$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa File: bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa (raw, json) Hash identifier: chqi6Llgt1xzjxRA8goIVi8bIMx9Rqrmk9Q2jUHEXT4= Subject key identifier: 18:6C:7E:B0:D8:67:A0:07:0F:C2:2C:84:76:01:18:99:E6:22:D2:46 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D84F419AB71A3D4122180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:84:f4:19:ab:71:a3:d4:12:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=839301c1-d0cd-4ca4-9cc3-f879901c585d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:91:55:d7:4f:2d:18:be:a5:9e:5b:ed:aa: 5d:f3:1e:09:9b:22:62:2d:e6:b8:18:75:f6:e1:a1: a5:fd:06:68:b3:cb:5e:17:ac:44:1b:93:e2:ff:6b: f5:9c:0c:bb:8f:03:4d:d8:7c:41:29:16:6f:04:3f: 25:76:e8:4e:5c:2c:49:ac:2a:54:60:76:6d:bb:42: 17:15:a7:37:e5:e8:72:90:4b:ed:65:17:7e:56:cb: 60:d5:e7:33:f5:ac:61:ed:de:19:7f:06:60:a9:17: b9:b7:1f:d4:41:41:26:ea:98:30:c8:0b:6f:c6:7d: e3:3d:17:58:90:18:8a:b8:fe:ee:c9:7b:8f:ee:66: fd:1b:bd:80:5d:5b:93:6f:c3:4c:90:3e:e9:fa:4b: f7:b3:7a:27:d7:60:a6:a2:a3:12:04:4f:44:56:25: af:c1:f5:f2:f0:08:44:4f:c2:e9:2c:15:a5:71:28: 2d:58:a3:af:44:d8:78:f7:4e:f7:a6:f9:cc:f0:82: 74:85:71:8f:22:a8:a4:99:be:fe:66:6d:92:74:5b: 31:16:2b:df:61:fe:67:b2:0e:ee:9c:d9:aa:ee:96: 25:9f:d6:78:73:76:b8:85:77:59:99:cd:88:08:37: a6:58:4f:79:8c:6a:41:7a:fb:b9:c8:23:8f:c7:13: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6C:7E:B0:D8:67:A0:07:0F:C2:2C:84:76:01:18:99:E6:22:D2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c8:74:83:fe:83:77:79:b2:c1:e9:8c:84:d6:02:88:65:0d: 4c:1f:c8:24:fc:44:e9:4d:b6:76:06:10:66:be:4b:91:08:f4: c2:9f:14:1e:54:89:23:27:c9:10:a2:7d:31:e0:cd:0a:c5:4f: 9d:d2:6c:bb:ba:9e:2a:93:cd:7b:6b:46:2a:5d:81:7e:75:e5: 3f:52:41:1f:25:38:3f:8b:1a:35:3d:5b:93:8e:54:f9:75:f4: 39:03:75:c4:0e:ae:bb:fd:48:84:15:86:65:61:83:60:20:bb: 5e:f8:b2:b0:a6:de:cb:ab:81:88:4b:9f:12:d6:5b:38:c3:8d: c2:fc:e2:35:b4:c4:4f:ef:69:e0:1a:e3:f4:fd:7d:bf:c5:3b: f5:f9:bd:83:88:fc:a2:2a:18:f1:d3:46:03:47:a1:eb:0e:c8: 82:61:c9:a0:85:ad:fb:39:6d:9f:5c:bc:26:2c:18:13:5d:62: 61:2f:04:83:bf:2c:fd:26:1e:4d:69:fe:09:ca:0b:a3:0c:a1: 04:2c:04:57:c7:db:ff:54:d8:66:ac:8e:e2:36:89:74:d0:2f: a8:00:33:dd:1e:8d:cb:1f:40:e8:45:59:0b:22:d6:e8:d1:9f: 43:4e:da:7d:b3:9e:38:e2:30:f0:88:8e:c8:2f:72:f5:71:2f: 72:f2:2b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYT0Gatxo9QSIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODM5MzAxYzEtZDBjZC00Y2E0LTljYzMtZjg3OTkwMWM1ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrmRVddPLRi+pZ5b7apd8x4JmyJiLea4GHX2 4aGl/QZos8teF6xEG5Pi/2v1nAy7jwNN2HxBKRZvBD8lduhOXCxJrCpUYHZtu0IX Fac35ehykEvtZRd+Vstg1ecz9axh7d4ZfwZgqRe5tx/UQUEm6pgwyAtvxn3jPRdY kBiKuP7uyXuP7mb9G72AXVuTb8NMkD7p+kv3s3on12CmoqMSBE9EViWvwfXy8AhE T8LpLBWlcSgtWKOvRNh49073pvnM8IJ0hXGPIqikmb7+Zm2SdFsxFivfYf5nsg7u nNmq7pYln9Z4c3a4hXdZmc2ICDemWE95jGpBevu5yCOPxxN+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhsfrDYZ6AHD8IshHYBGJnmItJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmM2ZDEyYTEtNjg0Ni0z NTQ3LTgxNTEtYjc0Y2I2ZTlhZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzIdIP+g3d5ssHpjITWAohlDUwfyCT8ROlNtnYGEGa+S5EI9MKfFB5U iSMnyRCifTHgzQrFT53SbLu6niqTzXtrRipdgX515T9SQR8lOD+LGjU9W5OOVPl1 9DkDdcQOrrv9SIQVhmVhg2Agu174srCm3surgYhLnxLWWzjDjcL84jW0xE/vaeAa 4/T9fb/FO/X5vYOI/KIqGPHTRgNHoesOyIJhyaCFrfs5bZ9cvCYsGBNdYmEvBIO/ LP0mHk1p/gnKC6MMoQQsBFfH2/9U2GasjuI2iXTQL6gAM90ejcsfQOhFWQsi1ujR n0NO2n2znjjiMPCIjsgvcvVxL3LyK6I= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:49 2026 by rpki-client