$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa File: b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa (raw, json) Hash identifier: 4FaCfMih5XhfPM9++Jivn3aleg+2NnFgM0m+wYXgO/4= Subject key identifier: 79:B0:BC:42:59:B7:EF:3E:38:65:69:55:7E:34:30:09:E1:91:D7:9C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D91D74EF4AB3C74FFCC08 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:91:d7:4e:f4:ab:3c:74:ff:cc:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=9f7a3788-2bda-46f8-8b8b-1ea563ab5e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:49:e8:e1:99:cf:ab:e5:cf:c9:bb:96:85: e1:93:8c:5e:48:ac:30:53:8d:c5:bd:5b:2e:d4:7e: 8b:a7:c6:5c:2f:49:76:58:52:20:82:39:be:61:f3: 2f:8c:8a:38:96:aa:9d:20:35:6a:2b:77:db:1d:34: eb:77:3c:ff:3f:18:a2:2c:6c:93:fb:5c:cb:73:b4: 9c:19:65:99:72:e7:9a:a7:a4:7e:4a:79:cd:41:0d: fc:37:ef:5f:93:43:6e:92:a7:07:54:1e:e7:94:83: aa:43:9b:7c:80:6b:a4:7d:92:9d:9d:16:bb:1d:9a: ec:5a:6c:8c:64:ca:3c:24:30:e8:a5:16:f3:ed:6b: 41:df:01:a6:83:1d:b7:8d:46:cf:f7:ed:71:9b:dd: aa:0e:55:37:78:8d:ec:65:75:a0:0f:fb:7a:83:62: 51:17:5d:22:29:95:99:53:69:e2:84:38:5f:ca:13: 65:f2:fb:98:05:a6:54:27:b2:38:27:cf:ed:54:db: ce:14:ad:b7:cd:00:30:d8:06:0d:02:04:1b:10:18: 9c:b9:3f:30:9e:4a:e5:21:81:79:32:84:f4:a2:30: 2e:66:3c:14:88:0b:d6:cb:f4:94:a5:c7:f5:ca:0d: 52:6e:cf:69:37:02:95:e4:6e:ad:93:f5:78:f1:7a: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B0:BC:42:59:B7:EF:3E:38:65:69:55:7E:34:30:09:E1:91:D7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6a45163-e086-3db4-b9c6-93331f7bbaa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:46:95:c4:26:d3:79:c3:99:9d:55:fd:8a:0a:85:b4:f9:3e: 6f:6e:e9:be:a3:c1:71:8d:66:4f:f9:63:e3:db:bc:ff:1d:28: 4a:3d:43:57:8e:92:4d:5a:11:9a:1e:d1:92:d9:67:55:eb:0d: c8:bc:f7:24:5b:39:db:09:bb:df:2e:07:2e:ee:c9:97:42:a5: 42:95:65:a8:e9:46:3d:0f:8e:90:a9:93:73:9e:b2:ef:69:15: ad:36:e9:86:02:c6:f2:68:bb:9a:da:d5:dd:d5:8d:b4:22:f1: fb:87:90:fa:1a:a5:83:17:a8:9a:c6:c5:a0:f0:3d:63:ae:ff: 1d:ab:8e:6a:f3:c8:33:27:a9:1e:fd:93:09:f2:3a:ea:cf:e2: 33:88:ee:6b:59:ea:71:88:de:19:88:9d:f0:45:b1:42:c2:c8: 7b:f7:52:d7:39:4f:82:84:71:eb:b7:0b:cb:33:d2:2f:22:84: 54:1c:5f:9c:73:3f:85:f9:4b:bb:d0:11:4f:c3:f0:cd:8c:fb: 72:b4:aa:f6:63:ba:97:85:e2:2b:8e:63:a7:07:44:fe:6e:66: a0:29:b9:bc:61:96:6f:cd:7d:4c:ce:d6:e7:11:35:6f:2f:b9: 6d:da:ea:ec:4a:6a:4a:84:0a:7b:56:44:13:cd:bc:3a:f0:45: 1f:0a:d3:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZHXTvSrPHT/zAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OWY3YTM3ODgtMmJkYS00NmY4LThiOGItMWVhNTYzYWI1ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4ZJ6OGZz6vlz8m7loXhk4xeSKwwU43FvVsu 1H6Lp8ZcL0l2WFIggjm+YfMvjIo4lqqdIDVqK3fbHTTrdzz/PxiiLGyT+1zLc7Sc GWWZcueap6R+SnnNQQ38N+9fk0NukqcHVB7nlIOqQ5t8gGukfZKdnRa7HZrsWmyM ZMo8JDDopRbz7WtB3wGmgx23jUbP9+1xm92qDlU3eI3sZXWgD/t6g2JRF10iKZWZ U2nihDhfyhNl8vuYBaZUJ7I4J8/tVNvOFK23zQAw2AYNAgQbEBicuT8wnkrlIYF5 MoT0ojAuZjwUiAvWy/SUpcf1yg1Sbs9pNwKV5G6tk/V48XoxwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmwvEJZt+8+OGVpVX40MAnhkdecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjZhNDUxNjMtZTA4Ni0z ZGI0LWI5YzYtOTMzMzFmN2JiYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZGlcQm03nDmZ1V/YoKhbT5Pm9u6b6jwXGNZk/5Y+PbvP8dKEo9Q1eO kk1aEZoe0ZLZZ1XrDci89yRbOdsJu98uBy7uyZdCpUKVZajpRj0PjpCpk3Oesu9p Fa026YYCxvJou5ra1d3VjbQi8fuHkPoapYMXqJrGxaDwPWOu/x2rjmrzyDMnqR79 kwnyOurP4jOI7mtZ6nGI3hmInfBFsULCyHv3Utc5T4KEceu3C8sz0i8ihFQcX5xz P4X5S7vQEU/D8M2M+3K0qvZjupeF4iuOY6cHRP5uZqApubxhlm/NfUzO1ucRNW8v uW3a6uxKakqECntWRBPNvDrwRR8K0yE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:41 2026 by rpki-client