$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad05f04a-f61b-3d95-8461-cce72db8edf5.roa File: ad05f04a-f61b-3d95-8461-cce72db8edf5.roa (raw, json) Hash identifier: K+WrTMiaHIfGD2rkZ5uyYIr+FZhy3RJ+pLR1KrU0Tck= Subject key identifier: 88:AA:17:40:62:58:7E:AB:57:E8:9B:20:37:55:48:88:E3:49:C3:77 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7CD199A360303C00DE280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad05f04a-f61b-3d95-8461-cce72db8edf5.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cd:19:9a:36:03:03:c0:0d:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=1df8a0af-b214-4133-ab48-1ccd14830b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:bb:6e:2b:85:f6:d3:a5:b1:12:02:73:62: 8e:41:d5:f5:0c:3f:18:40:3c:97:13:2e:c4:63:d3: f3:7e:51:5e:fc:72:83:9e:e0:0b:78:b8:3c:86:b3: 78:ef:81:aa:a2:ed:81:2a:7f:17:ca:e4:3f:aa:1c: 4f:86:cd:2e:08:eb:2e:04:9b:c3:71:ce:cc:dd:99: a8:a7:0e:45:6a:38:86:d8:f3:5f:d1:b9:ae:fb:46: f3:b5:ad:d3:da:54:61:85:d4:1f:5c:3e:47:1c:7d: 55:57:69:08:ef:d3:61:87:03:7a:ff:05:cb:8d:9a: cb:11:9b:37:99:a0:6e:91:02:ce:58:8a:e9:3b:5e: 8c:a2:63:59:f4:ba:d6:50:fd:0a:6e:4d:d7:f0:cf: d1:a7:7f:45:0f:bd:bb:ad:3f:79:65:c4:6a:c4:da: 4e:5d:0c:28:c5:e3:65:17:7e:9c:c5:53:0b:70:ef: 9f:d1:4e:46:7b:d0:fc:0f:7c:06:a1:4f:82:b4:46: 98:c0:38:3d:70:b1:49:11:5d:d2:ea:99:5f:d2:d7: 0a:44:ee:fa:da:45:e6:c4:69:62:23:9c:0f:e8:d0: 16:2c:5e:94:12:ba:69:1c:3c:e7:50:67:fa:d9:10: 9f:34:9a:3f:bb:05:dd:e4:81:19:79:e1:38:18:92: d0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AA:17:40:62:58:7E:AB:57:E8:9B:20:37:55:48:88:E3:49:C3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad05f04a-f61b-3d95-8461-cce72db8edf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3f:fd:fd:ba:62:2f:a7:c1:72:5c:d4:15:72:d7:01:17:c5: 18:45:d7:55:c9:6e:6e:5c:6b:5f:4c:49:41:76:3e:1f:a5:1b: 75:d2:23:99:c0:ab:51:3d:25:3e:73:9b:f4:88:c8:74:c0:f6: 26:a8:6c:1b:bf:87:11:9a:9a:40:f7:92:b9:fb:25:2b:9f:39: c6:a1:19:f8:a4:e2:23:86:e8:ae:fa:32:a6:b4:55:a1:1c:d4: cc:ae:77:8a:fd:a8:e5:32:d3:5d:5c:76:69:05:85:df:3b:9b: 74:86:97:16:3d:c7:41:bd:19:09:46:26:67:2c:9a:75:04:8e: 0a:cc:b9:0d:26:6e:5c:26:a0:4e:af:95:39:85:0b:9a:b9:ae: 03:35:33:47:be:bf:61:93:83:b3:e2:cb:ed:95:23:b0:da:66: a1:cd:db:23:df:bd:f3:06:96:c6:d7:d1:e0:4b:24:96:ef:5a: 54:6b:bd:46:f7:f5:ff:f5:d7:37:37:62:74:03:9c:a4:14:71: 05:5d:e9:6f:67:ba:75:4c:54:6f:db:b4:3c:a7:be:d9:ba:b4: f2:94:68:3f:e2:ae:3f:2a:57:ea:94:c0:a6:b7:0a:5d:43:16: 8c:b6:60:2d:84:3a:03:d5:dd:ac:70:27:9a:61:51:84:b5:37: 08:9c:68:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op80ZmjYDA8AN4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MWRmOGEwYWYtYjIxNC00MTMzLWFiNDgtMWNjZDE0ODMwYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoK7biuF9tOlsRICc2KOQdX1DD8YQDyXEy7E Y9PzflFe/HKDnuALeLg8hrN474Gqou2BKn8XyuQ/qhxPhs0uCOsuBJvDcc7M3Zmo pw5FajiG2PNf0bmu+0bzta3T2lRhhdQfXD5HHH1VV2kI79NhhwN6/wXLjZrLEZs3 maBukQLOWIrpO16MomNZ9LrWUP0Kbk3X8M/Rp39FD727rT95ZcRqxNpOXQwoxeNl F36cxVMLcO+f0U5Ge9D8D3wGoU+CtEaYwDg9cLFJEV3S6plf0tcKRO762kXmxGli I5wP6NAWLF6UErppHDznUGf62RCfNJo/uwXd5IEZeeE4GJLQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiqF0BiWH6rV+ibIDdVSIjjScN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWQwNWYwNGEtZjYxYi0z ZDk1LTg0NjEtY2NlNzJkYjhlZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8//f26Yi+nwXJc1BVy1wEXxRhF11XJbm5ca19MSUF2Ph+lG3XSI5nA q1E9JT5zm/SIyHTA9iaobBu/hxGamkD3krn7JSufOcahGfik4iOG6K76Mqa0VaEc 1Myud4r9qOUy011cdmkFhd87m3SGlxY9x0G9GQlGJmcsmnUEjgrMuQ0mblwmoE6v lTmFC5q5rgM1M0e+v2GTg7Piy+2VI7DaZqHN2yPfvfMGlsbX0eBLJJbvWlRrvUb3 9f/11zc3YnQDnKQUcQVd6W9nunVMVG/btDynvtm6tPKUaD/irj8qV+qUwKa3Cl1D Foy2YC2EOgPV3axwJ5phUYS1NwicaK8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:44 2026 by rpki-client