$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94d5fd0f-5dd2-35de-926d-489c84db341e.roa File: 94d5fd0f-5dd2-35de-926d-489c84db341e.roa (raw, json) Hash identifier: uKQzA5OWcAgitV8N+13Bj8TaJaswJ8obNBk5FJol77Q= Subject key identifier: E9:FE:C5:B9:B4:91:90:95:4C:5D:F5:51:FE:D2:10:AE:9F:1E:F3:AD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8F2D61C5A2F255287C00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94d5fd0f-5dd2-35de-926d-489c84db341e.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8f:2d:61:c5:a2:f2:55:28:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=6a44c690-c901-4dc7-a292-28c1942dc554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:09:59:29:92:9a:01:d7:30:b8:d9:11:e4: 59:c8:da:5c:33:b2:8c:6e:b2:f0:ff:7a:70:5c:4a: 86:50:db:53:63:06:64:ab:c5:55:94:b7:ba:10:7d: be:44:db:80:0e:6b:3e:f1:f6:91:81:1b:30:e0:c9: 54:50:25:57:03:0a:b7:11:0b:fe:ff:34:9d:41:67: 76:06:1e:4b:0e:3c:0c:4a:1b:49:e9:de:db:8b:15: c2:8a:59:b5:c4:46:65:d8:80:2d:eb:0e:45:80:21: f0:84:e1:19:aa:77:37:9a:be:be:53:3b:75:76:a8: ab:58:57:40:02:96:4d:16:fa:e6:4c:40:e4:9e:cb: e9:a1:6c:9b:79:c9:0d:1e:38:25:86:1d:af:f5:1e: af:28:28:09:a4:c0:94:5b:4b:11:c6:26:87:52:9c: ff:39:0d:fb:e6:8d:f4:5b:0b:38:c4:cb:06:f6:c9: 7e:b7:3b:7c:8a:43:ad:a9:31:36:d2:7b:32:73:53: 19:fd:47:ab:fb:09:86:dd:8c:58:6d:c0:3c:e1:8a: f7:17:c7:e9:f1:6c:10:4a:b3:c9:22:06:bd:f9:be: 4d:5c:4b:39:e4:31:75:4f:09:95:36:04:cd:ae:70: 45:85:f0:5f:f9:87:41:1f:81:ba:69:cd:0d:a1:52: 38:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:C5:B9:B4:91:90:95:4C:5D:F5:51:FE:D2:10:AE:9F:1E:F3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94d5fd0f-5dd2-35de-926d-489c84db341e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4d:f4:cf:d7:76:e0:f0:75:f4:0f:9f:57:61:5a:df:04:1d: df:01:ab:33:ba:f1:42:3d:c7:56:8b:78:99:c5:97:f3:57:43: 1f:98:e9:7f:e7:9e:48:10:4f:92:7f:89:d8:5b:0b:1d:6c:a1: fb:77:bd:9b:84:62:ff:75:69:e2:68:5d:62:ab:5e:b3:8c:30: 34:5b:83:12:02:f6:4e:d5:c3:b4:8a:18:53:58:61:bb:54:7e: b9:3c:b2:f2:86:a4:b5:3e:14:b7:33:ff:c9:c0:5f:91:a4:3e: 67:9b:64:4a:92:50:61:a2:9d:0e:08:b7:1a:d0:8f:3a:05:72: d6:bb:dd:e4:c6:ac:d3:4a:c8:87:93:e6:8a:28:6a:a5:00:e7: 1a:6e:35:da:13:74:73:2a:d8:a7:4a:8b:9d:f9:3a:23:a4:e4: 1c:9f:fb:7f:19:66:15:f9:66:eb:cf:43:7b:44:b4:47:e2:c4: eb:c4:0f:a2:23:e6:45:c4:bc:36:83:05:8a:5f:67:9c:a7:06: 94:0d:35:2f:3f:39:d1:81:c2:f6:35:a9:b6:d6:bc:c9:d5:c4: a6:f3:b1:00:ac:c8:23:91:47:4f:95:95:2b:bc:7b:85:ad:28: ac:1e:b6:92:8f:7c:15:d0:ef:28:b4:c1:7a:77:52:fa:e9:dc: 2b:04:27:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY8tYcWi8lUofAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NmE0NGM2OTAtYzkwMS00ZGM3LWEyOTItMjhjMTk0MmRjNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHsJWSmSmgHXMLjZEeRZyNpcM7KMbrLw/3pw XEqGUNtTYwZkq8VVlLe6EH2+RNuADms+8faRgRsw4MlUUCVXAwq3EQv+/zSdQWd2 Bh5LDjwMShtJ6d7bixXCilm1xEZl2IAt6w5FgCHwhOEZqnc3mr6+Uzt1dqirWFdA ApZNFvrmTEDknsvpoWybeckNHjglhh2v9R6vKCgJpMCUW0sRxiaHUpz/OQ375o30 Wws4xMsG9sl+tzt8ikOtqTE20nsyc1MZ/Uer+wmG3YxYbcA84Yr3F8fp8WwQSrPJ Iga9+b5NXEs55DF1TwmVNgTNrnBFhfBf+YdBH4G6ac0NoVI4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn+xbm0kZCVTF31Uf7SEK6fHvOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTRkNWZkMGYtNWRkMi0z NWRlLTkyNmQtNDg5Yzg0ZGIzNDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpN9M/XduDwdfQPn1dhWt8EHd8BqzO68UI9x1aLeJnFl/NXQx+Y6X/n nkgQT5J/idhbCx1soft3vZuEYv91aeJoXWKrXrOMMDRbgxIC9k7Vw7SKGFNYYbtU frk8svKGpLU+FLcz/8nAX5GkPmebZEqSUGGinQ4ItxrQjzoFcta73eTGrNNKyIeT 5oooaqUA5xpuNdoTdHMq2KdKi535OiOk5Byf+38ZZhX5ZuvPQ3tEtEfixOvED6Ij 5kXEvDaDBYpfZ5ynBpQNNS8/OdGBwvY1qbbWvMnVxKbzsQCsyCORR0+VlSu8e4Wt KKwetpKPfBXQ7yi0wXp3Uvrp3CsEJ7I= -----END CERTIFICATE-----Generated at Thu Mar 26 22:40:29 2026 by rpki-client