$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa File: 932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa (raw, json) Hash identifier: giJMDFNxo0flAhIfm7lfkFOqb25lD7lt9vTeo/L3eOk= Subject key identifier: 95:85:5C:3C:CA:7E:EF:01:7D:CF:D2:A3:58:B8:02:CA:9C:A4:CA:2F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D89CFAFB29C53C4A6F440 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:89:cf:af:b2:9c:53:c4:a6:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=2f58fea7-c96e-41f7-9c6b-13addd19859e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0a:61:60:ae:51:df:19:05:93:ae:3c:10:0f: a0:ef:b2:cd:fe:d9:f8:6b:31:18:d3:26:29:9f:47: 91:4d:0a:83:cd:a6:f0:54:7d:ff:3f:e0:03:c0:02: c3:5e:92:25:4e:f7:90:1c:75:e2:5a:94:bb:10:7e: c2:35:e1:1a:3e:e1:dd:e8:3a:c3:42:e5:af:8c:48: d9:6d:33:da:26:71:6b:f2:e7:80:18:80:8b:f4:c2: d5:1a:79:5e:4a:26:32:51:eb:1f:ec:5e:67:89:9a: d5:4c:b1:22:54:65:57:5b:73:ac:bf:04:18:3b:7f: a9:7d:08:fe:e7:18:58:93:96:11:0f:29:3e:4a:d2: 3c:51:9a:6a:eb:28:68:e4:ee:9b:cc:68:8b:d6:67: d0:56:d0:19:dd:8d:3a:92:91:13:01:0e:8b:d0:82: b1:88:c8:40:ce:33:4c:9e:4c:9c:09:61:3f:54:6b: b6:58:6d:08:b6:16:69:60:ef:d0:de:6c:18:0f:03: f9:30:5a:ef:47:cb:97:54:21:6d:c7:f7:e8:8c:54: 55:d0:6a:19:8f:59:57:8d:50:6a:ea:3a:7e:22:ac: 55:e5:fb:c0:62:e4:e5:6f:2c:8f:97:e3:2d:51:20: e5:02:bc:01:57:a9:85:ed:2e:aa:d9:dc:e1:90:82: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:85:5C:3C:CA:7E:EF:01:7D:CF:D2:A3:58:B8:02:CA:9C:A4:CA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/932b7ec7-a0b5-3645-9699-df68e0cb0d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3f:28:66:c2:29:8e:9c:41:60:fe:e7:ff:bc:6d:2d:d8:b2: fb:eb:97:c7:9f:97:87:ad:54:9e:99:3e:2f:2e:dd:86:f5:67: 3f:59:80:3f:37:9b:1e:e1:11:f7:e2:38:6a:88:74:c4:52:c2: 4f:a0:40:19:01:b3:f7:f2:cd:d9:8b:0c:ce:a4:f0:03:86:5e: 41:76:9a:b8:56:0f:d3:5b:e8:c0:d9:0c:37:4a:a4:7b:37:c8: 12:31:e8:ba:cb:9b:37:70:a1:6e:92:9b:92:95:ec:0b:cd:6f: b6:38:81:59:12:ca:80:50:2e:41:61:66:a3:b4:b2:a8:0e:7d: c6:f9:52:74:86:44:97:70:ac:ea:80:e0:42:07:c5:20:7e:a7: 66:98:1d:af:2c:af:0d:ed:73:e0:4e:9e:12:83:1e:9f:cc:b5: 4f:92:07:c0:b7:2d:d6:48:21:5d:22:fc:7e:a8:00:ca:b2:e1: 58:80:e6:a3:e8:8b:72:07:0d:50:64:6f:bd:e8:59:2a:2a:45: 76:84:8f:c8:24:fa:6d:55:86:bc:fd:13:19:25:84:30:a8:5b: 70:a4:2b:c0:ba:4d:7a:82:4c:ba:c0:43:95:fd:6a:dd:73:6e: 30:64:0d:7f:cd:18:b0:6e:89:51:0f:87:df:d2:d6:1f:35:18: 99:70:d7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYnPr7KcU8Sm9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MmY1OGZlYTctYzk2ZS00MWY3LTljNmItMTNhZGRkMTk4NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gphYK5R3xkFk648EA+g77LN/tn4azEY0yYp n0eRTQqDzabwVH3/P+ADwALDXpIlTveQHHXiWpS7EH7CNeEaPuHd6DrDQuWvjEjZ bTPaJnFr8ueAGICL9MLVGnleSiYyUesf7F5niZrVTLEiVGVXW3OsvwQYO3+pfQj+ 5xhYk5YRDyk+StI8UZpq6yho5O6bzGiL1mfQVtAZ3Y06kpETAQ6L0IKxiMhAzjNM nkycCWE/VGu2WG0IthZpYO/Q3mwYDwP5MFrvR8uXVCFtx/fojFRV0GoZj1lXjVBq 6jp+IqxV5fvAYuTlbyyPl+MtUSDlArwBV6mF7S6q2dzhkIIemQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWFXDzKfu8Bfc/So1i4AsqcpMovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTMyYjdlYzctYTBiNS0z NjQ1LTk2OTktZGY2OGUwY2IwZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY/KGbCKY6cQWD+5/+8bS3Ysvvrl8efl4etVJ6ZPi8u3Yb1Zz9ZgD83 mx7hEffiOGqIdMRSwk+gQBkBs/fyzdmLDM6k8AOGXkF2mrhWD9Nb6MDZDDdKpHs3 yBIx6LrLmzdwoW6Sm5KV7AvNb7Y4gVkSyoBQLkFhZqO0sqgOfcb5UnSGRJdwrOqA 4EIHxSB+p2aYHa8srw3tc+BOnhKDHp/MtU+SB8C3LdZIIV0i/H6oAMqy4ViA5qPo i3IHDVBkb73oWSoqRXaEj8gk+m1Vhrz9ExklhDCoW3CkK8C6TXqCTLrAQ5X9at1z bjBkDX/NGLBuiVEPh9/S1h81GJlw1+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:13 2026 by rpki-client