$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa File: b2f6facc-c4d1-3969-ac07-931ed27ee223.roa (raw, json) Hash identifier: C+/MnN6PSSarcD+ScSHkGL7eQleYGyfx/hKNVQmVVbc= Subject key identifier: 42:98:49:5F:43:66:85:8D:B9:29:3A:2C:1C:9B:C0:A7:33:FD:02:0E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8F5BFA3CB7E50C5C30E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 395973 IP address blocks: 104.134.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8f:5b:fa:3c:b7:e5:0c:5c:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=d3bf1fa7-6e79-4a28-bf8e-379aba7f49f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:08:8d:35:9a:0d:fa:51:98:71:43:9a:3a: 59:ff:97:56:6c:19:f4:ab:db:02:5d:02:f3:ba:aa: 2a:b8:50:1b:48:03:11:15:ab:5e:a1:e5:95:00:3d: 75:5d:d3:b9:3b:1f:71:7e:2c:26:5e:cf:70:5b:e3: 3a:b3:2d:3f:c5:5f:23:42:51:bd:c6:6e:6f:19:22: d8:5c:f8:3c:d2:78:47:f4:15:01:54:52:b5:5c:6e: 30:98:69:c4:c5:ee:76:ac:70:12:78:6a:51:f5:41: e7:66:e0:d2:23:13:71:19:d0:a6:4e:1a:f8:32:67: 99:2c:30:55:5d:42:96:95:08:36:66:35:17:cb:8a: 7a:b7:87:09:7c:18:c4:b0:bc:11:14:2b:3e:df:89: 65:ce:e6:57:e8:bb:a8:d8:9d:b9:ba:14:91:07:57: 2d:2c:96:8a:85:b2:0d:f7:f6:5d:e2:ba:82:66:fc: 76:54:3c:36:05:9e:e1:00:ea:36:b2:ad:f7:28:21: 7c:8d:d6:15:19:46:43:84:e5:b6:ee:dd:1a:a5:38: db:20:23:af:0e:c0:80:41:f2:10:09:1a:13:da:30: cf:c5:12:79:3d:2d:05:fc:e1:bd:ee:f3:f4:51:ce: b8:c4:c3:ad:f6:f7:b9:15:3c:8c:fe:25:96:5a:a9: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:49:5F:43:66:85:8D:B9:29:3A:2C:1C:9B:C0:A7:33:FD:02:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f6facc-c4d1-3969-ac07-931ed27ee223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:cd:d4:59:4b:59:20:22:ba:13:e0:61:63:51:49:ae:bb:b8: c1:45:7d:63:26:b6:50:06:29:c1:ff:23:50:cb:32:a0:55:1b: eb:20:a5:ba:9d:7d:4e:1b:da:e3:7d:8d:40:21:1d:f3:22:c6: 2a:72:88:0f:b1:bf:73:9f:6f:3a:75:5a:af:d1:55:fc:c2:a3: b0:c2:38:ce:22:46:3d:9c:f0:38:ee:28:dd:5a:c8:06:e7:50: a4:8a:f1:cf:aa:8b:22:2c:72:bc:f1:82:74:af:0f:1a:5a:80: 48:df:e7:fa:2e:a2:06:6a:70:c1:bd:4e:46:69:dd:ce:04:7b: 90:24:d5:53:72:81:17:05:a3:77:09:f7:c1:84:79:68:e2:2a: be:58:e1:91:41:b5:44:3a:bf:bf:71:7e:b3:3c:4c:6c:02:47: 23:74:aa:1d:ac:f5:c6:1c:72:32:8f:00:9f:7d:9b:5f:4a:e0: 44:54:cd:8f:9d:23:7b:f4:33:aa:ee:fd:ff:e4:7c:30:7d:20: c1:85:a0:f2:0f:26:28:19:19:94:6a:cb:db:03:1f:a9:50:c3: cc:65:4b:28:21:8a:35:47:05:cd:fd:1f:b4:88:aa:44:fb:bc: 1f:75:e0:95:1f:9d:1f:13:01:cc:13:ed:c3:64:5b:4b:98:7e: 0f:a2:5d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPY9b+jy35QxcMOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDNiZjFmYTctNmU3OS00YTI4LWJmOGUtMzc5YWJhN2Y0OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpoIjTWaDfpRmHFDmjpZ/5dWbBn0q9sCXQLz uqoquFAbSAMRFateoeWVAD11XdO5Ox9xfiwmXs9wW+M6sy0/xV8jQlG9xm5vGSLY XPg80nhH9BUBVFK1XG4wmGnExe52rHASeGpR9UHnZuDSIxNxGdCmThr4MmeZLDBV XUKWlQg2ZjUXy4p6t4cJfBjEsLwRFCs+34llzuZX6Luo2J25uhSRB1ctLJaKhbIN 9/Zd4rqCZvx2VDw2BZ7hAOo2sq33KCF8jdYVGUZDhOW27t0apTjbICOvDsCAQfIQ CRoT2jDPxRJ5PS0F/OG97vP0Uc64xMOt9ve5FTyM/iWWWqktlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKYSV9DZoWNuSk6LBybwKcz/QIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjJmNmZhY2MtYzRkMS0z OTY5LWFjMDctOTMxZWQyN2VlMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvN1FlLWSAiuhPgYWNRSa67uMFFfWMmtlAGKcH/I1DLMqBVG+sgpbqd fU4b2uN9jUAhHfMixipyiA+xv3Ofbzp1Wq/RVfzCo7DCOM4iRj2c8DjuKN1ayAbn UKSK8c+qiyIscrzxgnSvDxpagEjf5/ouogZqcMG9TkZp3c4Ee5Ak1VNygRcFo3cJ 98GEeWjiKr5Y4ZFBtUQ6v79xfrM8TGwCRyN0qh2s9cYccjKPAJ99m19K4ERUzY+d I3v0M6ru/f/kfDB9IMGFoPIPJigZGZRqy9sDH6lQw8xlSyghijVHBc39H7SIqkT7 vB914JUfnR8TAcwT7cNkW0uYfg+iXaU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:53 2026 by rpki-client