$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa File: 8242b901-13b8-31fc-b0af-a3b05bee017f.roa (raw, json) Hash identifier: p/OIqzs59USnO/X+DYuJx2t+YfAgbUag+5OhZ3p5IIM= Subject key identifier: 25:B6:BA:ED:AA:63:49:F7:01:F6:0B:79:DB:60:DF:5B:C0:9A:E5:91 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D93972025B242436E9080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:93:97:20:25:b2:42:43:6e:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=9c0b3c6e-69ae-45f6-b7c0-7fc00a17e615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:53:4f:ca:6e:2a:be:19:65:de:1b:5a:de: c1:90:48:2c:3d:c0:bb:14:91:cd:73:05:21:d9:47: 86:2c:6d:e6:04:14:89:a8:5a:39:64:ee:69:83:54: b9:ea:3f:45:c7:43:da:86:7e:da:49:a5:bc:d6:b7: eb:dd:f7:40:77:69:15:88:ad:51:e5:b2:d1:cd:bc: c8:3d:cc:1a:4f:39:6a:65:d3:09:8a:67:61:a3:4d: 57:cc:3b:ec:c7:66:ca:87:a6:20:03:1d:b7:08:db: 73:ab:1b:cd:66:e5:8d:4b:46:68:16:ee:11:87:d1: 41:ff:60:c2:81:57:96:39:31:27:71:37:63:25:f6: 0e:95:58:91:25:8a:88:a3:d0:ca:81:7f:bd:cb:c0: 77:03:fe:e1:40:bd:21:c0:75:03:90:45:14:1f:31: 70:df:2c:ee:59:3f:da:12:4a:df:28:bd:11:19:9f: 8c:ea:4a:55:29:3b:0b:03:58:35:2a:16:d8:03:b4: 0f:6e:73:c1:b8:27:87:be:98:65:19:78:e0:e8:2d: 4a:2b:95:30:f8:3d:8d:9e:2d:ee:ad:33:2a:63:a7: 7d:31:cd:8f:f6:ba:60:bb:9d:03:85:15:bd:0a:02: 7c:ec:f2:43:bf:a0:96:28:eb:b7:b9:ef:b8:6e:72: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B6:BA:ED:AA:63:49:F7:01:F6:0B:79:DB:60:DF:5B:C0:9A:E5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a0:20:ce:44:31:35:ea:58:3f:f9:8e:2a:7c:43:1d:eb:b0: 80:24:fd:58:72:b8:6b:89:fe:fe:5c:82:9b:5e:01:24:47:5e: ba:13:d4:0d:38:f1:45:4d:54:c4:f5:78:bc:65:35:77:1f:6a: 5b:d8:41:13:ea:86:22:32:9c:d3:98:4c:7f:76:4c:4a:5d:5f: 7e:2b:cc:91:15:03:c6:06:57:53:7f:38:10:d2:2c:d0:ec:53: 3a:51:86:e9:e5:44:58:07:82:09:60:02:00:74:ef:47:93:79: ef:4d:6a:0c:b6:fb:3c:cd:5f:b3:60:fe:13:8d:32:20:0a:74: 25:50:7c:65:bb:ca:1d:46:17:eb:be:a1:17:1a:ed:a5:36:6c: 77:87:d4:9f:81:8a:51:ab:87:1e:8f:88:c1:a1:d5:b2:b9:aa: 3e:89:36:b3:fb:cd:63:5f:25:ea:a6:b4:86:ec:62:cf:32:64: e8:7c:f0:cb:a6:bb:4c:c9:81:76:c1:3c:7b:b7:db:ca:4d:88: 34:44:10:7b:a6:6a:a5:d6:3a:75:b0:22:c2:c0:08:22:8a:cc: 6a:70:e4:c3:14:4c:16:c0:34:a7:8e:bf:96:1b:b8:c1:29:2b: e4:ca:e1:ce:79:1c:76:20:67:27:d9:87:f9:95:0c:0e:d6:43: d7:b3:45:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZOXICWyQkNukIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OWMwYjNjNmUtNjlhZS00NWY2LWI3YzAtN2ZjMDBhMTdlNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXJTT8puKr4ZZd4bWt7BkEgsPcC7FJHNcwUh 2UeGLG3mBBSJqFo5ZO5pg1S56j9Fx0Pahn7aSaW81rfr3fdAd2kViK1R5bLRzbzI PcwaTzlqZdMJimdho01XzDvsx2bKh6YgAx23CNtzqxvNZuWNS0ZoFu4Rh9FB/2DC gVeWOTEncTdjJfYOlViRJYqIo9DKgX+9y8B3A/7hQL0hwHUDkEUUHzFw3yzuWT/a EkrfKL0RGZ+M6kpVKTsLA1g1KhbYA7QPbnPBuCeHvphlGXjg6C1KK5Uw+D2Nni3u rTMqY6d9Mc2P9rpgu50DhRW9CgJ87PJDv6CWKOu3ue+4bnLGywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW2uu2qY0n3AfYLedtg31vAmuWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODI0MmI5MDEtMTNiOC0z MWZjLWIwYWYtYTNiMDViZWUwMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIagIM5EMTXqWD/5jip8Qx3rsIAk/VhyuGuJ/v5cgpteASRHXroT1A04 8UVNVMT1eLxlNXcfalvYQRPqhiIynNOYTH92TEpdX34rzJEVA8YGV1N/OBDSLNDs UzpRhunlRFgHgglgAgB070eTee9Nagy2+zzNX7Ng/hONMiAKdCVQfGW7yh1GF+u+ oRca7aU2bHeH1J+BilGrhx6PiMGh1bK5qj6JNrP7zWNfJeqmtIbsYs8yZOh88Mum u0zJgXbBPHu328pNiDREEHumaqXWOnWwIsLACCKKzGpw5MMUTBbANKeOv5YbuMEp K+TK4c55HHYgZyfZh/mVDA7WQ9ezRa4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:21 2026 by rpki-client