$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a902a154-0180-3953-bd01-ecf5c4182bad.roa File: a902a154-0180-3953-bd01-ecf5c4182bad.roa (raw, json) Hash identifier: e3w2+qW+o/mxEx73POMA9ZIAcYjA+qvEOAdnIlkiZqM= Subject key identifier: 6C:8E:F5:E0:F7:0C:6D:A4:57:B4:51:CA:4A:CF:9B:5B:1D:0F:DF:8B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9F7DBE168F1A18AE1B00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a902a154-0180-3953-bd01-ecf5c4182bad.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9f:7d:be:16:8f:1a:18:ae:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=8aacd10e-f3b8-4d96-9faa-f1bb8553ccc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:61:47:b9:81:e3:c2:e9:62:d0:ca:ff:c2: 0f:3e:6d:a1:0e:6b:d7:fa:41:19:51:1c:67:80:e7: 30:d6:96:88:33:f3:8e:bf:6f:26:fd:38:7d:20:7a: 39:3e:45:20:ad:4f:fc:1f:37:ab:47:9d:1b:a4:7f: 66:2d:cd:86:6d:d7:9e:78:39:e2:cf:18:11:2c:a0: d7:36:72:a1:33:38:26:87:74:73:9b:eb:b3:49:14: 81:de:ba:96:44:f2:a9:75:ae:41:40:85:6c:ea:7a: 1f:ff:ec:79:e0:7c:51:cd:c3:3c:91:8d:15:cc:78: 39:38:44:a4:0a:9e:ab:f8:e3:08:c0:48:93:b8:32: a5:0d:92:c2:50:30:a1:3c:a1:ea:dc:b4:8f:fa:40: a1:81:e3:32:61:12:02:da:0e:9d:2d:a0:0d:cc:d4: b0:d0:cb:f3:2a:16:f8:e2:a3:99:13:89:57:07:b5: 08:94:0f:3f:d6:59:e3:66:35:e0:af:63:f7:96:bb: 8c:13:04:f7:5c:28:c0:ba:be:e7:30:4b:23:fd:f2: ed:da:35:ff:c1:7b:e5:49:7a:73:43:05:a8:c6:54: 15:35:31:f7:b2:e0:4a:05:e5:99:ff:f0:e5:9d:bb: 22:4a:86:60:f0:b5:4f:39:6a:74:00:8d:8c:71:91: 18:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8E:F5:E0:F7:0C:6D:A4:57:B4:51:CA:4A:CF:9B:5B:1D:0F:DF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a902a154-0180-3953-bd01-ecf5c4182bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:18:54:3b:ca:33:12:d5:c3:f4:15:ec:78:b9:75:98:11:8c: d1:52:87:17:c8:78:be:1f:c3:13:11:22:3a:46:00:1f:26:83: 69:56:c7:8d:3c:89:3e:c7:33:e4:87:d9:41:b2:3c:d7:bd:5e: 1a:5b:ab:b6:55:5c:18:ac:10:ae:43:60:4b:cc:9d:81:46:33: 6a:7d:7c:06:98:42:c5:9f:53:07:9e:87:a0:58:2a:02:70:c5: 74:7c:65:dc:8e:10:8a:d4:a0:19:b6:9b:63:5e:2b:7e:b5:0a: 0b:10:0c:cf:91:e1:48:b1:c7:7f:18:8a:6c:f0:89:12:62:c4: 53:3d:e8:3d:07:01:fa:3a:a2:ea:b1:88:57:9e:a5:45:c9:ad: ed:5d:ff:6b:19:4d:f6:1f:a7:24:1f:4b:fb:52:8d:f6:d9:86: 10:2d:9c:62:c4:9a:d1:fc:9e:17:b8:1b:4b:44:b5:d9:f1:54: cb:5a:50:f0:89:83:32:e7:a6:4a:78:9f:f9:1b:3f:93:5e:84: 92:2c:c2:09:f6:d9:fb:47:60:2e:d4:cb:9f:b3:b6:82:ac:96: af:e8:a6:6f:4a:98:e3:d4:94:fc:c9:be:54:99:de:01:ec:65: f2:8f:3f:b3:e1:92:ef:04:ac:9b:38:e8:e4:02:98:c9:4a:9b: 79:15:e6:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ99vhaPGhiuGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OGFhY2QxMGUtZjNiOC00ZDk2LTlmYWEtZjFiYjg1NTNjY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/thR7mB48LpYtDK/8IPPm2hDmvX+kEZURxn gOcw1paIM/OOv28m/Th9IHo5PkUgrU/8HzerR50bpH9mLc2GbdeeeDnizxgRLKDX NnKhMzgmh3Rzm+uzSRSB3rqWRPKpda5BQIVs6nof/+x54HxRzcM8kY0VzHg5OESk Cp6r+OMIwEiTuDKlDZLCUDChPKHq3LSP+kChgeMyYRIC2g6dLaANzNSw0MvzKhb4 4qOZE4lXB7UIlA8/1lnjZjXgr2P3lruMEwT3XCjAur7nMEsj/fLt2jX/wXvlSXpz QwWoxlQVNTH3suBKBeWZ//DlnbsiSoZg8LVPOWp0AI2McZEY0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyO9eD3DG2kV7RRykrPm1sdD9+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTkwMmExNTQtMDE4MC0z OTUzLWJkMDEtZWNmNWM0MTgyYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgYVDvKMxLVw/QV7Hi5dZgRjNFShxfIeL4fwxMRIjpGAB8mg2lWx408 iT7HM+SH2UGyPNe9Xhpbq7ZVXBisEK5DYEvMnYFGM2p9fAaYQsWfUweeh6BYKgJw xXR8ZdyOEIrUoBm2m2NeK361CgsQDM+R4Uixx38YimzwiRJixFM96D0HAfo6ouqx iFeepUXJre1d/2sZTfYfpyQfS/tSjfbZhhAtnGLEmtH8nhe4G0tEtdnxVMtaUPCJ gzLnpkp4n/kbP5NehJIswgn22ftHYC7Uy5+ztoKslq/opm9KmOPUlPzJvlSZ3gHs ZfKPP7Phku8ErJs46OQCmMlKm3kV5lQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:16 2026 by rpki-client