$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b097fab-6ac3-3ab8-81d3-ed969203a443.roa File: 7b097fab-6ac3-3ab8-81d3-ed969203a443.roa (raw, json) Hash identifier: s3vT/bfaa3KTMztJrgfDEJ/2XyvfZAz/jc9gUfh/8CE= Subject key identifier: A6:55:C9:B4:93:EC:8A:4A:9F:EA:DE:86:D3:7D:9F:31:4B:0D:87:4B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8A806B6AAF07A70F7D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b097fab-6ac3-3ab8-81d3-ed969203a443.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8a:80:6b:6a:af:07:a7:0f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=ceb8ed86-311a-4667-a922-ee1bd237b1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:62:33:bd:4a:11:49:3c:6c:72:79:17:5e:28: a6:3f:63:03:2d:d8:13:be:f0:d6:20:f2:1e:35:8d: ba:b9:e4:80:29:a7:81:0f:dc:64:ff:71:e0:6b:85: 09:75:e5:ab:38:3f:3a:aa:4f:d0:87:7e:66:ad:08: 12:32:8b:fc:3e:c2:16:18:79:42:4b:2a:88:ac:4d: 06:07:30:38:db:8c:2d:17:1b:e4:18:b2:a1:56:b9: b4:9f:82:03:ad:eb:52:81:94:fa:d0:ce:d3:65:09: 12:6b:54:76:7f:d9:ef:e2:c2:cd:54:02:0c:c9:01: a6:5a:f4:81:3b:0b:55:24:93:43:dc:d0:36:34:6c: 0d:db:45:1d:59:42:f5:9c:df:0c:da:de:d5:f5:88: ff:27:8e:59:18:2c:98:91:a0:ac:ad:27:fa:b7:26: c3:61:60:ef:81:03:77:8a:32:d5:04:a4:9c:17:94: 01:56:c3:09:dc:0e:c8:9b:54:f6:83:45:c8:4c:df: 8f:4f:e8:db:a3:12:87:c3:8f:31:83:51:34:37:d8: 73:f7:ed:16:78:d5:ca:4e:43:4a:b3:fe:a3:b8:66: 23:c9:41:7b:d8:bf:c7:47:49:6b:c7:5c:bc:e2:ed: 83:bb:73:b5:13:44:53:03:85:0c:0b:5a:7f:56:9f: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:55:C9:B4:93:EC:8A:4A:9F:EA:DE:86:D3:7D:9F:31:4B:0D:87:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7b097fab-6ac3-3ab8-81d3-ed969203a443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2e:93:44:12:3f:d4:36:b5:03:20:ce:fa:3f:02:fd:8b:56: 4f:d0:f4:af:fe:62:b5:80:12:9f:f9:09:0f:41:9d:7c:45:a7: 0f:fc:ab:0a:77:69:2f:46:31:e0:e2:1e:7d:f2:4a:1e:da:ee: 0c:8d:d3:99:1c:78:62:ae:49:10:da:af:de:a7:fb:8b:05:52: 35:7a:76:f3:8f:1a:44:53:3a:86:ea:28:49:c4:54:7d:52:9e: d8:aa:4e:9e:53:ca:c5:a6:e8:45:76:f6:65:ef:a0:02:b4:e6: ba:52:9e:0e:37:9f:5b:c0:2a:f6:d9:d9:96:e7:af:35:e9:4b: a7:6b:ef:4a:b1:5b:e5:23:1c:27:26:2e:68:7b:aa:c4:0a:9a: 1a:72:23:a9:51:3b:6f:5d:1e:0b:2c:1d:7e:d2:3b:6b:5a:f1: 0a:db:8a:f0:ee:4f:8f:4b:63:d4:b5:66:16:cd:87:24:3c:a7: 3c:74:8f:36:2a:ad:07:94:cb:cc:d6:4f:94:93:83:18:cf:3f: e8:dc:d8:7e:5f:9c:b7:cb:5e:d5:db:af:01:4c:32:2e:28:34: 28:5e:4b:fb:1b:8c:66:d2:b0:3d:09:15:b3:56:83:f5:91:eb: ca:de:99:6a:fc:f6:f8:e2:f1:0e:04:96:1d:c4:75:d8:15:c1: 8a:27:82:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYqAa2qvB6cPfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2ViOGVkODYtMzExYS00NjY3LWE5MjItZWUxYmQyMzdiMWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2IzvUoRSTxscnkXXiimP2MDLdgTvvDWIPIe NY26ueSAKaeBD9xk/3Hga4UJdeWrOD86qk/Qh35mrQgSMov8PsIWGHlCSyqIrE0G BzA424wtFxvkGLKhVrm0n4IDretSgZT60M7TZQkSa1R2f9nv4sLNVAIMyQGmWvSB OwtVJJND3NA2NGwN20UdWUL1nN8M2t7V9Yj/J45ZGCyYkaCsrSf6tybDYWDvgQN3 ijLVBKScF5QBVsMJ3A7Im1T2g0XITN+PT+jboxKHw48xg1E0N9hz9+0WeNXKTkNK s/6juGYjyUF72L/HR0lrx1y84u2Du3O1E0RTA4UMC1p/Vp+haQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZVybST7IpKn+rehtN9nzFLDYdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvN2IwOTdmYWItNmFjMy0z YWI4LTgxZDMtZWQ5NjkyMDNhNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsuk0QSP9Q2tQMgzvo/Av2LVk/Q9K/+YrWAEp/5CQ9BnXxFpw/8qwp3 aS9GMeDiHn3ySh7a7gyN05kceGKuSRDar96n+4sFUjV6dvOPGkRTOobqKEnEVH1S ntiqTp5TysWm6EV29mXvoAK05rpSng43n1vAKvbZ2ZbnrzXpS6dr70qxW+UjHCcm Lmh7qsQKmhpyI6lRO29dHgssHX7SO2ta8QrbivDuT49LY9S1ZhbNhyQ8pzx0jzYq rQeUy8zWT5STgxjPP+jc2H5fnLfLXtXbrwFMMi4oNCheS/sbjGbSsD0JFbNWg/WR 68remWr89vji8Q4Elh3EddgVwYonguo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:28 2026 by rpki-client