$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7db87dd9-5012-30b6-8e70-21077dad8989.roa File: 7db87dd9-5012-30b6-8e70-21077dad8989.roa (raw, json) Hash identifier: XZeNx9iTvQ9P7FPzntbcRg+En7aSmm+pGxUIwNm4FCQ= Subject key identifier: E6:66:44:A8:F4:E8:C2:02:09:B9:89:33:B1:74:1A:8D:5C:C6:75:4C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11728428DA8C3FB4E81A4570 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7db87dd9-5012-30b6-8e70-21077dad8989.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:84:28:da:8c:3f:b4:e8:1a:45:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=b6c3b699-8077-49f6-a57f-5e44fe1194d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:78:70:45:4c:7a:3c:55:c7:66:31:e6:bd: f8:67:e7:08:ad:65:43:eb:43:13:35:9e:4c:52:b3: 71:a5:13:74:a7:43:5e:32:3f:c7:ed:2a:7d:ec:e6: 4c:61:00:1d:47:2d:98:06:c5:0d:60:d2:24:9a:1d: 36:e3:3e:d3:ca:f5:3b:56:86:95:57:cd:54:f3:c7: c3:54:ce:f7:e8:95:61:fa:f5:ef:ce:7e:98:8f:65: e8:84:02:48:59:ec:5c:7c:17:7d:a2:72:02:14:d1: ae:fc:ab:c4:d9:d2:7e:fc:ca:e9:d4:59:ec:ca:7b: 3e:3e:06:cc:32:6e:67:bc:36:db:9b:87:8e:8b:79: 6b:77:88:41:91:44:71:99:8a:bf:fe:7c:27:9d:41: 2e:3d:d8:51:7d:8a:f0:ca:f7:3c:9f:ab:0a:31:ee: 63:87:fe:9b:3c:13:7d:ae:5b:64:21:6b:15:27:74: 1f:cc:07:9e:27:31:5f:75:31:24:1e:0d:26:d0:22: 1d:fb:97:24:d8:e5:17:e4:b8:48:95:1c:c7:bc:1b: 04:da:2b:ef:83:d9:d5:cc:26:a4:3e:28:3a:1b:45: 11:0d:17:da:eb:f4:e2:c3:6c:3b:cf:63:36:98:79: ea:20:1b:d7:55:f4:c6:55:a8:c4:ee:48:ce:8c:63: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:66:44:A8:F4:E8:C2:02:09:B9:89:33:B1:74:1A:8D:5C:C6:75:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7db87dd9-5012-30b6-8e70-21077dad8989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:07:19:2e:34:b6:22:b5:35:d4:f8:1b:4f:e6:99:b2:e1:3b: 79:f6:bb:78:dd:9d:fe:cc:ad:11:06:d2:be:66:c7:af:1b:21: e3:cc:3f:2a:14:0a:f6:ee:f7:6e:d3:19:ab:54:0e:7d:b6:5e: fa:95:7a:5d:33:62:9e:e0:7d:74:1b:95:ce:0a:c2:28:99:7f: af:2f:db:c4:2f:54:f2:0c:0d:44:bb:c5:f9:28:e0:52:36:59: 6a:e7:d7:12:f9:9e:f6:f0:e6:64:3a:01:95:1d:a7:26:e2:07: 9c:24:ce:d9:37:91:f9:ca:d4:a7:94:35:64:2b:eb:7e:1c:d9: fb:36:56:ed:e3:04:b8:ec:1b:52:1b:a5:9b:8c:f8:d4:b8:24: 3e:cf:1d:35:b0:8c:9d:52:9b:61:e0:e8:d6:8a:d9:1e:c7:79: b9:48:d6:7b:35:fb:ed:38:2f:2e:c6:d0:df:85:ec:2b:55:18: 0a:88:3c:4d:9f:ad:e3:0b:00:a5:d1:9f:d1:65:ea:47:4e:13: 0c:62:6d:da:1e:c0:ba:1d:16:1e:d7:97:5b:72:9f:d2:cb:26: 96:18:eb:b1:de:25:db:01:ae:f2:1c:1e:c8:90:12:29:e2:93: 28:29:9d:f0:87:14:01:e1:6c:97:5c:96:94:15:c1:75:ec:78: a0:ac:de:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoQo2ow/tOgaRXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk YjZjM2I2OTktODA3Ny00OWY2LWE1N2YtNWU0NGZlMTE5NGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL14cEVMejxVx2Yx5r34Z+cIrWVD60MTNZ5M UrNxpRN0p0NeMj/H7Sp97OZMYQAdRy2YBsUNYNIkmh024z7TyvU7VoaVV81U88fD VM736JVh+vXvzn6Yj2XohAJIWexcfBd9onICFNGu/KvE2dJ+/Mrp1Fnsyns+PgbM Mm5nvDbbm4eOi3lrd4hBkURxmYq//nwnnUEuPdhRfYrwyvc8n6sKMe5jh/6bPBN9 rltkIWsVJ3QfzAeeJzFfdTEkHg0m0CId+5ck2OUX5LhIlRzHvBsE2ivvg9nVzCak Pig6G0URDRfa6/Tiw2w7z2M2mHnqIBvXVfTGVajE7kjOjGP/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZmRKj06MICCbmJM7F0Go1cxnVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvN2RiODdkZDktNTAxMi0z MGI2LThlNzAtMjEwNzdkYWQ4OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIHGS40tiK1NdT4G0/mmbLhO3n2u3jdnf7MrREG0r5mx68bIePMPyoU Cvbu927TGatUDn22XvqVel0zYp7gfXQblc4KwiiZf68v28QvVPIMDUS7xfko4FI2 WWrn1xL5nvbw5mQ6AZUdpybiB5wkztk3kfnK1KeUNWQr634c2fs2Vu3jBLjsG1Ib pZuM+NS4JD7PHTWwjJ1Sm2Hg6NaK2R7HeblI1ns1++04Ly7G0N+F7CtVGAqIPE2f reMLAKXRn9Fl6kdOEwxibdoewLodFh7Xl1tyn9LLJpYY67HeJdsBrvIcHsiQEini kygpnfCHFAHhbJdclpQVwXXseKCs3qU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:24 2026 by rpki-client