$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7607b8e4-4a8a-35fa-ada8-bee443b7df4c.roa File: 7607b8e4-4a8a-35fa-ada8-bee443b7df4c.roa (raw, json) Hash identifier: TcwlwpT2T3zoS9qKOE5DLrfuCH19pxeQb8aUjInk2o8= Subject key identifier: 9E:E2:31:0A:83:0A:E7:E5:D2:A9:AF:85:5F:09:63:F7:68:FC:9C:81 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A551D525A5103EFB83280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7607b8e4-4a8a-35fa-ada8-bee443b7df4c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:55:1d:52:5a:51:03:ef:b8:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1689e20f-4461-4c1a-af7b-1e2f156480e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:81:aa:6c:51:fd:0e:80:c9:70:13:c6:81:f7: 72:f2:f7:ec:aa:0f:75:b6:42:71:7f:48:fe:56:af: f3:9f:7b:5e:85:78:dc:ee:56:9b:15:73:db:09:74: d2:04:fb:99:20:75:30:ea:40:96:10:63:c5:ad:43: 44:df:19:e6:fe:fd:d2:34:83:ea:a7:bc:44:45:f0: bd:51:22:a9:be:d8:a1:0c:f8:8e:38:93:e0:c7:1e: 0f:6f:5d:06:0a:1c:8e:83:90:9f:50:1d:fa:d4:1f: e3:2e:f5:11:a0:a5:42:e1:a2:1a:bf:cc:f6:29:21: d0:bd:89:08:54:03:ce:92:3c:98:e3:df:9f:49:f0: 94:d4:66:0b:53:17:6d:84:a6:19:d0:e9:af:3c:50: 33:78:c1:a2:00:f7:01:93:4f:1b:84:bc:9d:d6:53: 2a:ec:ae:e0:c2:61:df:16:38:6d:da:df:4f:f9:7c: 97:7f:43:b3:e6:fc:9c:f5:72:fe:7e:44:5f:3d:15: 7f:51:2c:37:dd:46:73:b5:f1:34:21:88:30:6b:24: 97:09:d2:8a:8b:3b:2a:b6:2b:2f:f7:e9:fd:b4:7b: e1:54:36:e3:a2:f9:07:0f:5f:de:c2:1e:d8:ce:35: 94:fe:d6:64:3a:1a:19:25:9f:e1:25:21:c1:a6:93: 13:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E2:31:0A:83:0A:E7:E5:D2:A9:AF:85:5F:09:63:F7:68:FC:9C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7607b8e4-4a8a-35fa-ada8-bee443b7df4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:56:46:e0:22:0d:34:fa:80:cd:45:9f:63:64:54:6a:54:29: b4:c4:c1:ba:67:c0:0e:d3:c5:3d:77:51:16:b8:54:06:85:69: 8f:5a:86:99:a7:8a:a1:b9:ff:6a:29:2f:82:f8:f9:6f:8f:4a: b6:ac:fe:ec:30:aa:21:bf:d5:0f:32:9b:93:4c:a5:3f:3f:54: 22:34:e5:47:17:58:9b:d8:e4:ff:41:b1:1c:e3:ec:71:08:7d: 51:5d:03:ba:f3:1d:c3:99:ce:b5:cd:e1:ac:87:fb:a2:67:35: b8:93:f9:7a:c5:af:3c:8c:7d:1b:3c:d3:ff:87:08:63:0f:cf: e8:15:5c:b3:bd:1e:8b:73:9f:63:34:49:6a:cd:ad:be:67:eb: 26:a0:f6:24:d5:1b:02:98:e4:4a:b7:41:79:10:fa:d1:66:e0: d8:13:08:43:be:49:20:07:e8:48:98:d5:2e:22:86:4b:00:51: a7:85:8d:3c:6a:12:e0:00:4f:2d:e8:a1:17:48:3f:31:00:7c: d5:2c:b9:35:4c:f0:5c:1d:95:af:47:90:11:16:e4:89:49:75: 8c:5a:42:35:3d:0c:a4:fe:29:04:d5:65:b8:12:2a:e6:8e:1d: 0d:e4:90:01:70:b1:66:c4:1e:a9:56:b1:bf:25:22:4f:f3:2f: 50:d3:51:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlUdUlpRA++4MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MTY4OWUyMGYtNDQ2MS00YzFhLWFmN2ItMWUyZjE1NjQ4MGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oGqbFH9DoDJcBPGgfdy8vfsqg91tkJxf0j+ Vq/zn3tehXjc7labFXPbCXTSBPuZIHUw6kCWEGPFrUNE3xnm/v3SNIPqp7xERfC9 USKpvtihDPiOOJPgxx4Pb10GChyOg5CfUB361B/jLvURoKVC4aIav8z2KSHQvYkI VAPOkjyY49+fSfCU1GYLUxdthKYZ0OmvPFAzeMGiAPcBk08bhLyd1lMq7K7gwmHf Fjht2t9P+XyXf0Oz5vyc9XL+fkRfPRV/USw33UZztfE0IYgwaySXCdKKizsqtisv 9+n9tHvhVDbjovkHD1/ewh7YzjWU/tZkOhoZJZ/hJSHBppMTRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7iMQqDCufl0qmvhV8JY/do/JyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzYwN2I4ZTQtNGE4YS0z NWZhLWFkYTgtYmVlNDQzYjdkZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlWRuAiDTT6gM1Fn2NkVGpUKbTEwbpnwA7TxT13URa4VAaFaY9ahpmn iqG5/2opL4L4+W+PSras/uwwqiG/1Q8ym5NMpT8/VCI05UcXWJvY5P9BsRzj7HEI fVFdA7rzHcOZzrXN4ayH+6JnNbiT+XrFrzyMfRs80/+HCGMPz+gVXLO9Hotzn2M0 SWrNrb5n6yag9iTVGwKY5Eq3QXkQ+tFm4NgTCEO+SSAH6EiY1S4ihksAUaeFjTxq EuAATy3ooRdIPzEAfNUsuTVM8Fwdla9HkBEW5IlJdYxaQjU9DKT+KQTVZbgSKuaO HQ3kkAFwsWbEHqlWsb8lIk/zL1DTUWE= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:06 2026 by rpki-client