$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f939b40-c8d5-344e-a538-0d97d050485e.roa File: 5f939b40-c8d5-344e-a538-0d97d050485e.roa (raw, json) Hash identifier: cUySkjoJ8C7mHsZME4MOwn7Q830UfE6+PemwIBE2dz8= Subject key identifier: AD:13:AB:E0:AC:29:F8:47:93:69:2B:97:A1:05:6F:99:CF:E3:CC:BB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7E9BACF3DD60748EE1540 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f939b40-c8d5-344e-a538-0d97d050485e.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e9:ba:cf:3d:d6:07:48:ee:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=131285e5-f687-456b-9fc0-8063cbfceb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:6e:55:c1:89:dc:8f:44:e6:d1:2a:d2:83: 89:70:fd:f9:b7:9a:b1:93:ef:30:10:d7:62:ee:c5: 0f:a9:c4:0b:bb:4e:ea:8a:b4:2f:8b:eb:8a:e1:9d: 98:ef:97:86:4f:3f:b4:22:c4:cf:d1:c9:0c:56:2a: 37:05:72:da:ce:2d:5c:37:a6:08:73:ec:57:b4:64: 3d:e5:ab:59:59:6a:4f:e7:ca:15:15:0a:75:88:18: ee:8e:1b:b0:5f:b2:55:d5:83:de:72:cb:cf:9e:b2: 60:68:04:c8:13:93:22:98:ae:c1:2a:2c:3b:cb:e1: 48:6f:52:ec:55:7b:33:57:1a:b6:fc:54:f0:52:d8: f5:3f:0a:95:6f:a0:70:07:64:98:82:f7:3a:00:83: a0:92:d3:a3:d1:86:67:dd:70:00:91:10:6e:42:e6: 49:2c:44:4f:bd:cf:97:33:f2:0c:86:0f:6e:47:fa: aa:66:bc:59:5f:3e:0f:a7:3c:a1:a9:60:e0:e8:10: c5:c9:b7:23:1e:b2:9c:f3:d3:75:35:80:e1:44:54: 86:29:ca:65:cf:eb:40:d4:d4:0a:63:57:82:91:07: b4:b9:ac:9b:4f:7d:96:81:70:03:6d:47:90:ed:3a: a1:01:cd:07:4c:37:69:f1:dd:aa:dd:41:40:de:a8: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:13:AB:E0:AC:29:F8:47:93:69:2B:97:A1:05:6F:99:CF:E3:CC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5f939b40-c8d5-344e-a538-0d97d050485e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:72:93:69:6b:84:e2:9c:4a:2e:17:e0:e4:8f:a9:b2:7c:0d: b0:e2:de:7c:5f:37:40:9d:a2:37:78:61:f3:53:34:0c:07:90: bc:75:b9:bf:ab:f5:de:07:bd:e3:89:c4:45:79:6c:41:bb:77: 2b:61:94:c5:6d:cf:55:07:e4:a0:fc:a8:7d:e7:a4:9b:a3:91: 5d:92:24:b0:34:06:34:a5:1f:91:53:f0:85:fe:41:73:c2:f5: ab:74:49:e2:62:c1:18:f2:95:cf:0f:36:7c:50:33:64:f3:b8: ab:50:0c:88:d3:b2:82:3e:44:d8:d4:00:45:b1:b2:59:15:c0: e8:a1:80:5c:2d:9d:78:b5:66:10:1c:76:49:83:94:a0:9e:ff: 0d:36:8a:06:1d:c2:93:e5:a5:2d:cc:45:01:12:1f:e7:7f:24: 20:c8:aa:49:58:75:35:2a:f7:dd:07:52:71:62:ff:48:41:6a: 18:3b:1e:b4:54:12:11:f1:d4:c7:9f:cd:8f:d0:d6:35:bd:f4: ae:5a:56:60:ad:01:34:43:e7:fc:93:6f:05:49:3a:56:5e:61: 02:d5:ab:56:10:46:4a:73:61:96:1f:3e:9a:7e:1f:1b:8b:af: 8f:5d:8f:54:f5:64:1f:b1:00:9f:18:bd:de:b3:92:bf:4e:f0: 87:2d:07:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+m6zz3WB0juFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MTMxMjg1ZTUtZjY4Ny00NTZiLTlmYzAtODA2M2NiZmNlYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnINuVcGJ3I9E5tEq0oOJcP35t5qxk+8wENdi 7sUPqcQLu07qirQvi+uK4Z2Y75eGTz+0IsTP0ckMVio3BXLazi1cN6YIc+xXtGQ9 5atZWWpP58oVFQp1iBjujhuwX7JV1YPecsvPnrJgaATIE5MimK7BKiw7y+FIb1Ls VXszVxq2/FTwUtj1PwqVb6BwB2SYgvc6AIOgktOj0YZn3XAAkRBuQuZJLERPvc+X M/IMhg9uR/qqZrxZXz4PpzyhqWDg6BDFybcjHrKc89N1NYDhRFSGKcplz+tA1NQK Y1eCkQe0uaybT32WgXADbUeQ7TqhAc0HTDdp8d2q3UFA3qj2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0Tq+CsKfhHk2krl6EFb5nP48y7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWY5MzliNDAtYzhkNS0z NDRlLWE1MzgtMGQ5N2QwNTA0ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtyk2lrhOKcSi4X4OSPqbJ8DbDi3nxfN0Cdojd4YfNTNAwHkLx1ub+r 9d4HveOJxEV5bEG7dythlMVtz1UH5KD8qH3npJujkV2SJLA0BjSlH5FT8IX+QXPC 9at0SeJiwRjylc8PNnxQM2TzuKtQDIjTsoI+RNjUAEWxslkVwOihgFwtnXi1ZhAc dkmDlKCe/w02igYdwpPlpS3MRQESH+d/JCDIqklYdTUq990HUnFi/0hBahg7HrRU EhHx1MefzY/Q1jW99K5aVmCtATRD5/yTbwVJOlZeYQLVq1YQRkpzYZYfPpp+HxuL r49dj1T1ZB+xAJ8Yvd6zkr9O8IctB/Y= -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:26 2026 by rpki-client