$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa File: a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa (raw, json) Hash identifier: i69LZnwk5TCPXclGfD/Alef8ADa4q1nUY3ij2FtWmnk= Subject key identifier: 72:0C:2B:C2:15:4C:D7:74:60:29:B3:00:EA:48:73:52:6F:7A:07:88 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A4E4768152938718A2480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 36411 IP address blocks: 104.135.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:4e:47:68:15:29:38:71:8a:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=8e1661b1-a641-408b-85ef-5f2f4dbbc454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:94:86:86:5a:ee:9f:72:2a:2f:9e:55:4a: 27:30:0d:a6:53:57:cb:02:7b:e8:b2:35:33:6e:74: 1e:64:d1:1e:19:ee:bc:20:80:62:8f:4f:56:4e:c6: d5:31:0c:54:52:33:3b:7e:6c:d7:c7:64:04:a6:ad: bb:2f:f9:01:a1:79:30:48:89:45:30:e1:c7:41:79: 36:cb:a5:c4:30:03:79:b8:55:44:67:1c:db:a3:79: 89:2b:2d:b8:5c:af:52:3c:1a:73:76:4b:36:70:20: 8f:91:56:23:32:4b:01:a1:0e:03:9c:26:15:df:68: 8c:f5:9c:e6:ad:1b:76:97:c3:ca:b3:6b:fe:db:35: a7:16:83:97:3f:92:d6:f9:21:dd:3a:04:9f:c9:5b: 72:6c:2e:34:ba:ea:3b:c0:89:2a:3a:46:84:8c:6b: 06:9b:53:19:e7:e3:b0:b3:bd:71:a1:66:57:c7:5b: 6b:d7:ff:a3:6f:ee:f0:eb:3f:12:ad:84:cc:6c:1c: 73:2d:45:63:c5:38:fd:6f:9e:bb:01:75:6c:aa:03: 2c:72:71:95:07:c9:97:14:67:74:ab:7c:00:7e:eb: 7d:78:21:86:da:55:06:34:9f:6e:fe:99:b9:6e:84: e9:3b:23:91:69:a3:d6:3f:54:8e:6c:41:61:8f:e9: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:2B:C2:15:4C:D7:74:60:29:B3:00:EA:48:73:52:6F:7A:07:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a0b9d787-983e-32de-99e3-4b74a2ddd21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:e2:c8:37:23:db:4d:4d:e0:e9:1e:da:b4:04:83:4e:45:5c: 80:6d:93:64:a3:d2:c0:52:cc:91:cb:90:3d:c3:a3:09:80:a9: d1:db:6b:35:3b:25:7a:ff:58:ee:0d:f0:8f:ff:53:85:16:d5: 09:e7:1b:3f:25:3c:a2:98:07:21:a9:57:94:25:c3:94:99:a8: 7d:c7:b1:60:14:0f:c5:ed:92:7b:4f:8d:43:b3:4c:3b:c2:15: fb:3f:45:5e:d6:af:e1:ac:c6:f2:2c:11:43:8d:b6:45:d6:0d: fe:29:b0:c1:37:07:fa:53:47:51:7b:b3:8d:86:09:c5:a4:e9: 23:37:c5:5c:d5:9c:5d:7e:41:ca:b5:5d:d4:3d:ef:9d:3c:3a: 22:22:44:f6:92:ba:1c:e6:99:18:90:de:bc:04:cb:09:52:0a: 9d:87:66:fa:67:19:10:dd:6b:b9:9c:87:9c:ef:c8:87:7e:93: e8:43:dc:e6:0d:53:b2:51:c6:7e:ee:0c:20:6e:0c:44:ae:f4: 9e:30:40:5e:b4:bd:fa:69:dc:ce:01:50:41:de:8c:cb:4e:4d: 7d:a7:27:52:c0:bb:cf:fb:e5:2f:dc:54:64:fa:ae:02:70:f8: 05:f3:f0:35:18:d3:77:ba:a9:03:b7:f8:1d:2b:55:07:f7:09: 0f:49:8b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSk5HaBUpOHGKJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OGUxNjYxYjEtYTY0MS00MDhiLTg1ZWYtNWYyZjRkYmJjNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPyUhoZa7p9yKi+eVUonMA2mU1fLAnvosjUz bnQeZNEeGe68IIBij09WTsbVMQxUUjM7fmzXx2QEpq27L/kBoXkwSIlFMOHHQXk2 y6XEMAN5uFVEZxzbo3mJKy24XK9SPBpzdks2cCCPkVYjMksBoQ4DnCYV32iM9Zzm rRt2l8PKs2v+2zWnFoOXP5LW+SHdOgSfyVtybC40uuo7wIkqOkaEjGsGm1MZ5+Ow s71xoWZXx1tr1/+jb+7w6z8SrYTMbBxzLUVjxTj9b567AXVsqgMscnGVB8mXFGd0 q3wAfut9eCGG2lUGNJ9u/pm5boTpOyORaaPWP1SObEFhj+k9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIMK8IVTNd0YCmzAOpIc1JvegeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTBiOWQ3ODctOTgzZS0z MmRlLTk5ZTMtNGI3NGEyZGRkMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7iyDcj201N4Oke2rQEg05FXIBtk2Sj0sBSzJHLkD3DowmAqdHbazU7 JXr/WO4N8I//U4UW1QnnGz8lPKKYByGpV5Qlw5SZqH3HsWAUD8XtkntPjUOzTDvC Ffs/RV7Wr+GsxvIsEUONtkXWDf4psME3B/pTR1F7s42GCcWk6SM3xVzVnF1+Qcq1 XdQ97508OiIiRPaSuhzmmRiQ3rwEywlSCp2HZvpnGRDda7mch5zvyId+k+hD3OYN U7JRxn7uDCBuDESu9J4wQF60vfpp3M4BUEHejMtOTX2nJ1LAu8/75S/cVGT6rgJw +AXz8DUY03e6qQO3+B0rVQf3CQ9Ji0c= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:58 2026 by rpki-client