$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa File: afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa (raw, json) Hash identifier: XNi34LhbbzS3PVZ1oe5MfUndTGYlxDp9y1VvobZZTRA= Subject key identifier: 7A:A6:C2:BC:CD:80:13:CB:E3:4D:0D:A4:3A:4F:B3:D1:5B:8C:90:36 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A7BE190953A82F8A23A80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7b:e1:90:95:3a:82:f8:a2:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a3f8abec-a1b8-4953-a234-ee06bbcd3097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:46:28:ff:67:4a:b9:f4:55:bb:af:b3:94: 3b:b3:8e:44:cf:53:c8:93:c9:d3:56:ec:b7:a0:77: d8:c5:25:b3:a1:c0:62:e3:c5:06:52:f9:b5:83:96: 42:d0:9a:c2:15:d9:68:cb:36:b6:0c:82:10:01:5d: c3:2e:5e:17:08:22:f6:85:c8:39:10:95:56:03:70: c3:9d:a1:46:d7:f5:07:2b:ee:4a:1b:25:52:74:13: 06:93:12:33:91:55:fe:c1:c2:8b:89:82:9f:38:7d: 11:75:b1:a5:e0:c3:d6:10:d1:f3:7b:d0:ad:b3:0c: e7:03:0d:de:f7:e1:53:d2:1c:72:b8:d0:3a:f1:65: c7:76:3f:24:ec:39:c3:51:fd:cd:45:e0:ee:60:14: bd:67:6d:58:87:5b:90:af:63:e9:4a:a9:0a:81:9d: 80:f5:72:a2:0f:28:e2:b5:57:d5:67:06:12:61:60: 43:10:ce:b7:84:1c:32:17:3a:77:09:e3:b1:a1:4f: d0:3a:23:c5:af:5b:0d:b7:4a:29:12:a9:79:b1:48: 1c:ea:7e:39:92:c7:2f:1c:84:ef:97:ea:4c:15:ce: c5:39:f6:78:48:cf:f7:2d:23:06:f3:9b:c6:99:af: 31:bd:d6:bb:66:74:5a:55:3e:7d:28:24:fd:1d:be: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A6:C2:BC:CD:80:13:CB:E3:4D:0D:A4:3A:4F:B3:D1:5B:8C:90:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f9:3e:01:20:8c:fe:77:03:45:6b:a3:29:1b:59:c7:4c:1f: c0:b0:81:52:c9:f8:b2:cc:ff:0c:e3:2e:8d:06:26:fc:6d:c6: 35:b9:7b:8f:c1:85:6f:82:6f:93:ec:c3:ac:c1:c4:b0:64:c5: 61:be:87:ef:61:a4:f5:3a:ec:e1:13:5e:9c:ee:46:fb:71:6f: a3:90:be:34:08:e7:06:f3:c2:41:dc:d4:7e:cb:60:bf:53:e3: bd:65:24:d3:50:81:2d:3f:62:8f:1d:37:90:19:bf:ff:2f:f3: df:c1:42:0f:a0:75:7c:94:3c:ff:b8:2b:9a:af:29:ef:86:7d: d2:58:17:52:19:89:ca:5e:bc:2e:ac:c3:f1:da:0a:dc:1d:5e: 71:f0:f8:ee:5f:e0:90:1a:cf:a3:f1:6f:61:1f:ba:a7:d8:2b: 40:c8:02:c4:aa:2d:44:95:8b:7a:b1:1d:dc:a3:07:59:4a:be: ce:41:b1:e6:7d:6e:16:62:e5:ff:b0:a1:e8:3b:ed:61:b0:14: ad:a5:0c:dd:6a:1b:4a:a2:25:85:a2:bf:df:82:7a:c1:18:99: 30:02:ae:21:54:c1:6c:90:82:11:37:b3:81:f4:2a:90:d1:9d: 7f:69:87:80:92:aa:34:e8:49:a9:be:af:2d:bd:ed:b9:c1:2b: 75:3e:17:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnvhkJU6gviiOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTNmOGFiZWMtYTFiOC00OTUzLWEyMzQtZWUwNmJiY2QzMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmptGKP9nSrn0Vbuvs5Q7s45Ez1PIk8nTVuy3 oHfYxSWzocBi48UGUvm1g5ZC0JrCFdloyza2DIIQAV3DLl4XCCL2hcg5EJVWA3DD naFG1/UHK+5KGyVSdBMGkxIzkVX+wcKLiYKfOH0RdbGl4MPWENHze9CtswznAw3e 9+FT0hxyuNA68WXHdj8k7DnDUf3NReDuYBS9Z21Yh1uQr2PpSqkKgZ2A9XKiDyji tVfVZwYSYWBDEM63hBwyFzp3CeOxoU/QOiPFr1sNt0opEql5sUgc6n45kscvHITv l+pMFc7FOfZ4SM/3LSMG85vGma8xvda7ZnRaVT59KCT9Hb46/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqmwrzNgBPL400NpDpPs9FbjJA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWZjNTg5ZTMtYzFjOS0z ZmU3LWJjNWMtYWEwMmFiMDdkNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE75PgEgjP53A0VroykbWcdMH8CwgVLJ+LLM/wzjLo0GJvxtxjW5e4/B hW+Cb5Psw6zBxLBkxWG+h+9hpPU67OETXpzuRvtxb6OQvjQI5wbzwkHc1H7LYL9T 471lJNNQgS0/Yo8dN5AZv/8v89/BQg+gdXyUPP+4K5qvKe+GfdJYF1IZicpevC6s w/HaCtwdXnHw+O5f4JAaz6Pxb2EfuqfYK0DIAsSqLUSVi3qxHdyjB1lKvs5BseZ9 bhZi5f+woeg77WGwFK2lDN1qG0qiJYWiv9+CesEYmTACriFUwWyQghE3s4H0KpDR nX9ph4CSqjToSam+ry297bnBK3U+F3o= -----END CERTIFICATE-----Generated at Thu Mar 26 18:18:21 2026 by rpki-client