$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa File: a8835133-fb2f-31b1-84bb-28bccfab0933.roa (raw, json) Hash identifier: QxX+XFd46e1ZGkWL4tQFx6Xtuc5T+DB34CCrkvE8lgU= Subject key identifier: 30:A1:DB:25:45:A2:7E:B9:00:93:FE:D5:1E:28:44:C4:6E:E1:86:20 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9D20342FED85B14F1300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9d:20:34:2f:ed:85:b1:4f:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=2f0c1a68-eb4a-40ae-b95e-c2778944c544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ae:5f:7d:fa:6e:6c:a9:db:5c:bd:f1:06:0e: 83:f5:3c:a9:55:67:6b:6d:33:6e:f2:f6:59:6b:90: 7f:e2:4e:bb:6a:5a:d2:3e:07:7f:1b:7d:5d:2c:d6: 33:1c:63:ac:97:ce:74:da:8c:c7:d0:a1:33:62:db: 79:92:8d:34:0a:a9:d4:9e:66:31:aa:c5:76:f5:99: 39:34:cf:49:31:87:f3:08:19:ac:9f:ee:1f:5c:e0: 42:e3:e9:25:28:b2:e3:31:cf:90:39:f5:74:3c:5a: ee:3c:87:9a:7e:92:be:4b:f9:a1:fd:e5:d0:ea:bd: 9e:83:5e:46:d6:64:14:1a:03:90:8a:d0:64:35:ed: b6:66:50:5a:11:d2:43:90:4b:44:4b:1b:a8:1a:98: 73:13:39:a3:2e:98:b6:96:4d:ca:0c:83:0e:62:11: 2d:34:ad:e5:6c:f9:63:d6:40:6c:90:02:b6:f4:5c: 14:50:34:17:09:ab:f7:dc:4e:98:95:c3:8b:f2:d1: 1c:ca:2f:8a:0e:74:64:32:55:af:ce:30:8d:26:fe: 51:3e:ac:31:2e:56:de:42:e7:79:f5:42:88:2a:5e: 6e:ad:ed:a1:22:87:9b:45:81:f8:1f:ce:1f:54:af: fc:fb:d0:6c:ac:5d:39:8c:03:31:84:50:00:46:76: 29:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:DB:25:45:A2:7E:B9:00:93:FE:D5:1E:28:44:C4:6E:E1:86:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8835133-fb2f-31b1-84bb-28bccfab0933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:80:74:8d:b2:87:38:20:1f:24:0b:51:b2:94:0a:2d:5d:e4: fb:92:44:8f:43:b0:80:1f:31:86:8d:fc:53:96:46:44:18:1c: 77:fd:84:ed:8c:08:ed:ec:8b:a0:a4:24:48:33:ca:93:99:d5: aa:c7:94:97:d6:bd:7b:f9:39:ba:53:5d:fe:c9:b0:c3:98:8c: dc:89:b4:0f:61:2f:9a:47:12:e9:d8:ef:3e:2d:83:4a:da:f9: 02:df:02:1b:c8:95:f8:c5:40:d9:61:2a:e4:dc:40:c3:0c:0e: 5a:42:4e:7a:bb:e3:d1:5e:ea:26:fa:05:53:bc:ac:ec:57:ed: a4:d7:a8:bb:65:65:b5:32:0b:36:58:fb:2e:1d:c4:6f:a5:16: 5a:75:ee:c4:ea:ab:1d:77:30:80:64:44:e6:bf:d8:2e:80:56: 10:0e:36:0f:8f:23:5c:e3:8d:c7:84:28:09:e0:37:8d:e7:85: 7a:63:a9:b4:d5:8d:3b:76:af:6d:60:80:9c:64:75:73:fc:fa: a5:ac:92:f4:a8:dd:8d:ed:d9:de:b2:6d:2f:b8:b1:90:72:26: 24:fa:02:07:b3:e8:71:2e:60:01:3c:2e:2c:97:87:b5:ad:a3: f3:ea:1a:8c:77:3f:fa:0a:98:c9:14:7b:11:79:49:8d:54:d8: fd:0c:84:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ0gNC/thbFPEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MmYwYzFhNjgtZWI0YS00MGFlLWI5NWUtYzI3Nzg5NDRjNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr65fffpubKnbXL3xBg6D9TypVWdrbTNu8vZZ a5B/4k67alrSPgd/G31dLNYzHGOsl8502ozH0KEzYtt5ko00CqnUnmYxqsV29Zk5 NM9JMYfzCBmsn+4fXOBC4+klKLLjMc+QOfV0PFruPIeafpK+S/mh/eXQ6r2eg15G 1mQUGgOQitBkNe22ZlBaEdJDkEtESxuoGphzEzmjLpi2lk3KDIMOYhEtNK3lbPlj 1kBskAK29FwUUDQXCav33E6YlcOL8tEcyi+KDnRkMlWvzjCNJv5RPqwxLlbeQud5 9UKIKl5ure2hIoebRYH4H84fVK/8+9BsrF05jAMxhFAARnYp3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCh2yVFon65AJP+1R4oRMRu4YYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTg4MzUxMzMtZmIyZi0z MWIxLTg0YmItMjhiY2NmYWIwOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6AdI2yhzggHyQLUbKUCi1d5PuSRI9DsIAfMYaN/FOWRkQYHHf9hO2M CO3si6CkJEgzypOZ1arHlJfWvXv5ObpTXf7JsMOYjNyJtA9hL5pHEunY7z4tg0ra +QLfAhvIlfjFQNlhKuTcQMMMDlpCTnq749Fe6ib6BVO8rOxX7aTXqLtlZbUyCzZY +y4dxG+lFlp17sTqqx13MIBkROa/2C6AVhAONg+PI1zjjceEKAngN43nhXpjqbTV jTt2r21ggJxkdXP8+qWskvSo3Y3t2d6ybS+4sZByJiT6Agez6HEuYAE8LiyXh7Wt o/PqGox3P/oKmMkUexF5SY1U2P0MhLA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:40:51 2026 by rpki-client