$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8510ce25-870e-3733-b590-5f17ce8a7559.roa File: 8510ce25-870e-3733-b590-5f17ce8a7559.roa (raw, json) Hash identifier: bH290oK56RDSjvPmwekKUk2r6fEA8aPXxGkeiwfx3f8= Subject key identifier: 17:7F:42:A9:47:C7:9D:60:9E:C8:3F:4B:37:08:21:89:D9:A5:12:91 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA2F412D3A849E815DC80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8510ce25-870e-3733-b590-5f17ce8a7559.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a2:f4:12:d3:a8:49:e8:15:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1738cae4-d34f-40d9-a5c5-0fdb5c137617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:fc:72:c1:4e:64:b9:24:11:ef:ca:41:13: 0d:b4:94:c1:66:76:29:41:9a:b6:d2:c1:78:9c:3d: 5e:25:55:ae:f4:43:63:e9:de:b2:ce:35:7e:d7:19: 49:9d:09:a3:b9:28:6e:2c:08:b1:01:b9:8b:af:ae: f3:89:0b:63:44:94:53:fd:3d:2a:70:53:ae:a0:9f: d5:7a:de:23:1a:2f:f8:e9:2d:1e:42:95:58:be:d7: 18:35:05:4a:19:dc:2d:43:45:d7:df:c1:e1:fb:3c: 6e:44:0c:12:c1:15:1b:ab:39:c9:9f:7b:0c:fa:2d: 7f:71:94:76:e1:19:b3:51:ef:f8:d7:98:d5:80:88: 5b:68:0e:a9:11:6a:8c:84:4c:97:0e:6a:05:ec:d3: 5b:cd:06:e0:98:00:ff:e7:ce:59:c1:57:e7:de:5d: 27:f0:64:81:8f:62:d7:8e:f4:dd:bd:51:09:cb:86: cc:a7:64:84:0a:f0:ba:be:9f:12:23:14:ea:83:c4: 6a:0d:02:80:80:f3:09:21:01:26:4a:75:a0:52:60: fe:a8:48:b5:5f:ab:d2:ff:eb:b9:c6:ab:bd:e1:ca: 4b:49:db:77:31:50:ec:75:e9:28:14:42:5e:7a:7d: 95:15:ed:dd:8d:84:52:5b:b6:84:47:25:73:1c:79: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7F:42:A9:47:C7:9D:60:9E:C8:3F:4B:37:08:21:89:D9:A5:12:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8510ce25-870e-3733-b590-5f17ce8a7559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:96:da:6b:2b:29:e1:26:5d:1b:be:52:52:24:1c:e0:2c:2b: 1b:d8:6d:3e:9b:a3:e5:36:b7:e1:2a:75:7f:09:15:8d:fe:f8: a8:c5:52:90:0f:69:34:0b:9b:dd:2b:4d:4c:3d:34:9b:7f:c3: c4:6d:58:44:d9:d7:8a:fc:a0:88:78:51:77:10:cb:c3:f8:71: 66:22:59:89:c4:a8:94:e2:cc:bc:1f:bb:5b:ed:84:88:30:e2: ec:fe:0c:99:34:67:1d:2f:77:10:54:29:06:37:0a:93:68:67: 29:84:10:ad:7a:f2:74:88:35:20:23:a7:0c:d8:45:5c:94:70: fd:96:6d:10:63:ea:fe:8d:f9:48:bb:ce:4f:0b:1f:5e:a1:71: 2d:78:0d:e6:4a:22:bf:96:73:04:8a:e3:90:38:3b:a7:06:07: bc:9a:3d:94:71:d2:90:cb:d5:d2:a0:29:93:17:44:9d:c4:b3: 50:bb:39:9f:38:c1:1d:fb:6a:e9:46:88:57:48:a0:66:84:5c: aa:f7:74:62:95:f9:ee:3f:f0:66:0e:89:87:2e:a7:1e:c1:5a: 4d:aa:ed:07:65:86:b5:6a:10:37:d1:f7:d2:e2:76:e8:89:8f: b1:9e:f1:bd:0c:67:88:0f:88:3f:17:82:d0:05:ce:28:81:14: 18:bf:c7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaL0EtOoSegV3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTczOGNhZTQtZDM0Zi00MGQ5LWE1YzUtMGZkYjVjMTM3NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVX8csFOZLkkEe/KQRMNtJTBZnYpQZq20sF4 nD1eJVWu9ENj6d6yzjV+1xlJnQmjuShuLAixAbmLr67ziQtjRJRT/T0qcFOuoJ/V et4jGi/46S0eQpVYvtcYNQVKGdwtQ0XX38Hh+zxuRAwSwRUbqznJn3sM+i1/cZR2 4RmzUe/415jVgIhbaA6pEWqMhEyXDmoF7NNbzQbgmAD/585ZwVfn3l0n8GSBj2LX jvTdvVEJy4bMp2SECvC6vp8SIxTqg8RqDQKAgPMJIQEmSnWgUmD+qEi1X6vS/+u5 xqu94cpLSdt3MVDsdekoFEJeen2VFe3djYRSW7aERyVzHHkQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd/QqlHx51gnsg/SzcIIYnZpRKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODUxMGNlMjUtODcwZS0z NzMzLWI1OTAtNWYxN2NlOGE3NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2W2msrKeEmXRu+UlIkHOAsKxvYbT6bo+U2t+EqdX8JFY3++KjFUpAP aTQLm90rTUw9NJt/w8RtWETZ14r8oIh4UXcQy8P4cWYiWYnEqJTizLwfu1vthIgw 4uz+DJk0Zx0vdxBUKQY3CpNoZymEEK168nSINSAjpwzYRVyUcP2WbRBj6v6N+Ui7 zk8LH16hcS14DeZKIr+WcwSK45A4O6cGB7yaPZRx0pDL1dKgKZMXRJ3Es1C7OZ84 wR37aulGiFdIoGaEXKr3dGKV+e4/8GYOiYcupx7BWk2q7QdlhrVqEDfR99LiduiJ j7Ge8b0MZ4gPiD8XgtAFziiBFBi/x50= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:29 2026 by rpki-client