$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa File: 59322c2d-6f24-393a-b195-8088f231b471.roa (raw, json) Hash identifier: gy1TzvPTXl4JEMgK4+1k+TpGwrOd0XuBssQu5VBY1x0= Subject key identifier: 30:20:85:73:87:99:4B:D3:CB:6F:0A:FF:03:5D:76:04:A3:7A:91:D6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA5FC545A4A847F252A40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a5:fc:54:5a:4a:84:7f:25:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=e0d6ecdf-b9b8-4ed7-b31f-94a8c80b7767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:eb:d8:55:25:aa:2d:c8:48:74:81:f5:6a:32: 02:43:65:d1:bc:6f:43:07:d1:6b:c0:23:28:57:5a: e6:06:5b:80:3b:8c:70:f7:bf:b2:1a:39:df:6c:1c: 16:66:1c:3e:c5:a0:44:c1:63:5c:3c:65:c5:60:98: dc:d9:90:44:3b:14:a3:01:b0:4c:fa:81:67:1d:5a: 94:5b:4b:27:16:fc:37:df:2b:6d:fa:79:ed:31:48: ae:8b:ed:94:f6:86:a5:3d:96:47:5e:94:09:aa:5e: 95:c4:c7:15:bd:8c:49:db:23:5e:21:8b:ba:e5:7f: a2:ce:39:03:0e:24:16:ab:0e:95:9a:0e:38:72:da: 1f:6e:c8:e7:6d:e9:ac:f3:c7:88:4a:ba:f1:ec:e2: c5:d7:ed:59:1a:a8:f3:d2:b0:eb:3f:ab:80:69:fb: d7:a5:35:aa:4a:f5:9a:4f:ec:bb:81:a2:6c:27:c4: 76:f6:ed:7b:29:36:ac:8a:34:24:38:8d:23:1f:40: d6:97:b5:e7:9f:dc:29:15:7c:d9:3d:c4:e1:7e:d0: 4a:8b:28:96:1c:08:52:ec:d7:d0:5c:d8:af:18:ae: 03:f7:12:14:96:b0:14:2c:38:52:08:ad:bd:68:56: c1:b2:89:6a:96:75:c2:d0:b6:1b:ed:bf:47:8d:67: 98:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:20:85:73:87:99:4B:D3:CB:6F:0A:FF:03:5D:76:04:A3:7A:91:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/59322c2d-6f24-393a-b195-8088f231b471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5f:52:9b:ac:dc:8c:a0:e1:49:2d:f5:f0:07:d2:ac:1f:d2: cd:6d:bd:f0:c3:17:4c:cc:8f:b3:56:c2:ec:5f:6d:c4:45:e8: 7a:60:63:b4:35:20:77:1d:60:e4:c1:cb:91:48:c1:65:18:17: aa:9e:8f:4f:1c:1e:77:90:41:94:01:63:4e:80:d5:f0:d9:88: e2:aa:41:59:8e:51:f6:f6:c9:49:ef:b8:44:cd:db:7e:d5:f3: fc:78:d0:e2:4b:8f:de:59:ad:f5:30:6f:ef:8a:82:06:54:f6: 73:22:82:ed:23:10:c0:1c:c1:e0:12:f5:3a:fc:85:4e:5c:e2: 57:dd:22:70:06:ed:db:24:6e:ca:b5:28:1a:72:d4:8f:f2:f0: 12:a1:59:4a:ec:94:c2:bb:57:7a:d4:5d:86:45:41:c0:d0:73: 14:b4:91:5d:f6:98:38:b4:89:0d:71:4c:92:a0:c4:5c:15:0e: ba:9d:b1:6b:7e:64:79:0e:5d:89:5b:d2:39:4e:ce:ac:69:35: 3a:b8:c8:33:c6:30:bc:e0:a9:5e:b0:30:e1:6c:12:2e:a9:31: 85:a5:ee:be:2b:30:11:26:94:80:73:19:95:aa:c9:11:dc:65: cd:72:32:04:6d:75:a7:9b:a1:49:39:59:03:a3:d2:c1:29:f9: 35:24:57:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaX8VFpKhH8lKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTBkNmVjZGYtYjliOC00ZWQ3LWIzMWYtOTRhOGM4MGI3NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+vYVSWqLchIdIH1ajICQ2XRvG9DB9FrwCMo V1rmBluAO4xw97+yGjnfbBwWZhw+xaBEwWNcPGXFYJjc2ZBEOxSjAbBM+oFnHVqU W0snFvw33ytt+nntMUiui+2U9oalPZZHXpQJql6VxMcVvYxJ2yNeIYu65X+izjkD DiQWqw6Vmg44ctofbsjnbems88eISrrx7OLF1+1ZGqjz0rDrP6uAafvXpTWqSvWa T+y7gaJsJ8R29u17KTasijQkOI0jH0DWl7Xnn9wpFXzZPcThftBKiyiWHAhS7NfQ XNivGK4D9xIUlrAULDhSCK29aFbBsolqlnXC0LYb7b9HjWeYKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAghXOHmUvTy28K/wNddgSjepHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTkzMjJjMmQtNmYyNC0z OTNhLWIxOTUtODA4OGYyMzFiNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdfUpus3Iyg4Ukt9fAH0qwf0s1tvfDDF0zMj7NWwuxfbcRF6HpgY7Q1 IHcdYOTBy5FIwWUYF6qej08cHneQQZQBY06A1fDZiOKqQVmOUfb2yUnvuETN237V 8/x40OJLj95ZrfUwb++KggZU9nMigu0jEMAcweAS9Tr8hU5c4lfdInAG7dskbsq1 KBpy1I/y8BKhWUrslMK7V3rUXYZFQcDQcxS0kV32mDi0iQ1xTJKgxFwVDrqdsWt+ ZHkOXYlb0jlOzqxpNTq4yDPGMLzgqV6wMOFsEi6pMYWl7r4rMBEmlIBzGZWqyRHc Zc1yMgRtdaeboUk5WQOj0sEp+TUkV08= -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:56 2026 by rpki-client