$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa File: 918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa (raw, json) Hash identifier: ag/NjyLBwV/uE1ZTNtaXqjZtzmvIMij7UevZlYhcKwc= Subject key identifier: 35:02:E4:81:C3:86:F4:38:68:45:3D:A7:1A:08:54:CA:4E:3B:F4:18 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D93312C767A087C6B5F20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:93:31:2c:76:7a:08:7c:6b:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b09af33f-e23c-4c7c-9ec5-01ecd8a78f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:50:8a:25:79:73:47:83:88:2f:74:43:9e:d5: 4f:16:14:1a:c9:97:36:e1:19:31:60:bd:3e:0d:d0: 92:20:a9:35:1c:9a:de:f0:d4:38:df:36:93:96:44: 9e:5c:87:26:77:de:47:d0:1e:b2:e0:34:34:6d:23: 19:e2:7a:a5:3a:6f:5f:26:62:45:f8:91:98:d6:07: b4:9d:de:8f:29:a2:e8:0f:2f:85:a6:3e:31:33:1d: de:a5:29:3b:3b:d3:24:5d:10:be:0d:ea:d5:b4:fd: 65:0d:05:8f:5b:b2:49:ac:ed:62:6e:f8:a1:66:33: a9:b8:16:0f:f8:1f:eb:8d:37:82:2a:19:16:be:0b: 3e:12:5e:b2:84:e7:78:07:4b:80:9f:e3:6f:94:ea: b9:87:c3:c9:45:d4:2e:cd:aa:99:ae:73:76:54:4e: 6b:ce:d1:44:8d:a2:99:eb:91:57:e0:a8:55:a3:24: d3:d1:6a:31:41:27:a2:fe:bb:fa:b2:3a:e3:2a:00: e1:f6:37:33:b8:37:2b:6d:63:56:34:13:d2:b9:fb: 15:38:52:36:3b:99:bd:fa:0f:1c:cf:fc:51:70:a0: ed:b1:06:e5:a6:d5:79:43:83:5d:06:52:62:72:3f: 1c:27:f0:61:46:19:93:aa:35:8c:31:83:26:e5:d4: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:02:E4:81:C3:86:F4:38:68:45:3D:A7:1A:08:54:CA:4E:3B:F4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/918ca67e-3f23-30cf-b980-a9d1cf95d1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f9:3b:d6:dc:ea:9a:c1:73:d5:fc:67:e7:39:93:ac:41:88: e5:69:27:32:d3:30:7e:0d:ad:9c:01:8a:6d:dc:3e:04:79:57: c4:9c:55:81:6e:a9:34:46:00:ab:80:c8:b6:42:c8:a7:1d:48: b8:c1:cb:5a:c0:fe:79:18:a1:06:4d:43:d3:c0:9e:40:c1:9a: 8d:5c:7a:cc:94:a3:21:a2:02:df:4d:17:6e:2d:5a:1a:96:b6: 2c:df:26:6c:65:3d:db:be:f3:de:0e:93:cd:56:f8:7b:04:c4: ca:48:4a:d1:7e:c5:99:5e:7f:4e:b6:ee:d3:d5:88:f7:fc:b5: 53:61:0b:de:ac:19:b4:30:9b:7a:a9:4b:81:c5:99:42:80:02: e1:c8:f7:50:2d:4c:05:62:6d:db:d8:1e:6e:ec:fa:5a:d5:e2: 41:b9:df:3c:fb:0d:d5:a5:ef:15:25:51:37:16:14:38:8e:f6: b4:4b:c6:81:fd:d9:7a:62:ce:66:4c:5a:e1:e2:4a:0c:a2:10: 1b:f1:6f:9e:0f:9a:bc:80:81:8e:e7:96:1f:31:40:8c:98:7d: d5:f1:ea:82:0d:c7:65:4b:77:49:01:63:b9:d5:78:1c:8d:7a: 76:95:52:ba:00:42:3c:f0:fa:54:8a:af:9d:55:9e:23:8d:56: 85:cf:78:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZMxLHZ6CHxrXyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjA5YWYzM2YtZTIzYy00YzdjLTllYzUtMDFlY2Q4YTc4ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVCKJXlzR4OIL3RDntVPFhQayZc24RkxYL0+ DdCSIKk1HJre8NQ43zaTlkSeXIcmd95H0B6y4DQ0bSMZ4nqlOm9fJmJF+JGY1ge0 nd6PKaLoDy+Fpj4xMx3epSk7O9MkXRC+DerVtP1lDQWPW7JJrO1ibvihZjOpuBYP +B/rjTeCKhkWvgs+El6yhOd4B0uAn+NvlOq5h8PJRdQuzaqZrnN2VE5rztFEjaKZ 65FX4KhVoyTT0WoxQSei/rv6sjrjKgDh9jczuDcrbWNWNBPSufsVOFI2O5m9+g8c z/xRcKDtsQblptV5Q4NdBlJicj8cJ/BhRhmTqjWMMYMm5dRXVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUC5IHDhvQ4aEU9pxoIVMpOO/QYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTE4Y2E2N2UtM2YyMy0z MGNmLWI5ODAtYTlkMWNmOTVkMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH5O9bc6prBc9X8Z+c5k6xBiOVpJzLTMH4NrZwBim3cPgR5V8ScVYFu qTRGAKuAyLZCyKcdSLjBy1rA/nkYoQZNQ9PAnkDBmo1cesyUoyGiAt9NF24tWhqW tizfJmxlPdu+894Ok81W+HsExMpIStF+xZlef0627tPViPf8tVNhC96sGbQwm3qp S4HFmUKAAuHI91AtTAVibdvYHm7s+lrV4kG53zz7DdWl7xUlUTcWFDiO9rRLxoH9 2XpizmZMWuHiSgyiEBvxb54PmryAgY7nlh8xQIyYfdXx6oINx2VLd0kBY7nVeByN enaVUroAQjzw+lSKr51VniONVoXPeBM= -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:48 2026 by rpki-client