$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac85d751-61de-387c-adbc-d4371d66866f.roa File: ac85d751-61de-387c-adbc-d4371d66866f.roa (raw, json) Hash identifier: gpSy/n5RonH3Z4yemHb6aS2Hkyn+nk+vzLtY6yDOsYQ= Subject key identifier: 16:CB:02:82:24:8F:88:25:3B:BF:7B:BD:2D:13:24:CC:66:98:05:38 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11728FBD9C4128EFB9F18320 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac85d751-61de-387c-adbc-d4371d66866f.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 104.133.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:8f:bd:9c:41:28:ef:b9:f1:83:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=2d05a04b-df9f-4b49-9af0-452533970609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:1a:f1:b4:3d:28:a8:52:e3:e7:06:96:73: 31:b8:d7:4b:d3:64:cc:fd:2d:b3:f9:2a:c1:81:59: 99:d1:df:fb:37:98:7d:7a:c4:7f:a4:85:cb:15:11: c0:bb:df:e5:84:f3:ad:ad:b7:59:3f:96:73:e3:c1: 18:b5:f1:21:1d:7d:12:82:7f:39:ff:4c:0f:08:6e: 7d:a7:31:0b:d7:7a:e1:8b:92:3d:c8:de:a0:ce:36: 2e:b1:79:38:47:f1:4a:45:01:57:cc:06:28:ea:8a: c1:47:d7:ba:68:4b:f3:24:4e:b5:35:2c:15:00:9e: fc:e4:9b:60:b2:10:38:be:75:3e:49:67:2b:8c:98: c1:7d:25:ce:c4:f5:ad:e1:a3:f0:5e:42:28:39:83: b4:76:e7:4b:c2:12:54:16:3b:8c:6a:25:ee:02:ff: 6d:83:7d:4a:f8:be:32:3d:bc:da:56:4f:1c:39:65: a9:33:5c:a2:7c:54:ac:ec:63:c1:7d:fd:05:5f:3c: b3:7e:cd:30:bd:4a:e5:18:c7:bb:c4:11:dd:28:b8: 66:b6:57:01:99:a8:5e:c3:ff:38:3b:45:75:79:36: 95:20:91:7c:c4:0a:7d:a6:ef:34:3c:4a:c3:ad:0f: 7f:38:69:a0:55:0f:60:fe:7e:4c:fd:7c:e8:94:62: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CB:02:82:24:8F:88:25:3B:BF:7B:BD:2D:13:24:CC:66:98:05:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ac85d751-61de-387c-adbc-d4371d66866f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:47:95:bb:67:e0:f7:e6:5f:1f:ae:f2:45:15:80:5c:d9:aa: 2d:98:1a:79:3c:c7:57:77:26:88:93:c4:d8:1f:ea:6a:38:c1: 21:46:10:d4:65:97:0c:7c:4d:b5:89:f6:71:3c:42:b9:43:9d: 53:20:2e:b5:0c:66:f6:66:72:f9:56:05:a4:fa:c7:7b:71:fb: 6b:c6:8c:bd:8a:1b:d6:ef:64:d7:e5:f6:c1:48:06:db:fc:df: a4:1b:36:b4:4b:48:52:28:2f:03:22:33:a9:b9:1b:8b:c6:a5: 34:47:e6:af:f6:9b:f4:80:28:2b:42:a3:d3:0f:6c:94:83:17: c7:b4:af:3a:ee:da:a2:c9:86:5a:cc:0e:cd:1c:a3:e8:02:13: a2:81:be:24:e2:30:b9:dc:2f:b8:56:c6:38:56:b5:96:e4:14: 22:c8:7d:f7:d1:c5:7c:d3:3c:56:48:46:e8:82:cf:06:f7:3f: e7:51:a6:3d:78:31:f7:4b:67:78:a9:c6:7e:53:22:af:8e:fc: ca:97:ef:fe:5e:65:d2:ae:cd:54:19:2b:d4:44:65:12:ef:27: ea:19:f8:64:4c:1c:43:4d:30:43:16:43:85:d5:44:4b:85:6c: 5d:de:77:5e:cb:0b:7d:a0:a2:7e:a5:7b:a5:74:b3:15:df:4f: 1f:46:a1:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rco+9nEEo77nxgyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MmQwNWEwNGItZGY5Zi00YjQ5LTlhZjAtNDUyNTMzOTcwNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb8a8bQ9KKhS4+cGlnMxuNdL02TM/S2z+SrB gVmZ0d/7N5h9esR/pIXLFRHAu9/lhPOtrbdZP5Zz48EYtfEhHX0Sgn85/0wPCG59 pzEL13rhi5I9yN6gzjYusXk4R/FKRQFXzAYo6orBR9e6aEvzJE61NSwVAJ785Jtg shA4vnU+SWcrjJjBfSXOxPWt4aPwXkIoOYO0dudLwhJUFjuMaiXuAv9tg31K+L4y PbzaVk8cOWWpM1yifFSs7GPBff0FXzyzfs0wvUrlGMe7xBHdKLhmtlcBmahew/84 O0V1eTaVIJF8xAp9pu80PErDrQ9/OGmgVQ9g/n5M/XzolGLfPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbLAoIkj4glO797vS0TJMxmmAU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWM4NWQ3NTEtNjFkZS0z ODdjLWFkYmMtZDQzNzFkNjY4NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9Hlbtn4PfmXx+u8kUVgFzZqi2YGnk8x1d3JoiTxNgf6mo4wSFGENRl lwx8TbWJ9nE8QrlDnVMgLrUMZvZmcvlWBaT6x3tx+2vGjL2KG9bvZNfl9sFIBtv8 36QbNrRLSFIoLwMiM6m5G4vGpTRH5q/2m/SAKCtCo9MPbJSDF8e0rzru2qLJhlrM Ds0co+gCE6KBviTiMLncL7hWxjhWtZbkFCLIfffRxXzTPFZIRuiCzwb3P+dRpj14 MfdLZ3ipxn5TIq+O/MqX7/5eZdKuzVQZK9REZRLvJ+oZ+GRMHENNMEMWQ4XVREuF bF3ed17LC32gon6le6V0sxXfTx9GoX8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:51:07 2026 by rpki-client