$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa File: a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa (raw, json) Hash identifier: ysbInp9Bd7SmW+DTEnzqAFsLWBM3zDK24aQVTZ0o+C4= Subject key identifier: 4A:7A:57:70:B4:C0:30:D3:3E:5B:70:7F:6B:30:E6:63:E9:35:3A:4C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA643554CD53673685460 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a6:43:55:4c:d5:36:73:68:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=03bae729-0026-4b15-9eb4-f5c97c65f91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:dd:bf:2c:fa:ce:ca:43:2f:f5:09:7f:6d: 08:b7:91:86:15:fb:7a:04:e3:88:4a:e3:92:43:09: 9c:5c:ca:33:36:ec:b1:c2:05:2f:73:cb:21:43:e4: 50:d9:59:71:18:e5:fd:90:a1:c4:6f:3a:ff:66:cc: 7a:83:35:c1:75:ea:2d:b1:f9:a1:4a:3c:02:41:5c: e3:14:88:e4:17:2e:18:ce:7c:da:c7:d5:13:07:65: 58:20:b2:99:cc:c8:f1:26:c5:66:fb:be:f4:66:e9: f4:af:85:fe:00:a1:5e:ad:57:f8:ae:9a:77:0b:04: 21:ef:8b:27:c2:43:71:c4:e5:9f:7d:71:5c:29:db: 94:10:aa:02:68:2e:09:b0:a4:01:42:ad:93:3d:41: e5:89:ec:c3:b4:11:38:25:19:e9:a1:ce:0e:15:9e: 2b:11:86:ef:d9:2f:e8:dc:c8:47:22:b4:f7:2d:be: 06:e0:77:aa:ae:a4:69:93:46:02:60:22:80:ca:69: 50:ba:04:d2:ef:f9:99:ed:86:c6:1e:f3:1e:67:e0: 41:1d:fc:52:c0:e9:c1:cc:62:33:c5:3a:08:d3:e5: e2:4a:1b:75:bc:6d:37:a6:a6:0c:92:d4:59:fd:10: e2:ed:e6:ef:d5:c3:69:8b:f8:aa:ed:6b:63:c3:1b: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:57:70:B4:C0:30:D3:3E:5B:70:7F:6B:30:E6:63:E9:35:3A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4a:3f:33:fc:56:fc:5d:d7:85:62:43:45:4e:2c:66:23:cd: 71:50:af:23:fc:50:93:dd:6b:4b:cd:e8:32:4c:85:0b:18:fa: bd:08:6d:89:d4:9a:dd:55:fe:a0:6b:18:79:85:20:39:81:e4: 70:fa:8d:4a:53:57:6c:56:0a:b3:9e:9e:8b:67:0d:f2:76:b1: b4:90:cc:b0:5a:56:50:dc:b9:02:7e:9e:ff:bc:03:52:aa:7d: d7:ba:1b:4a:68:26:af:8f:ee:04:b9:ee:ee:ef:4c:de:f7:be: 9c:b7:90:3f:34:23:cb:5b:20:ab:a5:96:04:26:02:cd:66:20: 30:4e:8c:11:ef:42:af:da:2c:1a:b2:26:7c:a7:85:46:05:c7: d4:c9:28:33:75:8d:6e:0f:0b:21:83:df:26:ec:7c:c0:22:38: 32:39:16:e9:9d:74:d1:7f:30:7b:45:19:fe:a4:bf:bd:74:e2: cc:e4:8c:f4:0e:fc:c7:c0:9a:24:d2:69:a5:17:58:28:cd:84: bd:b4:85:25:d2:63:9f:61:e7:77:d4:66:d4:6e:c3:a7:66:9f: 07:fa:92:cb:05:c5:46:96:9b:f9:9a:3d:75:1a:93:a3:c3:dd: c7:6d:0a:3d:94:47:e1:02:4b:cf:6e:ee:fb:2f:8c:ee:6b:cf: a0:7a:5b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaZDVUzVNnNoVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MDNiYWU3MjktMDAyNi00YjE1LTllYjQtZjVjOTdjNjVmOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKLdvyz6zspDL/UJf20It5GGFft6BOOISuOS QwmcXMozNuyxwgUvc8shQ+RQ2VlxGOX9kKHEbzr/Zsx6gzXBdeotsfmhSjwCQVzj FIjkFy4Yznzax9UTB2VYILKZzMjxJsVm+770Zun0r4X+AKFerVf4rpp3CwQh74sn wkNxxOWffXFcKduUEKoCaC4JsKQBQq2TPUHliezDtBE4JRnpoc4OFZ4rEYbv2S/o 3MhHIrT3Lb4G4HeqrqRpk0YCYCKAymlQugTS7/mZ7YbGHvMeZ+BBHfxSwOnBzGIz xToI0+XiSht1vG03pqYMktRZ/RDi7ebv1cNpi/iq7WtjwxsYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp6V3C0wDDTPltwf2sw5mPpNTpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTY3MDdkNGEtY2QyNS0z Y2IyLTllYTItNDU0MDQxODgxN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNKPzP8Vvxd14ViQ0VOLGYjzXFQryP8UJPda0vN6DJMhQsY+r0IbYnU mt1V/qBrGHmFIDmB5HD6jUpTV2xWCrOenotnDfJ2sbSQzLBaVlDcuQJ+nv+8A1Kq fde6G0poJq+P7gS57u7vTN73vpy3kD80I8tbIKullgQmAs1mIDBOjBHvQq/aLBqy JnynhUYFx9TJKDN1jW4PCyGD3ybsfMAiODI5FumddNF/MHtFGf6kv7104szkjPQO /MfAmiTSaaUXWCjNhL20hSXSY59h53fUZtRuw6dmnwf6kssFxUaWm/maPXUak6PD 3cdtCj2UR+ECS89u7vsvjO5rz6B6W+Y= -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:56 2026 by rpki-client