5E:8A:2B:96:D1:2E:49:BA:03 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11728EEF1482B7A148497A80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/554644c6-bfc2-3054-8bb1-b578305cea99.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:8e:ef:14:82:b7:a1:48:49:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=84bef3a2-826f-4583-8fc6-25bb02b6b5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:3a:ce:85:ab:d7:90:b8:59:c3:c7:85:0c: 46:5d:ec:fa:f2:85:81:13:57:9f:67:c4:8f:87:36: 49:af:ff:7b:9e:d1:b5:42:e8:e9:8a:72:32:16:34: 60:66:03:bf:bb:b1:14:9e:cb:f6:d1:13:55:ba:7b: c4:19:72:c9:25:b5:40:2b:f7:79:b5:b2:2c:8f:94: 44:2e:66:26:83:66:ea:fd:96:d2:99:04:d7:c9:d6: fc:1c:6e:b4:91:e8:5d:8f:38:ae:12:94:c5:52:35: ce:c6:ea:e7:da:f8:4f:f2:6f:d4:07:0d:21:99:3f: 0a:7e:d0:09:61:a1:ad:4b:5f:52:20:0c:ca:70:df: d2:b7:95:ec:2c:a1:67:39:d5:80:87:35:17:d5:74: bd:b1:69:07:9b:09:73:c8:6b:b3:f0:22:65:c7:c3: 0c:a3:d1:ae:bb:c5:10:75:49:5a:2c:ea:a0:65:86: 31:95:c9:20:9f:7c:60:1c:ef:94:f1:40:95:61:45: 0f:8c:3e:89:a5:ca:1d:9c:ed:fa:5a:2e:fd:68:fc: b5:52:a8:0b:69:46:67:9c:3c:18:42:9d:68:0c:b6: d8:b7:29:34:5b:27:72:94:c6:84:01:a3:6d:aa:f0: 84:92:08:44:26:e3:9c:4e:88:90:28:29:bc:a8:6d: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:BE:9D:2D:EA:52:16:0E:10:C2:5E:8A:2B:96:D1:2E:49:BA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/554644c6-bfc2-3054-8bb1-b578305cea99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8e:0b:92:db:84:69:ed:04:28:a6:a7:23:7f:83:7a:9a:ed: 7b:54:88:48:7d:ac:a2:73:77:84:63:b3:a3:4e:bf:23:28:31: 1b:96:4a:c7:8a:5c:a3:54:24:74:c3:19:81:05:44:89:f7:bb: 27:90:d5:99:8b:dd:0e:81:05:2e:d3:f0:2e:19:a3:2d:d6:ae: d2:db:d1:9f:21:bd:e5:09:19:d8:c7:29:b9:1d:d7:47:d3:6e: ef:65:13:ba:63:0e:0e:1f:f7:f4:b1:5b:35:43:d1:ba:dd:73: 83:e3:b2:05:be:69:7a:8c:7d:3b:90:92:4b:0c:73:6e:57:e2: 51:dd:c4:15:d3:eb:71:9c:1f:5f:cc:6a:ae:83:5a:ed:d9:53: bb:4e:8f:e5:bb:24:13:f8:94:95:b7:50:0c:c7:81:01:18:ee: be:13:2d:24:78:be:6f:56:12:97:0b:42:a1:8d:4b:1e:8a:35: 5c:a5:21:b4:85:a5:03:9a:d8:f2:3a:89:46:a5:7b:d1:6b:d7: b1:6b:d7:8a:f2:ea:e5:27:c5:95:72:fc:49:e0:b2:62:75:03: 0f:88:b5:bb:1f:5b:0d:42:0f:0a:6b:cf:10:39:9b:ec:48:cf: 80:b1:a1:ad:09:b7:df:b4:85:af:24:bf:d2:cc:2d:9c:64:d2: 98:fb:8d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rco7vFIK3oUhJeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ODRiZWYzYTItODI2Zi00NTgzLThmYzYtMjViYjAyYjZiNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsts6zoWr15C4WcPHhQxGXez68oWBE1efZ8SP hzZJr/97ntG1QujpinIyFjRgZgO/u7EUnsv20RNVunvEGXLJJbVAK/d5tbIsj5RE LmYmg2bq/ZbSmQTXydb8HG60kehdjziuEpTFUjXOxurn2vhP8m/UBw0hmT8KftAJ YaGtS19SIAzKcN/St5XsLKFnOdWAhzUX1XS9sWkHmwlzyGuz8CJlx8MMo9Guu8UQ dUlaLOqgZYYxlckgn3xgHO+U8UCVYUUPjD6JpcodnO36Wi79aPy1UqgLaUZnnDwY Qp1oDLbYtyk0WydylMaEAaNtqvCEkghEJuOcToiQKCm8qG1V+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNjvp0t6lIWDhDCXoorltEuSboDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTU0NjQ0YzYtYmZjMi0z MDU0LThiYjEtYjU3ODMwNWNlYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2OC5LbhGntBCimpyN/g3qa7XtUiEh9rKJzd4Rjs6NOvyMoMRuWSseK XKNUJHTDGYEFRIn3uyeQ1ZmL3Q6BBS7T8C4Zoy3WrtLb0Z8hveUJGdjHKbkd10fT bu9lE7pjDg4f9/SxWzVD0brdc4PjsgW+aXqMfTuQkksMc25X4lHdxBXT63GcH1/M aq6DWu3ZU7tOj+W7JBP4lJW3UAzHgQEY7r4TLSR4vm9WEpcLQqGNSx6KNVylIbSF pQOa2PI6iUale9Fr17Fr14ry6uUnxZVy/EngsmJ1Aw+ItbsfWw1CDwprzxA5m+xI z4Cxoa0Jt9+0ha8kv9LMLZxk0pj7jUs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:45 2026 by rpki-client