$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/994b85ed-cfd6-3a7e-a889-875bb0558a07.roa File: 994b85ed-cfd6-3a7e-a889-875bb0558a07.roa (raw, json) Hash identifier: PzF7h/k/qJORQMYc/jnLKbC/yNRMBs7NVjTML94BK+c= Subject key identifier: 01:3C:6B:CC:8D:07:D3:CF:CE:2E:EB:EC:D2:10:6D:7D:2E:CC:93:95 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7E8DDA7C33617A7809A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/994b85ed-cfd6-3a7e-a889-875bb0558a07.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e8:dd:a7:c3:36:17:a7:80:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=4a2d48a1-7079-4570-927d-5f9de1805d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:99:78:4d:1c:e5:54:ca:9e:96:73:9f:46: ed:70:7d:ce:8e:b1:f2:cd:1a:b9:42:30:ee:f6:53: a6:7b:2b:18:ef:0d:b7:de:81:ae:11:3f:ce:06:99: a7:b3:64:5c:23:1e:54:a8:6a:99:c5:c9:b2:fa:6f: fa:53:4f:d6:b7:3c:ce:8b:d0:4d:e7:27:69:dd:54: a6:23:8a:05:6e:33:2f:1a:d2:fb:87:62:7d:d2:5b: a2:a0:95:a3:9f:c2:07:15:74:a8:a9:d6:ff:bc:ba: b3:28:e4:f9:de:0f:64:0b:4c:bc:52:d5:2e:d3:20: 6c:47:6a:1c:c8:68:00:38:80:e7:b5:29:cd:9f:e0: 63:68:53:4c:8e:ed:04:0a:61:75:93:23:c0:f7:7f: 67:f1:8e:c1:98:b7:cd:01:c8:24:67:f7:0c:96:8e: aa:0c:89:2d:e6:ab:b3:78:76:aa:da:fa:fa:c6:57: f1:69:ac:d9:c0:97:24:4a:3d:f4:0d:b1:58:70:67: 46:b8:21:53:a6:6e:1c:26:77:ca:94:20:4b:dc:70: c8:30:d4:6d:65:6c:ee:8c:b3:9e:83:47:ed:df:5f: 03:c1:a2:f8:00:92:c8:37:81:c5:82:e1:d8:82:7b: fb:75:69:70:70:f6:a2:66:f3:72:da:d6:d6:b0:37: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3C:6B:CC:8D:07:D3:CF:CE:2E:EB:EC:D2:10:6D:7D:2E:CC:93:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/994b85ed-cfd6-3a7e-a889-875bb0558a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b5:45:34:41:b4:33:b3:58:88:46:27:59:8c:a7:c6:33:45: ab:08:ec:54:93:53:1e:8c:92:d6:c0:6e:f8:d8:8f:27:5c:2a: 82:8b:23:83:51:b3:5f:34:14:cf:35:46:14:c3:2c:99:ca:42: 8b:23:e2:b1:3a:51:95:de:76:10:4e:ce:09:c5:06:8f:50:53: 88:0e:f2:1f:ef:53:9c:fe:dd:4e:c5:37:37:d1:20:68:d3:40: 6e:d4:87:bc:b5:f5:33:8c:83:b5:14:53:f9:58:06:8f:fc:52: 45:a7:09:d0:0f:e1:33:e7:77:78:c7:8a:f4:19:de:4e:36:b5: ad:d7:a4:37:c7:ea:6b:a8:44:7d:c9:fc:ad:ff:70:ba:d4:66: 45:93:af:56:d2:52:0f:41:a7:50:d0:9a:3a:f8:88:6b:4b:4c: 38:88:09:7b:d2:aa:35:d9:8a:5f:82:d5:3f:5b:19:b5:44:fa: 9f:87:48:08:e6:64:ce:2d:7a:60:d2:17:dc:d9:b2:26:ab:24: bc:4d:3f:3b:0d:a6:0d:b3:16:80:3f:94:df:8f:66:d7:2b:e9: 5f:8c:60:7b:2b:ac:a6:54:ed:c7:8a:df:67:15:81:1d:df:ce: 5e:f7:6c:93:f3:af:56:d3:3c:6c:5b:48:08:b1:b8:e5:23:8f: 9a:3e:4b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+jdp8M2F6eAmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NGEyZDQ4YTEtNzA3OS00NTcwLTkyN2QtNWY5ZGUxODA1ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdKZeE0c5VTKnpZzn0btcH3OjrHyzRq5QjDu 9lOmeysY7w233oGuET/OBpmns2RcIx5UqGqZxcmy+m/6U0/WtzzOi9BN5ydp3VSm I4oFbjMvGtL7h2J90luioJWjn8IHFXSoqdb/vLqzKOT53g9kC0y8UtUu0yBsR2oc yGgAOIDntSnNn+BjaFNMju0ECmF1kyPA939n8Y7BmLfNAcgkZ/cMlo6qDIkt5quz eHaq2vr6xlfxaazZwJckSj30DbFYcGdGuCFTpm4cJnfKlCBL3HDIMNRtZWzujLOe g0ft318DwaL4AJLIN4HFguHYgnv7dWlwcPaiZvNy2tbWsDerVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE8a8yNB9PPzi7r7NIQbX0uzJOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTk0Yjg1ZWQtY2ZkNi0z YTdlLWE4ODktODc1YmIwNTU4YTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi1RTRBtDOzWIhGJ1mMp8YzRasI7FSTUx6MktbAbvjYjydcKoKLI4NR s180FM81RhTDLJnKQosj4rE6UZXedhBOzgnFBo9QU4gO8h/vU5z+3U7FNzfRIGjT QG7Uh7y19TOMg7UUU/lYBo/8UkWnCdAP4TPnd3jHivQZ3k42ta3XpDfH6muoRH3J /K3/cLrUZkWTr1bSUg9Bp1DQmjr4iGtLTDiICXvSqjXZil+C1T9bGbVE+p+HSAjm ZM4temDSF9zZsiarJLxNPzsNpg2zFoA/lN+PZtcr6V+MYHsrrKZU7ceK32cVgR3f zl73bJPzr1bTPGxbSAixuOUjj5o+S6I= -----END CERTIFICATE-----Generated at Thu Mar 26 21:09:59 2026 by rpki-client