$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56be623b-b81d-3e9a-b966-1c323b37a755.roa File: 56be623b-b81d-3e9a-b966-1c323b37a755.roa (raw, json) Hash identifier: +Gb3AbTYnzQ/FcxWUZTaLhDR3k6ePSkNdL3EiO4cFcs= Subject key identifier: B6:57:A9:60:A6:2A:03:39:79:92:1F:96:AA:30:CB:27:F8:AF:4E:41 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8F1D1A6F5FA2AC33E9C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56be623b-b81d-3e9a-b966-1c323b37a755.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8f:1d:1a:6f:5f:a2:ac:33:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b24b24f5-0a7a-4be9-86e6-24ab7341da28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:e6:95:8b:ec:87:ce:bc:25:88:50:a7:d2: 42:b6:b4:13:ce:ec:3f:d6:a5:22:24:87:7a:84:8a: 32:62:33:9f:8f:33:43:80:b2:00:73:09:5c:28:9f: 30:65:5c:a7:63:ad:e2:84:47:06:65:4f:52:8d:71: d5:bf:67:62:8b:ef:f4:30:1f:66:10:e5:ef:c7:50: 89:77:a5:1d:cd:1e:0f:33:c3:f8:80:f8:01:28:a5: 74:eb:16:80:f7:7d:70:de:b8:0d:43:74:f1:48:c5: 6e:f8:6a:b2:b4:e3:ff:01:ee:b8:f4:f2:7c:ad:35: 95:0a:50:2d:7a:34:b3:8d:c7:93:32:8d:df:59:df: d3:6e:43:55:7c:c2:9e:9c:88:bb:62:64:7f:5a:09: e6:59:e1:05:d0:21:4b:bb:0c:f2:dd:14:0f:fe:46: e7:c9:a1:d2:f6:f4:29:94:9b:3a:61:c6:2a:c9:fc: 89:93:3f:10:bd:0c:7a:3f:0e:3e:2a:3c:ac:1e:66: fa:0b:36:ae:19:13:e9:1c:11:cf:de:9a:af:55:41: 33:8c:4f:c6:54:56:67:1e:99:aa:18:e4:fa:ab:e8: 70:bd:27:45:ff:3d:7a:e3:2f:8d:50:4a:94:47:06: 98:eb:43:cf:f1:6d:4e:c3:f9:e3:ea:0b:86:e0:43: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:57:A9:60:A6:2A:03:39:79:92:1F:96:AA:30:CB:27:F8:AF:4E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56be623b-b81d-3e9a-b966-1c323b37a755.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7e:a9:bb:50:88:cd:1c:81:c2:a2:e2:df:47:58:05:a9:26: bf:aa:0e:4d:1d:68:fa:5a:6b:15:c6:62:b2:7d:08:89:62:25: 37:70:44:1a:07:b4:d4:09:6d:c8:d8:4e:7b:4e:75:f5:40:e9: 2c:ba:7e:cd:9f:03:d1:ae:16:d1:c2:d8:62:8e:9a:7e:8b:33: b2:1e:58:04:a2:9b:c3:d7:fc:ef:7a:6e:b5:de:00:9c:7b:f9: df:68:2f:56:08:e4:7b:86:e6:21:75:e1:7f:b2:a7:41:69:c8: bd:27:7f:94:8c:34:68:3b:2c:ab:ae:8d:0f:e9:0e:04:6c:b6: 70:5f:68:85:32:13:c1:8f:af:e6:9e:ff:ff:7d:03:43:a0:dd: a5:f2:35:a9:a2:82:d8:3f:b3:9a:fd:29:0b:37:54:dc:20:1b: 0f:67:34:cd:cc:5b:5b:ca:f9:07:12:8f:b4:5e:be:3e:9c:02: c8:08:6d:b7:b0:98:04:ee:34:08:0d:83:a1:16:16:d0:de:bf: 9c:4d:de:0f:70:ff:28:5a:ff:ec:a6:d1:b9:cd:23:46:c6:d4: 2a:16:63:1a:63:19:ed:c5:c3:08:3c:1c:98:0e:db:c4:24:49: 1f:bc:e4:f8:b9:88:c0:f7:d4:da:0b:12:c9:95:d1:58:2c:13: f6:2f:59:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY8dGm9foqwz6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjI0YjI0ZjUtMGE3YS00YmU5LTg2ZTYtMjRhYjczNDFkYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1/mlYvsh868JYhQp9JCtrQTzuw/1qUiJId6 hIoyYjOfjzNDgLIAcwlcKJ8wZVynY63ihEcGZU9SjXHVv2dii+/0MB9mEOXvx1CJ d6UdzR4PM8P4gPgBKKV06xaA931w3rgNQ3TxSMVu+GqytOP/Ae649PJ8rTWVClAt ejSzjceTMo3fWd/TbkNVfMKenIi7YmR/WgnmWeEF0CFLuwzy3RQP/kbnyaHS9vQp lJs6YcYqyfyJkz8QvQx6Pw4+KjysHmb6CzauGRPpHBHP3pqvVUEzjE/GVFZnHpmq GOT6q+hwvSdF/z164y+NUEqURwaY60PP8W1Ow/nj6guG4EOoPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZXqWCmKgM5eZIflqowyyf4r05BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTZiZTYyM2ItYjgxZC0z ZTlhLWI5NjYtMWMzMjNiMzdhNzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIauMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB+qbtQiM0cgcKi4t9HWAWpJr+qDk0daPpaaxXGYrJ9CIliJTdwRBoH tNQJbcjYTntOdfVA6Sy6fs2fA9GuFtHC2GKOmn6LM7IeWASim8PX/O96brXeAJx7 +d9oL1YI5HuG5iF14X+yp0FpyL0nf5SMNGg7LKuujQ/pDgRstnBfaIUyE8GPr+ae //99A0Og3aXyNamigtg/s5r9KQs3VNwgGw9nNM3MW1vK+QcSj7Revj6cAsgIbbew mATuNAgNg6EWFtDev5xN3g9w/yha/+ym0bnNI0bG1CoWYxpjGe3Fwwg8HJgO28Qk SR+85Pi5iMD31NoLEsmV0VgsE/YvWS8= -----END CERTIFICATE-----Generated at Thu Mar 26 18:00:52 2026 by rpki-client