$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa File: 971c0aba-2882-33af-b5c2-5d49fdd45247.roa (raw, json) Hash identifier: 4y+CGQftKZeXAQIwLFpqQa5k9dQIOInPwScXrMWRhYw= Subject key identifier: A6:74:04:2B:06:04:14:8C:81:D3:DE:4C:80:E3:3B:78:6B:18:78:1F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8C0FEE5526E34C10BCC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8c:0f:ee:55:26:e3:4c:10:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b691d39f-4b63-44b4-a006-02f39ab5bca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:36:d7:13:25:1c:bc:03:3b:df:0f:39:5e: 77:89:fd:9f:d3:db:a3:33:1d:b5:c3:28:fa:ab:d5: 1b:ee:8d:c6:50:9f:ee:d5:27:82:1d:92:28:56:b8: c5:b2:d4:be:2f:a0:1f:6c:34:1b:9b:4c:da:0d:76: d3:f3:90:88:3b:e7:ff:d4:be:98:bf:45:65:81:12: 67:32:e0:a1:53:3c:b9:14:1f:82:48:b3:bf:6b:62: 75:2e:ee:46:89:ff:50:5a:ff:01:0c:8b:4f:cf:f1: 5e:bb:9c:be:53:27:f5:ea:85:84:eb:e3:bb:a8:38: 46:5f:32:f9:a5:35:49:b3:db:01:00:98:fd:6c:01: ac:99:ce:b0:10:1c:37:bb:80:bb:41:59:dd:45:ef: ba:55:0b:4b:68:e0:c5:1d:b2:0a:61:2e:fa:13:29: 2c:3c:8b:48:79:ba:eb:c3:ba:bf:f1:c3:36:a0:7d: 12:6f:fe:7e:ea:8d:36:5e:b9:bf:b5:49:54:12:df: bf:bc:a5:a7:a2:76:59:33:ad:74:ff:70:02:7a:c7: 4b:88:ff:28:7d:fe:08:57:e9:ca:24:73:07:7e:85: 37:c0:c7:e8:da:82:4d:df:3d:b8:0b:4b:94:08:52: 57:cc:4b:83:ed:6b:80:3a:19:b8:b4:bb:f4:22:15: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:04:2B:06:04:14:8C:81:D3:DE:4C:80:E3:3B:78:6B:18:78:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:91:4f:18:b7:1d:f6:21:1f:ef:03:d3:e2:51:65:36:38:2b: f6:d3:fd:43:62:1e:e5:17:ec:b6:53:6e:ac:7d:9d:af:96:2d: 95:f7:a6:f3:f5:f5:c8:1e:a5:a8:5a:d4:d4:a6:e4:d2:a0:3f: cc:f9:c8:c8:c6:1e:6c:76:2a:7b:8d:50:ba:f1:46:fb:23:7c: 6b:b2:3d:40:f7:c4:ce:cb:0e:36:c7:20:82:49:8a:d4:1e:c2: fa:bd:a9:26:96:27:ff:82:57:ed:c6:51:a8:a0:33:4b:96:1d: e2:93:5a:d3:dd:ac:8b:a0:1b:40:8a:7a:c6:08:a3:23:3a:a8: 1c:8b:1d:bc:5b:29:d4:2e:3b:49:44:86:7f:76:cf:cd:da:06: 04:bd:b1:19:b8:3b:8e:6c:ee:aa:c8:04:a3:ef:64:20:a1:a7: b5:94:54:1f:43:8f:e6:a9:66:8f:05:4c:76:3a:f9:d7:a6:06: 4d:da:ee:ca:9d:6e:30:66:61:9a:c5:47:2a:e1:6b:14:c3:16: 4f:0d:3b:b2:ba:96:ca:7a:95:5d:3e:04:14:4b:83:0e:cd:d7: 74:3c:6a:81:cc:27:09:ef:2a:c1:3b:22:4e:96:d5:8d:6e:7e: 99:0a:46:51:f7:33:21:e5:ad:e3:14:39:21:9d:81:96:dc:14: 19:d0:b1:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYwP7lUm40wQvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjY5MWQzOWYtNGI2My00NGI0LWEwMDYtMDJmMzlhYjViY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQU21xMlHLwDO98POV53if2f09ujMx21wyj6 q9Ub7o3GUJ/u1SeCHZIoVrjFstS+L6AfbDQbm0zaDXbT85CIO+f/1L6Yv0VlgRJn MuChUzy5FB+CSLO/a2J1Lu5Gif9QWv8BDItPz/Feu5y+Uyf16oWE6+O7qDhGXzL5 pTVJs9sBAJj9bAGsmc6wEBw3u4C7QVndRe+6VQtLaODFHbIKYS76EyksPItIebrr w7q/8cM2oH0Sb/5+6o02Xrm/tUlUEt+/vKWnonZZM610/3ACesdLiP8off4IV+nK JHMHfoU3wMfo2oJN3z24C0uUCFJXzEuD7WuAOhm4tLv0IhWcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ0BCsGBBSMgdPeTIDjO3hrGHgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTcxYzBhYmEtMjg4Mi0z M2FmLWI1YzItNWQ0OWZkZDQ1MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeRTxi3HfYhH+8D0+JRZTY4K/bT/UNiHuUX7LZTbqx9na+WLZX3pvP1 9cgepaha1NSm5NKgP8z5yMjGHmx2KnuNULrxRvsjfGuyPUD3xM7LDjbHIIJJitQe wvq9qSaWJ/+CV+3GUaigM0uWHeKTWtPdrIugG0CKesYIoyM6qByLHbxbKdQuO0lE hn92z83aBgS9sRm4O45s7qrIBKPvZCChp7WUVB9Dj+apZo8FTHY6+demBk3a7sqd bjBmYZrFRyrhaxTDFk8NO7K6lsp6lV0+BBRLgw7N13Q8aoHMJwnvKsE7Ik6W1Y1u fpkKRlH3MyHlreMUOSGdgZbcFBnQsXE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:34 2026 by rpki-client