$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa File: 72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa (raw, json) Hash identifier: s+tUKP9sZxK+0kVhe/gtMvEvRNdeh78WQOkn1EtZAZ8= Subject key identifier: D3:73:BA:1E:04:8B:B2:25:00:7D:F3:FA:FA:50:41:49:97:A4:20:BD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D93F79717C231DEBD8AA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:93:f7:97:17:c2:31:de:bd:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b1f6a26f-a459-4bfe-92b0-11cbb528d842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3b:17:bf:7c:19:47:0d:9b:a8:6d:35:b1:59: fa:f9:e7:2d:fa:38:37:d1:04:29:30:f4:03:59:ed: 08:b3:c5:2c:01:01:7e:de:7c:ba:a3:53:20:8e:bd: e9:4b:1d:e5:e0:00:d2:ec:89:90:31:9b:82:f2:1a: 8a:3f:4b:14:94:43:63:22:25:a2:9b:fa:41:0a:b8: 2f:44:65:6f:2f:a7:b7:0f:73:e2:4c:f6:e4:8a:44: 75:09:8b:13:09:fc:1d:60:61:0c:70:6b:bc:ce:c6: 8b:c7:cf:5a:00:c3:1b:51:d4:bf:56:da:38:e6:33: c2:6d:9a:ad:24:2a:09:de:f4:14:53:97:b2:0d:ee: 8d:6d:61:2e:ec:1f:d9:c4:e0:13:f2:5b:94:ad:dc: ac:ed:d4:78:fc:8a:df:d3:cb:db:da:82:29:2f:74: 83:ca:63:56:04:d6:59:74:de:26:dc:fe:de:90:50: 35:b2:d5:70:17:9d:0e:ef:d3:0f:cf:53:2c:1a:3f: 9b:07:53:6f:8f:79:aa:15:a7:04:bd:dc:f4:71:ff: 26:3f:ff:d9:b1:bf:dd:d6:5f:40:79:fe:d7:4f:5a: 0f:75:7f:c0:df:3b:a2:e6:41:40:a3:c6:56:0c:8b: 55:37:f2:a0:ca:7e:2a:db:26:8d:02:33:f6:f5:5d: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:73:BA:1E:04:8B:B2:25:00:7D:F3:FA:FA:50:41:49:97:A4:20:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c3:f9:61:78:9f:9f:12:23:7c:43:bd:f4:2e:9c:36:a1:43: 4b:5c:07:85:bb:61:48:01:28:9e:54:46:92:b6:ca:e4:51:ad: 28:20:a7:c1:db:17:b1:74:ec:04:4b:1f:f7:20:d0:c3:4c:9c: e5:e6:f8:22:95:19:09:d2:9b:89:3a:76:49:e2:73:52:f5:82: 31:cf:48:98:f1:d2:67:18:7f:25:3c:ec:6c:7d:d2:5a:f0:05: be:3c:e6:25:e6:33:e1:a1:0b:f4:86:39:3e:b1:8b:88:e8:b8: da:65:f9:49:c8:9f:56:95:4b:5c:a3:ad:90:a0:f7:4a:14:9e: 62:de:6a:e0:2c:9b:8a:f5:d4:e9:47:d3:0a:8b:bb:1e:ba:c6: 74:33:da:47:8a:a0:38:8a:c7:6b:c4:23:1b:51:7b:ca:b8:3b: 72:ec:96:cc:8d:ae:69:b6:3c:9b:56:92:1b:f8:02:8b:73:93: 79:19:3d:43:36:b2:f8:23:43:60:88:f8:62:f6:56:63:9f:1e: ff:b1:85:17:7e:89:d9:9f:bd:7d:fc:f4:81:4f:88:0d:66:45: a4:ba:c2:79:8c:f7:c9:73:c5:f4:f9:52:0f:44:de:7d:aa:7e: 11:4f:33:80:70:05:9c:a0:b1:67:2a:88:fb:5e:61:fc:82:5b: ab:d3:d6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZP3lxfCMd69iqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjFmNmEyNmYtYTQ1OS00YmZlLTkyYjAtMTFjYmI1MjhkODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTsXv3wZRw2bqG01sVn6+ect+jg30QQpMPQD We0Is8UsAQF+3ny6o1Mgjr3pSx3l4ADS7ImQMZuC8hqKP0sUlENjIiWim/pBCrgv RGVvL6e3D3PiTPbkikR1CYsTCfwdYGEMcGu8zsaLx89aAMMbUdS/Vto45jPCbZqt JCoJ3vQUU5eyDe6NbWEu7B/ZxOAT8luUrdys7dR4/Irf08vb2oIpL3SDymNWBNZZ dN4m3P7ekFA1stVwF50O79MPz1MsGj+bB1Nvj3mqFacEvdz0cf8mP//Zsb/d1l9A ef7XT1oPdX/A3zui5kFAo8ZWDItVN/Kgyn4q2yaNAjP29V1vfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNzuh4Ei7IlAH3z+vpQQUmXpCC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzJmN2VjNzgtOTY5OS0z MzkzLWFjNWItZTZlMGJhN2RhNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvD+WF4n58SI3xDvfQunDahQ0tcB4W7YUgBKJ5URpK2yuRRrSggp8Hb F7F07ARLH/cg0MNMnOXm+CKVGQnSm4k6dknic1L1gjHPSJjx0mcYfyU87Gx90lrw Bb485iXmM+GhC/SGOT6xi4jouNpl+UnIn1aVS1yjrZCg90oUnmLeauAsm4r11OlH 0wqLux66xnQz2keKoDiKx2vEIxtRe8q4O3LslsyNrmm2PJtWkhv4Aotzk3kZPUM2 svgjQ2CI+GL2VmOfHv+xhRd+idmfvX389IFPiA1mRaS6wnmM98lzxfT5Ug9E3n2q fhFPM4BwBZygsWcqiPteYfyCW6vT1v8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:34 2026 by rpki-client