$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad0a4e71-25d3-3494-acf2-61277e170020.roa File: ad0a4e71-25d3-3494-acf2-61277e170020.roa (raw, json) Hash identifier: OL7ljaMlLqM+Cb1Q4qheBmtKw1rYi+3RfzIoHe5jeEk= Subject key identifier: B5:3A:C7:FE:67:50:03:D7:EB:D7:8B:56:56:B9:62:DB:F0:45:E2:25 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8A3143C88F0FE01B34C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad0a4e71-25d3-3494-acf2-61277e170020.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8a:31:43:c8:8f:0f:e0:1b:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a4c45567-f2b5-4cbd-b4d1-3118947baea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:af:0d:a8:93:1a:25:ae:51:cc:44:cb:0c: 26:61:1f:5d:91:ba:47:9c:98:ac:10:98:6e:68:94: 37:39:35:96:21:a5:f2:65:17:2c:a4:de:a4:d5:3f: 44:ac:1e:2d:09:e8:b6:d1:5a:60:91:2b:55:34:be: eb:b3:2f:db:d6:59:48:88:9f:b3:e0:09:cd:ec:e8: 7d:3a:46:09:84:33:6c:fd:f3:98:a0:99:2f:43:f8: f3:87:fc:42:46:52:12:40:40:6f:a0:13:4b:ec:c4: 90:d4:1a:22:9b:00:f6:c6:9d:cd:ab:b0:b1:3b:98: 48:16:30:d6:06:78:c1:82:2f:a5:e1:8e:92:a4:b8: 82:23:b1:57:7c:e5:62:64:a8:e2:cd:6a:d4:fd:28: 87:0e:48:45:5d:c1:81:cc:81:8f:64:79:29:21:c4: 74:88:fb:52:38:62:b8:6d:df:6d:4b:e2:c6:48:94: 98:f9:2c:d0:44:ed:5e:1b:75:c9:9f:e0:77:95:e8: c4:13:c4:34:95:2a:32:22:69:9c:22:9c:97:62:69: f0:4c:82:99:e6:5b:c2:11:63:12:4d:73:66:33:34: 4b:c4:4c:cf:fc:0b:26:91:c0:69:4a:ca:8d:17:8a: 97:06:0f:60:33:a4:2e:ef:c1:94:06:bf:0e:f0:0d: 6f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3A:C7:FE:67:50:03:D7:EB:D7:8B:56:56:B9:62:DB:F0:45:E2:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad0a4e71-25d3-3494-acf2-61277e170020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c8:ea:9d:ff:b2:82:87:02:cd:00:f0:f4:48:4e:b9:ba:0d: 6f:20:da:36:65:e8:df:a6:94:1e:83:56:65:9d:8e:8c:93:9f: 5f:38:75:6f:44:f5:f1:a7:65:80:3a:4b:11:cc:bd:24:72:96: 63:fe:e1:f0:8b:5e:f6:3f:9c:c9:f0:5e:61:fd:d4:e8:68:ff: a6:7f:fe:1a:13:94:51:35:c5:05:96:76:1c:20:42:2a:22:94: 4c:9e:66:e8:75:3b:a5:79:8b:c0:98:ad:32:42:f6:4a:b1:43: 88:52:e7:5d:82:66:08:c0:eb:04:48:bd:cc:59:02:a9:9e:08: d8:09:10:eb:16:c7:2c:61:05:77:da:42:06:24:0d:61:ba:2c: 92:95:a1:0a:3a:22:54:69:a7:04:41:a9:6f:0e:7e:31:e0:e9: 06:9b:ff:35:ff:6d:dc:74:e0:84:60:f3:d2:22:f6:b8:74:b1: ba:30:4e:4c:01:5b:5f:55:ae:13:ab:93:c0:12:87:3c:71:a2: 6b:f3:65:14:1f:fd:49:f5:65:5d:0d:0f:5d:14:e9:dd:9c:59: 1b:33:8a:89:49:0d:cc:63:ab:23:f2:a9:fc:4d:37:9d:e4:9c: c8:61:25:52:0c:be:99:54:65:29:cb:06:b8:40:9c:a0:b8:29: 45:66:ad:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYoxQ8iPD+AbNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTRjNDU1NjctZjJiNS00Y2JkLWI0ZDEtMzExODk0N2JhZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk++vDaiTGiWuUcxEywwmYR9dkbpHnJisEJhu aJQ3OTWWIaXyZRcspN6k1T9ErB4tCei20VpgkStVNL7rsy/b1llIiJ+z4AnN7Oh9 OkYJhDNs/fOYoJkvQ/jzh/xCRlISQEBvoBNL7MSQ1BoimwD2xp3Nq7CxO5hIFjDW BnjBgi+l4Y6SpLiCI7FXfOViZKjizWrU/SiHDkhFXcGBzIGPZHkpIcR0iPtSOGK4 bd9tS+LGSJSY+SzQRO1eG3XJn+B3lejEE8Q0lSoyImmcIpyXYmnwTIKZ5lvCEWMS TXNmMzRLxEzP/AsmkcBpSsqNF4qXBg9gM6Qu78GUBr8O8A1vxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU6x/5nUAPX69eLVla5YtvwReIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWQwYTRlNzEtMjVkMy0z NDk0LWFjZjItNjEyNzdlMTcwMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDI6p3/soKHAs0A8PRITrm6DW8g2jZl6N+mlB6DVmWdjoyTn184dW9E 9fGnZYA6SxHMvSRylmP+4fCLXvY/nMnwXmH91Oho/6Z//hoTlFE1xQWWdhwgQioi lEyeZuh1O6V5i8CYrTJC9kqxQ4hS512CZgjA6wRIvcxZAqmeCNgJEOsWxyxhBXfa QgYkDWG6LJKVoQo6IlRppwRBqW8OfjHg6Qab/zX/bdx04IRg89Ii9rh0sbowTkwB W19VrhOrk8AShzxxomvzZRQf/Un1ZV0ND10U6d2cWRsziolJDcxjqyPyqfxNN53k nMhhJVIMvplUZSnLBrhAnKC4KUVmrac= -----END CERTIFICATE-----Generated at Thu Mar 26 16:38:44 2026 by rpki-client