$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa File: 5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa (raw, json) Hash identifier: iq0/X3v+eHkjSIDWTPQxPvv60GihCEkynOEw7Rvih9c= Subject key identifier: F1:5F:EE:DB:14:DB:12:E4:59:5E:83:9E:A0:40:97:4B:8F:80:B0:03 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9EB862EA530CA63071C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9e:b8:62:ea:53:0c:a6:30:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8ed80694-ceea-4754-b338-f3858330b1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:de:c5:6d:fd:bc:b5:02:47:81:8d:c3:26:35: a2:a5:a6:94:d1:43:64:7b:92:13:d1:e4:31:ac:32: 18:34:66:44:e4:c1:51:45:02:ac:43:80:6c:eb:a2: c7:67:96:fd:c8:de:6c:eb:b3:81:7a:ad:1d:7e:a8: 18:01:7d:a1:e5:7f:25:c4:00:06:6e:c1:a1:5c:5a: 3b:34:e5:a0:e5:83:e0:55:26:4d:81:63:44:99:71: 90:ae:31:52:26:6f:72:44:07:63:00:06:87:d7:3d: cf:61:ff:28:9d:2b:f8:47:e2:cf:7d:3a:1a:b8:5d: eb:c4:2f:36:e6:70:64:9d:e4:ee:e2:49:3b:0f:82: 1a:48:89:d1:a1:88:f7:88:85:ff:c6:18:76:1a:fe: e8:50:ae:6d:99:8c:38:20:b0:6c:ca:6f:d1:00:f8: dc:12:4c:84:6f:21:c6:e0:81:46:8e:6d:7e:05:21: ad:96:19:bf:c7:c6:f8:86:c7:bc:87:63:41:6f:ec: 70:67:5f:7c:f2:0e:b3:ae:26:06:3e:61:ac:67:7c: c8:93:df:09:dd:37:93:d8:ed:f5:db:33:43:7d:94: 66:83:ef:15:29:d1:e1:c0:87:e2:72:3c:ea:9d:1b: b4:ab:5b:3a:6a:ac:3a:05:24:53:1a:b2:87:f5:b9: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5F:EE:DB:14:DB:12:E4:59:5E:83:9E:A0:40:97:4B:8F:80:B0:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a9:24:ad:45:81:27:31:4d:bc:7c:e1:0b:83:33:0f:67:a7: 0b:23:5c:af:fd:e2:b9:81:fb:f2:8d:01:e3:9a:d4:2b:e6:d1: e2:b8:b6:48:d0:96:42:ed:3f:44:1d:5c:8f:41:15:68:e7:f8: b9:40:28:c9:73:2a:76:5e:dd:e8:c8:98:9f:2d:3e:ea:44:35: 9e:7c:e3:9a:8b:83:e8:f3:ba:30:dd:39:11:48:e8:62:ce:70: 44:a7:d1:ce:bf:2a:68:64:99:a1:7e:b9:d2:01:b4:b9:31:26: 53:54:e6:9d:5a:79:fd:f4:fe:ff:5e:94:7e:31:02:3f:9e:1b: 66:6d:76:1f:1d:50:fd:90:de:a0:fd:43:37:d6:9d:e4:3e:8a: 00:7f:15:f0:7f:c3:23:36:28:52:84:4f:aa:fd:19:cb:d4:42: 53:ac:30:93:dc:1c:d0:ec:74:2b:ed:10:a7:23:cb:42:2c:e9: 83:78:b1:9f:84:56:9c:2e:a0:ba:04:4b:88:6e:fa:fc:34:27: b0:92:89:a1:c5:e0:83:4d:d6:2a:d0:e1:24:f6:69:cf:c5:88: 01:e0:f9:27:39:b1:97:05:6f:d9:ee:ed:08:74:62:bb:e6:fc: 4e:39:01:4f:3a:2d:ed:05:aa:07:ca:ea:3e:0a:08:65:26:8b: 53:66:b5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ64YupTDKYwccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OGVkODA2OTQtY2VlYS00NzU0LWIzMzgtZjM4NTgzMzBiMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg97Fbf28tQJHgY3DJjWipaaU0UNke5IT0eQx rDIYNGZE5MFRRQKsQ4Bs66LHZ5b9yN5s67OBeq0dfqgYAX2h5X8lxAAGbsGhXFo7 NOWg5YPgVSZNgWNEmXGQrjFSJm9yRAdjAAaH1z3PYf8onSv4R+LPfToauF3rxC82 5nBkneTu4kk7D4IaSInRoYj3iIX/xhh2Gv7oUK5tmYw4ILBsym/RAPjcEkyEbyHG 4IFGjm1+BSGtlhm/x8b4hse8h2NBb+xwZ1988g6zriYGPmGsZ3zIk98J3TeT2O31 2zNDfZRmg+8VKdHhwIficjzqnRu0q1s6aqw6BSRTGrKH9bnFNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFf7tsU2xLkWV6DnqBAl0uPgLADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWVhMWY3ZDQtZmZjMS0z ZDg4LWFiMTktYjAwNzRkOTU4MzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFepJK1FgScxTbx84QuDMw9npwsjXK/94rmB+/KNAeOa1Cvm0eK4tkjQ lkLtP0QdXI9BFWjn+LlAKMlzKnZe3ejImJ8tPupENZ5845qLg+jzujDdORFI6GLO cESn0c6/KmhkmaF+udIBtLkxJlNU5p1aef30/v9elH4xAj+eG2Ztdh8dUP2Q3qD9 QzfWneQ+igB/FfB/wyM2KFKET6r9GcvUQlOsMJPcHNDsdCvtEKcjy0Is6YN4sZ+E VpwuoLoES4hu+vw0J7CSiaHF4INN1irQ4ST2ac/FiAHg+Sc5sZcFb9nu7Qh0Yrvm /E45AU86Le0FqgfK6j4KCGUmi1NmtVk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:23 2026 by rpki-client