$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf5b3bd-da68-3483-a39c-3afb07bdeaff.roa File: bbf5b3bd-da68-3483-a39c-3afb07bdeaff.roa (raw, json) Hash identifier: aA3hqHdEedDTYOWr3c1Hkw4WZ0FPgSavyh+mx20FABU= Subject key identifier: 9A:F1:55:64:5B:66:B7:84:17:7F:90:FB:09:B7:EE:55:56:CC:0F:CD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A73E771E4D49BBAA96400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf5b3bd-da68-3483-a39c-3afb07bdeaff.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:73:e7:71:e4:d4:9b:ba:a9:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=6db3adfa-bcd9-4413-aea4-65b8da4b1ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:55:61:e4:00:05:76:5d:2e:f0:30:27:f5: eb:13:d9:ef:8c:3f:be:e2:77:9f:c3:5f:66:3f:3c: 43:3e:56:07:21:db:e6:fe:c4:4d:2e:e1:2b:34:c4: d0:f1:d4:8c:1b:97:66:9a:0c:27:87:2c:d2:cb:0d: 2e:8c:03:a5:fa:e6:0f:68:d8:7b:fe:07:c5:f5:91: d4:f4:9a:d1:87:4a:c7:0b:c2:cc:9e:ef:0f:51:00: 14:c7:c8:85:d6:5d:5a:33:ab:cb:47:46:25:58:50: c0:94:51:39:bb:9b:f6:57:df:ca:71:5f:56:1c:cd: 86:51:6f:e1:80:67:05:7e:ca:4a:25:d1:13:ed:59: 21:48:77:e6:35:d3:9f:1d:7e:e7:80:ca:ad:cc:12: 17:38:ec:46:0c:32:0a:62:74:26:15:94:90:c5:96: 41:34:f9:91:12:59:8f:15:3a:fc:18:41:2a:04:2b: 6b:9e:5e:78:97:74:72:c8:af:af:4e:ec:3f:4c:67: 2b:04:59:88:2d:25:a2:a9:e9:cb:0b:af:9d:71:2e: ea:ef:5a:41:27:86:21:ee:37:78:14:56:4d:d1:08: b2:46:2a:24:a3:9e:73:65:96:d9:70:60:9d:19:fb: 06:bc:7f:d6:eb:dd:a0:b8:11:c9:27:10:d8:d5:3f: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F1:55:64:5B:66:B7:84:17:7F:90:FB:09:B7:EE:55:56:CC:0F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbf5b3bd-da68-3483-a39c-3afb07bdeaff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4e:de:b7:da:c8:6f:34:2d:8a:6f:a3:fe:3d:71:ca:02:68: 49:30:fb:69:32:a7:58:33:7c:6c:ae:b7:16:90:16:9f:c2:7b: 0a:77:b5:26:69:6f:da:85:17:de:8a:ba:58:f6:be:fb:15:33: 56:5b:86:f2:35:d3:00:c3:99:eb:01:9a:c8:af:28:b7:4c:f2: 56:7c:f6:7d:fb:7d:42:a8:52:aa:4c:ed:ef:79:3e:13:f3:cf: d4:fd:63:f0:bb:49:11:da:4c:3d:16:6f:06:fa:cf:7b:4d:16: 36:a9:af:9f:38:18:26:38:c5:c7:84:2b:4a:63:3b:2c:fe:f2: 96:72:92:b7:05:c0:ee:ec:3d:d6:fc:bb:0c:dd:c7:33:e5:7d: 46:1e:ba:e7:3a:dc:1e:f2:b4:31:70:47:b6:3b:eb:3b:81:04: 8a:72:10:da:da:42:e1:2f:30:59:ea:bc:2d:de:ca:18:6f:03: 53:31:7c:0f:a3:b3:5d:18:38:fb:28:ed:06:78:86:7f:52:2a: ee:65:b2:7f:03:7e:4b:93:a3:70:4f:1d:d3:6e:9c:6a:77:59: 38:6d:86:7a:c2:ef:52:51:75:a8:64:55:ce:73:9f:4a:33:7b: 69:c2:8f:fb:6f:04:66:ec:13:3d:35:e6:7b:d1:cc:f4:13:01: f3:c5:0b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSnPnceTUm7qpZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NmRiM2FkZmEtYmNkOS00NDEzLWFlYTQtNjViOGRhNGIxZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYJVYeQABXZdLvAwJ/XrE9nvjD++4nefw19m PzxDPlYHIdvm/sRNLuErNMTQ8dSMG5dmmgwnhyzSyw0ujAOl+uYPaNh7/gfF9ZHU 9JrRh0rHC8LMnu8PUQAUx8iF1l1aM6vLR0YlWFDAlFE5u5v2V9/KcV9WHM2GUW/h gGcFfspKJdET7VkhSHfmNdOfHX7ngMqtzBIXOOxGDDIKYnQmFZSQxZZBNPmRElmP FTr8GEEqBCtrnl54l3RyyK+vTuw/TGcrBFmILSWiqenLC6+dcS7q71pBJ4Yh7jd4 FFZN0QiyRioko55zZZbZcGCdGfsGvH/W692guBHJJxDY1T+S2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrxVWRbZreEF3+Q+wm37lVWzA/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmJmNWIzYmQtZGE2OC0z NDgzLWEzOWMtM2FmYjA3YmRlYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtO3rfayG80LYpvo/49ccoCaEkw+2kyp1gzfGyutxaQFp/Cewp3tSZp b9qFF96Kulj2vvsVM1ZbhvI10wDDmesBmsivKLdM8lZ89n37fUKoUqpM7e95PhPz z9T9Y/C7SRHaTD0Wbwb6z3tNFjapr584GCY4xceEK0pjOyz+8pZykrcFwO7sPdb8 uwzdxzPlfUYeuuc63B7ytDFwR7Y76zuBBIpyENraQuEvMFnqvC3eyhhvA1MxfA+j s10YOPso7QZ4hn9SKu5lsn8DfkuTo3BPHdNunGp3WThthnrC71JRdahkVc5zn0oz e2nCj/tvBGbsEz015nvRzPQTAfPFCxQ= -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:08 2026 by rpki-client