$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aeedd949-4f48-3ca1-917d-e95a9048da44.roa File: aeedd949-4f48-3ca1-917d-e95a9048da44.roa (raw, json) Hash identifier: XP8SvDp9fu1gmEr0dbQkq+d8tOE8+PwGS79iCebotsk= Subject key identifier: D4:A8:7B:ED:F8:DA:B8:55:59:37:3A:D3:46:11:2B:23:DB:D4:C1:77 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA3151B5716CE93386000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aeedd949-4f48-3ca1-917d-e95a9048da44.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a3:15:1b:57:16:ce:93:38:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=331c5033-9146-4c93-8f3f-d9100773f04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a2:80:72:d7:77:72:c7:df:fc:d1:91:ef:b4: df:92:3f:b2:b4:28:fa:37:5b:fc:4b:8d:e2:31:2b: b0:e7:81:8d:2e:0b:51:84:72:80:36:1f:5e:f1:3f: d6:a1:ee:6c:22:89:e4:50:b0:d5:bf:85:00:79:8a: 5a:31:be:a3:f5:dc:ab:13:98:08:6a:c8:f6:3c:33: 7b:60:4b:b8:ad:7b:02:46:d0:19:8a:b0:e9:bf:cd: 77:30:17:ce:db:09:57:25:0d:35:c3:76:f5:b4:5d: bb:e3:c2:7b:f5:c5:75:47:9f:36:bc:a7:39:3b:d3: 0b:c6:1c:46:e4:df:5f:8a:09:86:cc:01:9e:99:b2: b5:1f:90:12:35:29:ed:15:0d:9c:6d:e1:a9:ed:1f: 47:48:e6:cf:e4:85:23:a2:fb:51:08:df:0b:fa:69: 8d:3d:b5:bb:62:97:ce:03:d1:36:8b:a3:0b:17:01: 60:95:00:32:af:7c:a1:c1:82:a4:ca:c7:fd:40:1f: 6e:cb:22:4b:ea:f3:66:63:d6:f4:e9:0c:aa:4b:04: 70:62:37:d2:8b:19:c9:34:f5:db:17:83:fb:5a:cd: b9:f1:bd:c0:37:3b:61:dc:2e:00:31:d9:bc:c8:5e: a1:15:07:02:ff:eb:aa:31:e1:4a:02:6b:c2:b9:c1: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A8:7B:ED:F8:DA:B8:55:59:37:3A:D3:46:11:2B:23:DB:D4:C1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aeedd949-4f48-3ca1-917d-e95a9048da44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:86:38:ee:f2:f9:c7:60:4e:ee:dc:3b:91:4a:31:01:6e:af: 9c:c3:34:53:01:c0:25:7f:24:01:19:37:81:03:71:62:25:fd: 45:1e:4e:a3:5d:b2:b1:1c:b2:a8:a5:a7:98:73:51:1e:43:c9: 09:ba:39:62:8d:32:af:a9:1f:b4:3d:96:7e:13:34:61:a0:aa: 15:d5:a6:a7:7f:f4:4a:8f:59:de:32:05:80:91:e8:a4:79:63: b0:84:91:e5:dc:a6:8c:53:67:cc:50:45:9d:a0:0a:bb:ea:3e: 78:57:1e:b0:c6:e9:81:3e:c2:35:38:07:6a:98:d1:64:70:ef: 38:ce:0b:02:22:ea:8d:cf:2e:03:c7:f7:2e:e2:37:db:d9:d1: 0b:a0:01:3c:b0:34:c7:51:62:e3:64:96:ab:f3:63:b2:d7:a4: a8:9b:a0:60:c7:33:a8:1d:c6:d1:79:61:f5:4d:bf:34:e8:6a: 93:2c:60:36:ef:f8:77:bb:5b:4e:ce:02:05:bb:5f:c7:fb:ce: 86:35:e0:25:9c:5e:8c:30:12:98:95:cf:5b:43:76:77:19:78: 78:98:51:8d:bf:b8:9f:01:04:a8:1f:d6:a9:c6:da:3e:5d:ea: fb:3d:53:92:49:e2:d5:cf:ac:ba:58:9d:34:af:06:4f:02:50: ce:67:c1:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaMVG1cWzpM4YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MzMxYzUwMzMtOTE0Ni00YzkzLThmM2YtZDkxMDA3NzNmMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6KActd3csff/NGR77Tfkj+ytCj6N1v8S43i MSuw54GNLgtRhHKANh9e8T/Woe5sIonkULDVv4UAeYpaMb6j9dyrE5gIasj2PDN7 YEu4rXsCRtAZirDpv813MBfO2wlXJQ01w3b1tF2748J79cV1R582vKc5O9MLxhxG 5N9figmGzAGembK1H5ASNSntFQ2cbeGp7R9HSObP5IUjovtRCN8L+mmNPbW7YpfO A9E2i6MLFwFglQAyr3yhwYKkysf9QB9uyyJL6vNmY9b06QyqSwRwYjfSixnJNPXb F4P7Ws258b3ANzth3C4AMdm8yF6hFQcC/+uqMeFKAmvCucF02QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSoe+342rhVWTc600YRKyPb1MF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWVlZGQ5NDktNGY0OC0z Y2ExLTkxN2QtZTk1YTkwNDhkYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyGOO7y+cdgTu7cO5FKMQFur5zDNFMBwCV/JAEZN4EDcWIl/UUeTqNd srEcsqilp5hzUR5DyQm6OWKNMq+pH7Q9ln4TNGGgqhXVpqd/9EqPWd4yBYCR6KR5 Y7CEkeXcpoxTZ8xQRZ2gCrvqPnhXHrDG6YE+wjU4B2qY0WRw7zjOCwIi6o3PLgPH 9y7iN9vZ0QugATywNMdRYuNklqvzY7LXpKiboGDHM6gdxtF5YfVNvzToapMsYDbv +He7W07OAgW7X8f7zoY14CWcXowwEpiVz1tDdncZeHiYUY2/uJ8BBKgf1qnG2j5d 6vs9U5JJ4tXPrLpYnTSvBk8CUM5nwVI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:44 2026 by rpki-client