$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b89bac67-f483-34a7-a419-c2427d11e58d.roa File: b89bac67-f483-34a7-a419-c2427d11e58d.roa (raw, json) Hash identifier: p9ifD7Ng+m5ixqeqNpqRnWhza2Ngw1LD00ScZmV4GOU= Subject key identifier: B3:6E:DB:3B:68:5C:DE:DA:4F:18:99:AD:CC:12:81:E5:C3:86:C4:A2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A7AB3084B02FB78D274D0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b89bac67-f483-34a7-a419-c2427d11e58d.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.135.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:7a:b3:08:4b:02:fb:78:d2:74:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=5db4eca1-8458-4a47-98ba-79f5c23dc5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:eb:0e:39:b8:cc:9e:a9:0c:f1:79:9e:e4: 62:59:d4:ed:10:e3:b9:79:8a:64:be:84:cb:3b:ee: 38:ed:67:0a:aa:6d:c7:5f:a3:58:97:c1:03:cd:74: 06:72:37:28:7e:56:d9:fc:03:0f:b8:36:a7:f1:59: 46:77:f3:51:c2:da:5a:7f:ee:4a:f3:bc:80:b5:35: 6a:ad:41:90:13:0a:b2:19:c0:7f:cb:9b:6d:99:b9: cc:a6:92:13:d6:50:8c:43:cd:29:c1:24:22:09:94: a0:92:65:11:0f:56:7f:10:6f:87:35:d4:eb:d1:5c: 18:be:79:f3:30:89:85:c6:3a:4b:e4:5d:da:dc:f1: bb:58:0f:3b:1c:0b:86:ef:a1:fc:e6:2f:0a:c6:10: 85:02:d4:37:c8:1a:8b:e9:e0:52:cb:42:0c:cb:e7: 67:a0:9a:71:51:63:9b:5a:b7:26:be:41:9f:72:49: 72:f9:8f:d1:9c:45:a8:68:0c:d8:08:b5:32:6c:3c: e4:31:0e:ab:24:d5:33:9d:8b:64:61:0f:cd:09:af: e0:3d:95:99:ee:39:e7:98:f3:14:30:88:22:59:02: a8:a7:bf:75:da:15:ca:8b:03:28:5b:6a:80:67:d7: b6:33:ac:10:85:43:62:eb:cf:e6:32:1f:4a:b9:a0: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6E:DB:3B:68:5C:DE:DA:4F:18:99:AD:CC:12:81:E5:C3:86:C4:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b89bac67-f483-34a7-a419-c2427d11e58d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f6:75:d0:8c:86:ba:ab:5e:d2:92:95:2f:ab:d0:97:02:4d: a3:3d:23:ef:0c:5e:62:db:b0:1a:48:46:5b:cf:32:0d:a1:96: 01:d1:cb:9a:be:73:0a:51:c2:b3:49:6c:c8:26:57:3d:d8:06: a6:b7:a0:39:cd:35:61:0f:7d:5e:a2:e5:8f:bd:b2:50:fa:81: 14:ef:79:7d:d2:7c:40:72:ab:12:01:bd:17:8f:7d:93:6c:51: a3:e3:02:64:dc:d4:1f:bc:cc:66:bc:ff:15:6f:48:17:0f:05: 0e:3d:a9:50:c7:8e:74:a5:eb:e7:9b:9c:22:68:5e:3e:09:fc: 8e:9f:b0:10:ba:44:1b:40:83:57:c9:6f:5b:bc:18:04:d9:73: a9:aa:23:c6:b7:58:c3:11:72:6a:16:cf:a3:2e:76:32:cd:cb: ac:27:e3:be:82:09:1c:bf:35:f0:f7:35:6e:86:c6:2d:bf:1a: 0f:41:7b:96:0f:25:69:bc:f6:55:38:f3:cd:e7:6b:5c:01:4f: 1e:99:cc:36:4e:18:79:fc:59:cf:b3:c7:97:ba:d8:5d:a0:71: c1:c9:4f:6c:ee:f3:60:b0:2c:fb:3c:73:97:fe:25:b2:10:c7: d3:d5:77:54:e2:db:cd:18:da:f2:e1:5c:d3:a0:78:2a:c8:7c: 5e:fe:69:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnqzCEsC+3jSdNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NWRiNGVjYTEtODQ1OC00YTQ3LTk4YmEtNzlmNWMyM2RjNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO7rDjm4zJ6pDPF5nuRiWdTtEOO5eYpkvoTL O+447WcKqm3HX6NYl8EDzXQGcjcoflbZ/AMPuDan8VlGd/NRwtpaf+5K87yAtTVq rUGQEwqyGcB/y5ttmbnMppIT1lCMQ80pwSQiCZSgkmURD1Z/EG+HNdTr0VwYvnnz MImFxjpL5F3a3PG7WA87HAuG76H85i8KxhCFAtQ3yBqL6eBSy0IMy+dnoJpxUWOb WrcmvkGfckly+Y/RnEWoaAzYCLUybDzkMQ6rJNUznYtkYQ/NCa/gPZWZ7jnnmPMU MIgiWQKop7912hXKiwMoW2qAZ9e2M6wQhUNi68/mMh9KuaDnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNu2ztoXN7aTxiZrcwSgeXDhsSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjg5YmFjNjctZjQ4My0z NGE3LWE0MTktYzI0MjdkMTFlNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD2ddCMhrqrXtKSlS+r0JcCTaM9I+8MXmLbsBpIRlvPMg2hlgHRy5q+ cwpRwrNJbMgmVz3YBqa3oDnNNWEPfV6i5Y+9slD6gRTveX3SfEByqxIBvRePfZNs UaPjAmTc1B+8zGa8/xVvSBcPBQ49qVDHjnSl6+ebnCJoXj4J/I6fsBC6RBtAg1fJ b1u8GATZc6mqI8a3WMMRcmoWz6MudjLNy6wn476CCRy/NfD3NW6Gxi2/Gg9Be5YP JWm89lU4883na1wBTx6ZzDZOGHn8Wc+zx5e62F2gccHJT2zu82CwLPs8c5f+JbIQ x9PVd1Ti280Y2vLhXNOgeCrIfF7+aeY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:58 2026 by rpki-client