$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1631207-a7f0-3d94-8de0-45387b66aae0.roa File: b1631207-a7f0-3d94-8de0-45387b66aae0.roa (raw, json) Hash identifier: mg7nN/+ZM3jwpbXR09R842KtStx6ZoNInZskWt43of0= Subject key identifier: CA:46:57:19:50:CC:10:83:12:74:4A:C2:A4:F8:27:E2:03:E9:87:30 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117292CF1A127EC8A58B9EDB Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1631207-a7f0-3d94-8de0-45387b66aae0.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:92:cf:1a:12:7e:c8:a5:8b:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=2bbc7fc5-0e99-4008-b8c4-4da78924dc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:fe:8d:e3:50:26:f8:0d:ae:dc:57:98:05: cd:50:90:22:39:12:12:ca:5a:68:1d:e1:2c:f5:82: a7:4a:c1:0a:6a:d4:a5:85:0f:83:e3:87:9e:20:95: a8:71:e5:13:36:f0:0c:91:f1:b7:73:eb:fe:f9:48: f1:94:ac:7e:f0:3e:3f:e9:8e:52:aa:07:1d:ff:37: fd:01:f6:71:bd:69:fc:9c:b6:2e:dc:3a:9f:e8:eb: 08:f7:d1:bb:30:a6:c5:a9:9e:c6:c9:b2:b6:4c:9f: fc:dc:c5:6d:ea:d0:e0:9d:2f:f6:cf:d8:56:0b:df: f8:c6:f2:c4:21:44:f7:91:5d:26:80:d8:c8:27:5a: c5:5e:33:c7:c4:14:fe:5d:d3:75:2d:df:ae:75:9f: 2a:5f:56:b6:d6:d1:18:fa:2f:7c:74:ce:93:be:73: da:11:3a:83:3a:51:b1:64:5f:04:78:23:2c:22:51: 28:b1:8a:64:a7:ba:00:14:c5:71:26:f9:52:97:a6: 8c:47:25:71:4b:d5:7b:9f:9d:c8:c0:fc:57:a0:d8: 30:7e:0b:98:ec:94:52:da:d5:0f:b2:40:c5:1c:d1: d9:8f:d5:d2:2a:0b:dc:26:44:58:09:a7:b2:d0:c0: f0:a4:85:af:0c:a3:dc:04:b7:f9:ac:32:d9:5f:f7: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:57:19:50:CC:10:83:12:74:4A:C2:A4:F8:27:E2:03:E9:87:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1631207-a7f0-3d94-8de0-45387b66aae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:26:20:8f:2d:25:68:72:97:d0:ec:db:96:9c:2a:cc:7c:8b: c7:9f:41:97:c4:57:cf:06:5d:58:8e:4f:04:17:04:39:f8:50: 0b:9e:14:df:b0:9e:00:43:c3:07:9a:fa:0d:ca:d7:a5:c4:0e: 20:76:42:e9:e7:ee:49:fd:f9:0e:59:76:2e:1e:ed:b5:fb:09: 29:3f:c8:74:22:39:f8:c3:91:b4:73:1e:c2:53:83:6e:54:b3: 1c:ef:99:b9:61:56:6b:88:85:4c:71:8f:ac:58:94:f9:79:cf: cb:2b:e5:af:6b:f0:26:c2:b9:a1:dd:03:df:bd:12:1e:7f:7d: a6:70:59:fe:ff:0f:b2:d4:1a:67:50:27:1a:e8:f3:10:54:fd: 6f:eb:80:f7:22:66:32:83:ee:59:a7:d0:43:e1:fe:f6:e9:95: 66:7f:b7:d6:d2:70:8b:4d:6e:90:1e:77:47:12:38:f5:52:7d: 8d:9e:6d:47:4a:51:f4:9d:5d:47:5d:48:0a:14:7a:29:cf:4c: 56:2a:a8:68:e1:eb:75:26:44:43:90:18:5f:2c:12:54:b9:5e: 73:15:ec:52:86:ed:30:0c:4e:ce:25:0b:2d:17:61:37:67:4b: eb:6c:85:16:aa:34:71:56:32:d5:0c:24:b4:ce:35:ac:a8:09: d3:d3:78:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpLPGhJ+yKWLntswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MmJiYzdmYzUtMGU5OS00MDA4LWI4YzQtNGRhNzg5MjRkYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv3+jeNQJvgNrtxXmAXNUJAiORISylpoHeEs 9YKnSsEKatSlhQ+D44eeIJWoceUTNvAMkfG3c+v++UjxlKx+8D4/6Y5Sqgcd/zf9 AfZxvWn8nLYu3Dqf6OsI99G7MKbFqZ7GybK2TJ/83MVt6tDgnS/2z9hWC9/4xvLE IUT3kV0mgNjIJ1rFXjPHxBT+XdN1Ld+udZ8qX1a21tEY+i98dM6TvnPaETqDOlGx ZF8EeCMsIlEosYpkp7oAFMVxJvlSl6aMRyVxS9V7n53IwPxXoNgwfguY7JRS2tUP skDFHNHZj9XSKgvcJkRYCaey0MDwpIWvDKPcBLf5rDLZX/fVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpGVxlQzBCDEnRKwqT4J+ID6YcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjE2MzEyMDctYTdmMC0z ZDk0LThkZTAtNDUzODdiNjZhYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwmII8tJWhyl9Ds25acKsx8i8efQZfEV88GXViOTwQXBDn4UAueFN+w ngBDwwea+g3K16XEDiB2Qunn7kn9+Q5Zdi4e7bX7CSk/yHQiOfjDkbRzHsJTg25U sxzvmblhVmuIhUxxj6xYlPl5z8sr5a9r8CbCuaHdA9+9Eh5/faZwWf7/D7LUGmdQ Jxro8xBU/W/rgPciZjKD7lmn0EPh/vbplWZ/t9bScItNbpAed0cSOPVSfY2ebUdK UfSdXUddSAoUeinPTFYqqGjh63UmREOQGF8sElS5XnMV7FKG7TAMTs4lCy0XYTdn S+tshRaqNHFWMtUMJLTONayoCdPTeMU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:19 2026 by rpki-client