$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa File: 9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa (raw, json) Hash identifier: 86fF2Oq+Nst/GYItJt1FvkGutCRhzKFUXJ9Szy3oyz0= Subject key identifier: 5E:4A:2E:83:0C:76:76:76:B2:04:4D:81:C6:8A:2A:45:32:E8:B9:F5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8CA84BB4F328AE0EE800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8c:a8:4b:b4:f3:28:ae:0e:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b8fa6074-df70-4f81-be28-7d3d0ef1be33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:77:40:74:4b:db:8d:5a:86:c0:4b:7a:da: 1c:d9:71:e0:04:96:00:29:d2:19:cc:35:f9:5f:93: 88:d2:fd:5e:68:23:f6:0e:17:c8:75:42:7e:59:88: 26:58:2e:59:ae:11:f0:bb:60:51:f8:58:22:ac:1f: b9:7e:91:3d:b0:a7:d8:25:6e:ae:5f:81:e0:75:a7: 80:5a:1d:3a:5e:64:29:d5:02:bb:cd:4c:d0:1a:c0: db:cb:44:4b:20:0c:99:89:b5:dc:b9:13:3f:94:d3: 8d:b0:00:7e:7b:19:4e:53:10:71:42:b3:be:44:ac: 63:5c:58:9c:72:37:56:75:88:f1:20:1b:9a:17:7e: be:f6:46:9c:6a:aa:16:60:e7:64:51:a1:10:70:a1: 61:12:5e:b1:66:8a:5c:7c:31:65:1c:41:ae:a9:c2: c5:5c:38:8a:46:80:b0:09:03:7f:37:5e:55:8f:d8: 3d:18:a3:61:09:e5:2a:6a:a0:17:71:9c:b7:91:2a: 66:4a:a7:87:13:f4:ca:ae:b4:5a:c6:5f:b6:6d:48: 83:36:38:2c:2d:3b:04:0b:e4:fc:8e:bb:b0:52:eb: fc:9d:6d:0f:41:b8:1e:63:ff:e4:86:d7:c2:04:33: c0:50:6a:fb:b4:42:b8:2f:37:c3:ec:1e:a7:3e:87: 34:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:2E:83:0C:76:76:76:B2:04:4D:81:C6:8A:2A:45:32:E8:B9:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c5:ab:a8:76:0c:c0:93:88:0d:05:18:fe:59:f6:dc:2d:25: 41:8c:b9:6f:c9:38:dc:18:a9:ac:16:f7:e6:ae:81:5f:c0:28: 26:05:b7:63:6f:5f:2d:53:65:70:2c:e9:cc:38:74:1a:ca:8d: 19:89:6a:64:df:33:70:5d:fd:b1:3e:60:d9:d6:99:b7:76:bd: 96:d5:43:9b:fd:cb:83:ea:af:d1:11:52:6f:36:09:cf:40:cb: 9b:dc:c8:37:af:17:d7:ab:d2:aa:f1:fb:33:a9:46:e1:46:3b: 94:6c:0f:18:00:b3:95:e0:a1:24:b0:57:bb:0f:91:57:f8:43: 91:d2:d4:06:c3:11:c9:e2:94:4b:0c:e8:55:55:df:7e:f9:18: 35:95:1a:72:ac:85:96:25:1a:8c:5c:42:12:9e:e6:23:30:e9: 3d:7e:c5:b0:69:bf:2c:52:05:72:48:09:03:0a:b3:92:da:b6: 54:3e:05:39:5d:51:40:26:30:1c:ca:84:80:21:6d:65:ab:10: 75:0d:1b:73:99:c1:a7:b8:0a:52:be:9a:9b:5a:62:37:7b:4e: d0:e0:0c:b8:bc:67:76:59:86:58:eb:77:de:51:7e:ed:5d:af: 3d:54:3d:41:97:a2:07:88:ba:46:fa:01:51:70:c6:d8:b5:71: 7f:be:13:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYyoS7TzKK4O6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjhmYTYwNzQtZGY3MC00ZjgxLWJlMjgtN2QzZDBlZjFiZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbt3QHRL241ahsBLetoc2XHgBJYAKdIZzDX5 X5OI0v1eaCP2DhfIdUJ+WYgmWC5ZrhHwu2BR+FgirB+5fpE9sKfYJW6uX4HgdaeA Wh06XmQp1QK7zUzQGsDby0RLIAyZibXcuRM/lNONsAB+exlOUxBxQrO+RKxjXFic cjdWdYjxIBuaF36+9kacaqoWYOdkUaEQcKFhEl6xZopcfDFlHEGuqcLFXDiKRoCw CQN/N15Vj9g9GKNhCeUqaqAXcZy3kSpmSqeHE/TKrrRaxl+2bUiDNjgsLTsEC+T8 jruwUuv8nW0PQbgeY//khtfCBDPAUGr7tEK4LzfD7B6nPoc0dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5KLoMMdnZ2sgRNgcaKKkUy6Ln1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWQ5NTE5YWYtYjBkNy0z YzY0LThhYTctNGVmMDNjMjVkNmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7Fq6h2DMCTiA0FGP5Z9twtJUGMuW/JONwYqawW9+augV/AKCYFt2Nv Xy1TZXAs6cw4dBrKjRmJamTfM3Bd/bE+YNnWmbd2vZbVQ5v9y4Pqr9ERUm82Cc9A y5vcyDevF9er0qrx+zOpRuFGO5RsDxgAs5XgoSSwV7sPkVf4Q5HS1AbDEcnilEsM 6FVV3375GDWVGnKshZYlGoxcQhKe5iMw6T1+xbBpvyxSBXJICQMKs5LatlQ+BTld UUAmMBzKhIAhbWWrEHUNG3OZwae4ClK+mptaYjd7TtDgDLi8Z3ZZhljrd95Rfu1d rz1UPUGXogeIukb6AVFwxti1cX++E0s= -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:17 2026 by rpki-client