$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa File: 998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa (raw, json) Hash identifier: 5zggJ+u3zm3qjNpA7FXubWIC6neBu6e56t8xq39fxPk= Subject key identifier: 93:50:DB:2E:1F:05:AC:80:5D:CD:CB:80:38:6F:00:22:60:B2:26:6A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11727F8384A32B2BB1B63E80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:7f:83:84:a3:2b:2b:b1:b6:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=e2cde403-3d4a-4ca3-bb57-077842314164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:04:80:cf:39:1c:82:8c:a6:bc:48:9b:a6: 4e:69:b4:1e:0f:8b:46:58:fe:18:3e:6e:48:3e:7a: b2:6e:a7:da:cf:27:b3:ce:46:14:3e:c2:6e:02:27: 0e:7b:80:92:2e:b8:51:bd:2d:e0:c9:e3:09:9c:01: e6:44:ac:06:10:be:72:a4:23:61:47:34:4a:27:41: 55:f7:39:dd:94:b1:57:55:bd:48:c4:07:5f:ea:c3: f2:e6:8d:b2:0c:df:f9:f9:c1:be:a7:44:43:17:ba: 1e:0a:47:4b:d0:13:eb:47:59:4b:0b:1e:c9:96:93: 8a:a2:4e:23:bf:f9:b0:5f:84:47:d9:80:f3:82:15: 8c:cf:52:c7:cc:27:7b:bd:b2:7f:b2:c9:ff:38:15: c6:24:df:50:41:1e:ef:95:3b:fe:be:a4:cf:cc:53: 58:1a:85:d6:9a:89:34:7f:10:bd:35:13:4c:f5:8b: 44:69:1f:fb:0c:6f:1d:5e:29:97:db:5a:6d:9f:a0: 20:7e:2b:dc:57:3e:9c:c2:ec:a6:32:4f:bc:5a:1d: 27:06:92:e7:0e:2d:a6:bd:f9:94:9b:00:15:1c:58: 0d:df:b0:68:2b:92:f2:93:62:22:d6:7a:32:f6:95: ed:97:5b:da:a2:c9:52:f8:e7:ed:0a:dd:e1:de:1b: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:50:DB:2E:1F:05:AC:80:5D:CD:CB:80:38:6F:00:22:60:B2:26:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1a:6a:24:ec:7d:71:10:ad:d7:e9:45:9b:e9:7e:f1:36:2b: f0:15:8f:3c:a5:93:5b:4b:ca:f2:b6:f1:94:46:6f:cb:48:d2: f6:b6:db:a2:96:04:d2:c1:93:a3:f0:3d:59:d3:19:a6:1d:70: f9:1e:1f:ec:3a:49:f3:60:0a:29:34:63:29:58:84:ba:5a:6e: 21:ad:ac:f4:69:18:0d:ea:58:78:c5:94:f9:11:db:b6:ca:7f: 75:c9:de:7b:73:f0:4f:b2:20:9a:29:3a:46:d3:55:75:6d:a2: 37:8a:18:ab:ab:62:b7:05:29:7b:19:d9:10:2a:11:f3:94:f3: df:ed:3c:84:be:25:b7:27:65:a2:da:df:23:64:11:d9:cf:d2: 20:7d:03:56:02:78:4e:04:be:4b:8b:68:f9:c7:c7:e7:78:3c: b2:1d:f0:9b:ae:f4:1a:2f:0d:3b:e9:4e:a5:24:32:10:15:f6: 9e:ff:82:29:8e:c2:dc:7d:85:50:b7:76:06:f1:a0:a7:0e:2f: 58:c9:4f:13:f9:9e:aa:9e:8b:e3:f2:3d:2b:3e:d1:a8:b5:d4: 13:f5:f8:97:9c:fb:d5:29:d5:05:1f:15:1c:96:73:ed:e1:29: fc:e6:87:bb:a8:37:62:b0:f6:ec:b9:a2:f1:01:a2:49:14:34: 43:58:b0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcn+DhKMrK7G2PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZTJjZGU0MDMtM2Q0YS00Y2EzLWJiNTctMDc3ODQyMzE0MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGkEgM85HIKMprxIm6ZOabQeD4tGWP4YPm5I PnqybqfazyezzkYUPsJuAicOe4CSLrhRvS3gyeMJnAHmRKwGEL5ypCNhRzRKJ0FV 9zndlLFXVb1IxAdf6sPy5o2yDN/5+cG+p0RDF7oeCkdL0BPrR1lLCx7JlpOKok4j v/mwX4RH2YDzghWMz1LHzCd7vbJ/ssn/OBXGJN9QQR7vlTv+vqTPzFNYGoXWmok0 fxC9NRNM9YtEaR/7DG8dXimX21ptn6AgfivcVz6cwuymMk+8Wh0nBpLnDi2mvfmU mwAVHFgN37BoK5Lyk2Ii1noy9pXtl1vaoslS+OftCt3h3htiIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNQ2y4fBayAXc3LgDhvACJgsiZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTk4ZjUxYTktMWE2ZC0z N2UzLTg1NDgtMTExOWU2ZWYzYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkaaiTsfXEQrdfpRZvpfvE2K/AVjzylk1tLyvK28ZRGb8tI0va226KW BNLBk6PwPVnTGaYdcPkeH+w6SfNgCik0YylYhLpabiGtrPRpGA3qWHjFlPkR27bK f3XJ3ntz8E+yIJopOkbTVXVtojeKGKurYrcFKXsZ2RAqEfOU89/tPIS+JbcnZaLa 3yNkEdnP0iB9A1YCeE4EvkuLaPnHx+d4PLId8Juu9BovDTvpTqUkMhAV9p7/gimO wtx9hVC3dgbxoKcOL1jJTxP5nqqei+PyPSs+0ai11BP1+Jec+9Up1QUfFRyWc+3h Kfzmh7uoN2Kw9uy5ovEBokkUNENYsLg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:12 2026 by rpki-client