$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fbce019-92b8-3f71-a139-ea50b84ba4a9.roa File: 5fbce019-92b8-3f71-a139-ea50b84ba4a9.roa (raw, json) Hash identifier: j4l2tI7GKpyeirSOhp8GX22qkmZA/JwGJZ49CXvat+0= Subject key identifier: FA:3A:86:9F:F0:7C:20:97:8D:3A:35:E3:C5:34:B0:BE:33:A4:28:0D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A7ADBB5121393199A69C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fbce019-92b8-3f71-a139-ea50b84ba4a9.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395973 IP address blocks: 104.134.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7a:db:b5:12:13:93:19:9a:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5e17bf3a-792c-4a51-bbcd-e67e90e3d264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:79:42:70:77:f7:75:01:1e:f7:6f:cc:45: 72:66:b1:d2:c0:bc:82:29:4b:c6:7f:de:a3:c1:60: 32:20:0d:da:5a:90:50:4e:27:f6:2b:f9:27:d1:7e: 71:35:90:53:33:dc:7e:c2:aa:b2:37:2d:24:8c:99: 58:2b:b3:90:e5:ab:3f:a1:7f:42:f2:7a:4d:74:3d: 9a:aa:17:93:ad:a2:6d:78:4d:76:11:70:2a:36:1e: c7:77:15:ed:30:1d:25:ac:c0:50:87:6d:4a:15:37: 3f:94:6d:fd:4a:44:1a:da:16:c1:f6:93:2e:af:dd: c9:6f:f2:42:4d:24:29:1e:92:ff:d1:68:65:a9:64: 47:f3:23:14:47:f4:38:ce:65:74:fd:16:05:79:0f: 54:6d:41:21:b5:ce:cc:f1:37:6b:25:b1:13:db:a9: 3e:6b:bd:e7:21:2b:0c:7a:e6:74:8b:a5:3e:d0:66: 8e:05:91:74:e8:ed:d9:c9:0f:95:39:da:ce:49:07: 70:f3:64:de:e9:e9:b8:a7:31:9d:49:54:4c:3b:82: 01:1f:13:c3:dc:00:b1:60:31:a5:d2:9a:42:71:b8: 91:00:ec:19:0d:13:fe:4f:7e:a4:c3:aa:6e:18:a1: 04:57:f0:bd:e5:5e:55:02:40:b6:0b:30:ab:59:6e: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:86:9F:F0:7C:20:97:8D:3A:35:E3:C5:34:B0:BE:33:A4:28:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5fbce019-92b8-3f71-a139-ea50b84ba4a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:59:3a:bf:2a:d9:3e:c7:53:63:4c:7a:85:e2:72:ec:5e:81: af:2b:91:1f:01:07:88:44:77:85:a5:6d:e1:0d:ec:9e:1f:b0: 18:e6:54:08:ae:0d:99:84:f1:82:e2:96:8a:b5:5d:3c:85:e5: a1:c9:4c:6c:d0:03:a4:f6:5d:d9:24:36:22:6e:64:7d:56:68: c0:68:66:68:c8:47:df:c5:42:86:32:84:5c:4e:2a:4a:ed:ef: 0f:c0:7e:9e:b5:14:bf:63:62:51:c8:cc:fd:40:8b:a6:97:e2: 8c:9d:67:a0:63:08:d5:38:eb:a2:02:17:cf:6e:4c:b2:ef:26: a1:bf:5d:cd:16:76:15:bc:e6:c3:70:67:b1:28:21:2a:6b:17: dd:17:0e:36:f9:47:54:22:48:fb:57:93:19:d6:23:8b:b9:86: c4:bb:49:35:83:91:bd:39:4e:bd:e2:fe:b4:19:9c:e9:96:db: f7:c3:a0:2a:2c:c4:1c:f2:de:7d:56:fb:eb:5a:20:74:39:1d: f7:c4:66:de:9a:23:07:ed:86:df:4d:1b:23:d4:b2:75:20:ee: 45:b5:71:76:a9:c0:83:e6:f7:99:0c:8b:78:97:27:20:f9:1a: 96:5e:5b:f9:aa:a8:7d:41:fe:d7:22:0c:34:75:ea:d4:e5:b9: 8f:d8:fd:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnrbtRITkxmaacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWUxN2JmM2EtNzkyYy00YTUxLWJiY2QtZTY3ZTkwZTNkMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFF5QnB393UBHvdvzEVyZrHSwLyCKUvGf96j wWAyIA3aWpBQTif2K/kn0X5xNZBTM9x+wqqyNy0kjJlYK7OQ5as/oX9C8npNdD2a qheTraJteE12EXAqNh7HdxXtMB0lrMBQh21KFTc/lG39SkQa2hbB9pMur93Jb/JC TSQpHpL/0WhlqWRH8yMUR/Q4zmV0/RYFeQ9UbUEhtc7M8TdrJbET26k+a73nISsM euZ0i6U+0GaOBZF06O3ZyQ+VOdrOSQdw82Te6em4pzGdSVRMO4IBHxPD3ACxYDGl 0ppCcbiRAOwZDRP+T36kw6puGKEEV/C95V5VAkC2CzCrWW7/2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo6hp/wfCCXjTo148U0sL4zpCgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWZiY2UwMTktOTJiOC0z ZjcxLWExMzktZWE1MGI4NGJhNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpZOr8q2T7HU2NMeoXicuxega8rkR8BB4hEd4WlbeEN7J4fsBjmVAiu DZmE8YLiloq1XTyF5aHJTGzQA6T2XdkkNiJuZH1WaMBoZmjIR9/FQoYyhFxOKkrt 7w/Afp61FL9jYlHIzP1Ai6aX4oydZ6BjCNU466ICF89uTLLvJqG/Xc0WdhW85sNw Z7EoISprF90XDjb5R1QiSPtXkxnWI4u5hsS7STWDkb05Tr3i/rQZnOmW2/fDoCos xBzy3n1W++taIHQ5HffEZt6aIwftht9NGyPUsnUg7kW1cXapwIPm95kMi3iXJyD5 GpZeW/mqqH1B/tciDDR16tTluY/Y/aY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:57 2026 by rpki-client