$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa File: 66b275d0-8075-3aac-897b-e4e1aa843cae.roa (raw, json) Hash identifier: Iqgn75uPrQ8RMAvFEwp46dj4LgC/brduFsdGZfAS9ng= Subject key identifier: E9:D0:CD:98:DA:A7:81:D4:83:FD:5B:5B:1A:1A:99:8A:00:46:7A:B5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA4D9C91CBC6C05662D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a4:d9:c9:1c:bc:6c:05:66:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=0ea94ca0-76b4-423d-be1b-04a2f3446527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:21:84:26:0c:2c:64:bf:f8:2a:e2:ca:a7: 3c:af:06:af:58:40:aa:4b:2b:32:92:1e:de:b3:b5: ed:73:4c:0b:c6:79:a3:b4:c2:d6:ed:a6:be:57:22: e1:0d:ce:8f:aa:86:95:0d:7b:36:66:43:de:25:57: 63:6f:4d:6c:5a:e5:19:96:a0:2b:21:49:04:5a:61: 1b:70:32:55:49:47:23:b1:56:f9:ac:31:2f:29:28: f2:14:92:44:ee:fa:c6:4e:b0:fa:d1:4c:bc:db:f6: ff:1a:6c:f9:d3:bf:0b:dc:e9:24:a2:a9:32:63:3e: 37:f6:df:c6:79:a6:c3:bb:70:2c:3d:88:8a:a1:4d: e8:a3:2f:0b:19:48:60:7d:89:2d:0c:8a:22:a1:d5: 3c:c1:b7:82:16:d2:83:17:9b:08:68:e0:37:35:e7: da:9d:55:0d:67:0d:81:60:bd:24:fc:6b:37:45:88: ee:ba:dc:87:41:86:82:1b:92:a2:37:41:48:37:93: d3:ca:e5:64:38:49:3d:aa:31:aa:d8:1d:7b:b3:55: ff:7b:d8:4f:62:4c:e9:bb:cc:09:4c:c1:e7:d1:26: 92:66:2c:f3:81:5a:63:57:31:bf:f8:3b:7d:79:82: cc:04:0b:b7:8d:2a:8e:48:fa:7d:b0:b5:7e:cf:97: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:CD:98:DA:A7:81:D4:83:FD:5B:5B:1A:1A:99:8A:00:46:7A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/66b275d0-8075-3aac-897b-e4e1aa843cae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:0d:9e:22:0f:1d:e9:e7:90:b3:4e:22:83:6b:e7:37:cd:e3: 51:da:d4:50:40:b8:96:36:f6:dd:73:00:35:3c:7e:fa:e4:cb: 7c:ff:7c:24:d8:79:ad:28:e0:1f:40:78:32:46:da:97:35:26: 6c:8d:30:6d:7d:a0:ed:25:31:c4:f0:ea:e3:a1:1b:6f:11:e5: de:24:a8:a5:a1:49:02:6a:ce:1a:48:55:4f:a9:df:09:c2:24: c1:74:23:df:f6:8f:9a:e6:ce:31:2f:80:29:99:8a:7e:25:6b: 61:90:f3:43:2b:63:41:45:29:0a:b6:c7:08:d2:e3:bf:d7:e4: 54:d2:5f:d5:42:9b:80:af:1d:98:d2:98:07:66:33:c4:8f:51: e5:7d:c8:8e:56:7c:0a:35:c0:f1:c9:3a:39:31:66:19:17:c5: e1:77:7a:cf:cb:a2:89:ef:72:62:57:d0:4c:af:64:56:4d:aa: 0b:fb:c6:15:b8:86:39:ea:f8:47:7a:60:b6:a9:71:0f:fd:4b: 6d:5d:4e:12:82:91:96:40:80:59:bf:35:2e:d8:cb:e3:27:16: 19:c8:dd:f7:06:89:d0:f3:27:f3:76:e0:f6:7c:62:05:36:fa: 8b:24:ca:a5:0b:1a:c2:cd:0f:24:aa:14:30:f4:25:59:66:cb: 1c:c4:e2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaTZyRy8bAVmLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MGVhOTRjYTAtNzZiNC00MjNkLWJlMWItMDRhMmYzNDQ2NTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TghhCYMLGS/+Criyqc8rwavWECqSysykh7e s7Xtc0wLxnmjtMLW7aa+VyLhDc6PqoaVDXs2ZkPeJVdjb01sWuUZlqArIUkEWmEb cDJVSUcjsVb5rDEvKSjyFJJE7vrGTrD60Uy82/b/Gmz5078L3OkkoqkyYz439t/G eabDu3AsPYiKoU3ooy8LGUhgfYktDIoiodU8wbeCFtKDF5sIaOA3NefanVUNZw2B YL0k/Gs3RYjuutyHQYaCG5KiN0FIN5PTyuVkOEk9qjGq2B17s1X/e9hPYkzpu8wJ TMHn0SaSZizzgVpjVzG/+Dt9eYLMBAu3jSqOSPp9sLV+z5dYkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnQzZjap4HUg/1bWxoamYoARnq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjZiMjc1ZDAtODA3NS0z YWFjLTg5N2ItZTRlMWFhODQzY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMNniIPHennkLNOIoNr5zfN41Ha1FBAuJY29t1zADU8fvrky3z/fCTY ea0o4B9AeDJG2pc1JmyNMG19oO0lMcTw6uOhG28R5d4kqKWhSQJqzhpIVU+p3wnC JMF0I9/2j5rmzjEvgCmZin4la2GQ80MrY0FFKQq2xwjS47/X5FTSX9VCm4CvHZjS mAdmM8SPUeV9yI5WfAo1wPHJOjkxZhkXxeF3es/LoonvcmJX0EyvZFZNqgv7xhW4 hjnq+Ed6YLapcQ/9S21dThKCkZZAgFm/NS7Yy+MnFhnI3fcGidDzJ/N24PZ8YgU2 +oskyqULGsLNDySqFDD0JVlmyxzE4mI= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:33 2026 by rpki-client