$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3a23ec3-8004-3a42-9a20-b7f7356eb58f.roa File: b3a23ec3-8004-3a42-9a20-b7f7356eb58f.roa (raw, json) Hash identifier: z1AA2C1kTLQgqVKcFBdqXC9iDUUU9j5RntNV6pNPW/I= Subject key identifier: 11:99:72:C5:0E:A5:DE:0C:7C:AC:6F:7E:F8:B4:77:5D:B9:76:3C:08 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D11729172901FA69E14387780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3a23ec3-8004-3a42-9a20-b7f7356eb58f.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.132.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:91:72:90:1f:a6:9e:14:38:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=308ac106-8f3b-4f4a-9153-110f23a3655b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:e3:61:37:09:99:e1:93:9c:9c:ac:6e:45: 08:64:27:fc:78:b6:2d:16:5b:63:55:bf:1b:15:1e: b8:d3:e6:04:c9:a4:33:f5:3c:6d:c2:5b:96:9a:ca: e0:eb:c2:e2:ce:8a:ab:16:52:38:fb:64:ac:be:0f: 90:1f:76:aa:50:10:6f:22:d7:8c:ba:28:3f:bc:ea: c5:4a:47:62:1d:8e:f5:cb:aa:01:d2:e9:40:03:0c: b1:fc:62:b7:cf:93:9c:11:f2:e9:30:a6:12:e4:85: 14:be:10:6b:ef:18:26:31:e1:a7:df:0a:c2:3a:09: 0c:ef:ba:21:26:ab:05:2e:09:2e:b0:67:ca:33:75: 9d:db:bf:69:4f:f6:fb:3d:20:48:09:0a:b0:c0:2b: 13:90:96:8a:d7:57:87:25:ed:05:21:72:a9:52:2d: 17:70:87:ab:a8:37:74:6a:0f:f4:57:0d:67:69:e6: 20:a8:98:76:b7:7e:0c:4c:e3:17:94:1a:61:56:4a: bb:70:ec:a2:c0:bf:a9:bb:0c:17:19:77:e5:5d:b3: 9f:57:b1:cc:10:85:2b:01:e5:86:8c:63:f6:fc:85: f8:ec:8e:15:30:1d:d9:26:17:d1:3b:b4:83:b5:5a: e2:71:8a:c1:49:50:46:e7:ce:b1:03:a0:9e:40:0f: da:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:99:72:C5:0E:A5:DE:0C:7C:AC:6F:7E:F8:B4:77:5D:B9:76:3C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b3a23ec3-8004-3a42-9a20-b7f7356eb58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e7:30:23:97:f0:ff:ad:fc:0f:8a:64:78:b3:00:96:04:c1: f8:e4:fa:e4:da:e6:27:a6:60:ef:19:7d:15:fb:aa:a0:3e:28: a4:6c:db:1e:f6:4d:e0:09:5d:64:c1:4a:5d:66:80:c3:c1:34: b3:c9:29:85:13:e2:0a:0e:06:c2:cf:01:2f:3f:4d:e9:23:e1: 21:4b:0a:7b:f7:29:99:1c:8f:05:c5:fb:17:49:e6:cb:4e:fd: e7:4f:17:f6:9b:a5:cf:90:67:4c:20:78:aa:ff:1e:d6:68:ea: ce:0b:af:71:8d:c7:fd:4f:6c:14:f7:52:9f:c2:78:82:34:fa: 4f:19:19:3f:9a:f4:25:e1:97:01:0e:af:24:c7:70:e1:eb:24: 30:23:9c:1e:b6:6d:5c:25:5b:31:52:a2:7b:21:f3:f0:89:e7: ee:20:14:ca:bd:e2:aa:73:8f:a5:a3:31:7e:32:3a:0c:fd:26: 4c:8d:b7:92:5f:ef:d5:12:65:7e:95:98:de:0e:71:6b:f4:82: 63:cc:b5:0c:8e:c4:a3:47:9a:13:08:b7:8d:da:36:c3:0c:a0: c2:f1:b9:b7:a6:ef:a9:60:b5:ce:75:79:c0:c4:cb:a3:5b:57: 67:c1:39:6a:29:cb:99:12:0b:dd:1a:45:7a:48:60:2e:54:aa: 8d:76:51:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpFykB+mnhQ4d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MzA4YWMxMDYtOGYzYi00ZjRhLTkxNTMtMTEwZjIzYTM2NTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7jjYTcJmeGTnJysbkUIZCf8eLYtFltjVb8b FR640+YEyaQz9TxtwluWmsrg68LizoqrFlI4+2Ssvg+QH3aqUBBvIteMuig/vOrF SkdiHY71y6oB0ulAAwyx/GK3z5OcEfLpMKYS5IUUvhBr7xgmMeGn3wrCOgkM77oh JqsFLgkusGfKM3Wd279pT/b7PSBICQqwwCsTkJaK11eHJe0FIXKpUi0XcIerqDd0 ag/0Vw1naeYgqJh2t34MTOMXlBphVkq7cOyiwL+puwwXGXflXbOfV7HMEIUrAeWG jGP2/IX47I4VMB3ZJhfRO7SDtVricYrBSVBG586xA6CeQA/a/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGZcsUOpd4MfKxvfvi0d125djwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjNhMjNlYzMtODAwNC0z YTQyLTlhMjAtYjdmNzM1NmViNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIS8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPnMCOX8P+t/A+KZHizAJYEwfjk+uTa5iemYO8ZfRX7qqA+KKRs2x72 TeAJXWTBSl1mgMPBNLPJKYUT4goOBsLPAS8/Tekj4SFLCnv3KZkcjwXF+xdJ5stO /edPF/abpc+QZ0wgeKr/HtZo6s4Lr3GNx/1PbBT3Up/CeII0+k8ZGT+a9CXhlwEO ryTHcOHrJDAjnB62bVwlWzFSonsh8/CJ5+4gFMq94qpzj6WjMX4yOgz9JkyNt5Jf 79USZX6VmN4OcWv0gmPMtQyOxKNHmhMIt43aNsMMoMLxubem76lgtc51ecDEy6Nb V2fBOWopy5kSC90aRXpIYC5Uqo12Udg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:54 2026 by rpki-client