$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa File: bcd23307-1769-3883-b749-7320ac4ef80d.roa (raw, json) Hash identifier: P8feccM7jFFSptcpA4QeHgljCIN2DCDWH7K6XR2OScE= Subject key identifier: 5D:67:17:65:06:7E:60:C2:44:31:9C:86:8C:B3:A7:FB:90:D6:CF:FC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D870AA4B323DFB0FC7680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:87:0a:a4:b3:23:df:b0:fc:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=acfa9429-85b9-4750-a6f1-e8258f2dbe9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c6:88:0c:91:6e:89:69:cd:2b:57:79:df:bc: 9d:99:ad:b0:5e:3e:e5:06:7a:26:b6:ba:a0:d6:ac: c4:3e:fa:76:b1:19:95:e9:d9:da:18:2e:16:a5:d1: ad:03:de:1d:aa:1a:df:94:c1:b3:d9:fd:43:7a:38: b7:d0:98:90:85:d4:ba:02:c1:b6:d4:0c:ff:1f:1d: 04:21:fb:ca:2b:92:36:a4:8f:f5:d2:4a:53:23:96: 22:c6:9d:1b:3a:19:cd:5d:ad:61:83:7d:7a:25:b2: b8:33:d1:93:13:f5:42:c5:36:43:64:18:03:58:8a: df:4e:08:9f:a8:47:4a:48:d8:45:4a:ce:f6:70:54: a4:af:4c:09:2b:8d:f1:0c:e7:b8:30:7a:b1:d1:a6: c0:bf:fa:ca:06:34:d0:75:17:1d:c4:e1:3e:fe:2e: fe:85:88:fc:ac:dc:cb:bf:b2:fa:62:ae:b9:f9:65: e4:be:15:9f:f3:b9:82:6b:fc:b6:2d:74:0c:5a:16: 6b:30:4c:fe:e5:f4:ee:3c:7d:a3:8c:ff:42:57:fd: f1:f3:e6:d3:51:94:b8:4c:e2:df:76:be:42:20:9f: 09:af:a1:ff:40:aa:d7:d2:62:3e:33:15:a1:6f:7c: 20:e9:14:1f:a3:1b:b5:9f:b9:7f:ce:6e:a1:3d:f0: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:17:65:06:7E:60:C2:44:31:9C:86:8C:B3:A7:FB:90:D6:CF:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:29:b1:5a:36:84:5f:7e:0e:73:e9:41:e9:43:32:a1:a5:5e: fe:41:79:3f:72:c6:33:3f:c2:8d:39:10:69:32:6c:56:d5:cf: 8b:33:dc:74:5f:ee:1c:93:37:86:6d:83:72:9c:50:97:8b:27: 4c:7f:eb:47:42:dd:97:23:64:e2:48:b4:01:e4:47:d8:96:88: 36:11:9f:63:c0:91:ed:34:fc:c4:80:bb:fc:94:2e:b2:21:04: a5:73:78:77:dc:28:f9:bd:be:64:16:68:6f:81:d3:97:08:cf: e8:dc:c2:5b:1a:24:f6:dc:8d:e8:0c:5d:2b:67:44:f9:ff:ca: 63:80:45:cc:f9:cd:23:55:c0:40:ca:69:91:fb:d4:bb:0a:5b: be:79:0f:15:12:b5:8f:b2:93:d4:82:b0:dd:7e:f5:98:77:31: 77:7f:9b:10:6d:e8:04:7f:24:4c:a2:45:b2:bf:38:ee:92:f5: 0a:42:73:79:e3:08:a6:fc:24:de:3e:68:94:da:d0:ea:1a:9f: 1f:11:54:00:14:2d:84:a0:b8:2f:4c:5b:c3:a8:89:e8:9f:dd: 44:cf:0c:aa:77:93:89:f1:9b:25:9c:53:54:08:5f:ad:1e:fc: 11:61:a5:cd:96:1e:5a:3b:ca:31:2a:1f:41:3b:01:be:1c:95: b6:9d:86:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYcKpLMj37D8doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YWNmYTk0MjktODViOS00NzUwLWE2ZjEtZTgyNThmMmRiZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3caIDJFuiWnNK1d537ydma2wXj7lBnomtrqg 1qzEPvp2sRmV6dnaGC4WpdGtA94dqhrflMGz2f1Deji30JiQhdS6AsG21Az/Hx0E IfvKK5I2pI/10kpTI5Yixp0bOhnNXa1hg316JbK4M9GTE/VCxTZDZBgDWIrfTgif qEdKSNhFSs72cFSkr0wJK43xDOe4MHqx0abAv/rKBjTQdRcdxOE+/i7+hYj8rNzL v7L6Yq65+WXkvhWf87mCa/y2LXQMWhZrMEz+5fTuPH2jjP9CV/3x8+bTUZS4TOLf dr5CIJ8Jr6H/QKrX0mI+MxWhb3wg6RQfoxu1n7l/zm6hPfAHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1nF2UGfmDCRDGchoyzp/uQ1s/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmNkMjMzMDctMTc2OS0z ODgzLWI3NDktNzMyMGFjNGVmODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcpsVo2hF9+DnPpQelDMqGlXv5BeT9yxjM/wo05EGkybFbVz4sz3HRf 7hyTN4Ztg3KcUJeLJ0x/60dC3ZcjZOJItAHkR9iWiDYRn2PAke00/MSAu/yULrIh BKVzeHfcKPm9vmQWaG+B05cIz+jcwlsaJPbcjegMXStnRPn/ymOARcz5zSNVwEDK aZH71LsKW755DxUStY+yk9SCsN1+9Zh3MXd/mxBt6AR/JEyiRbK/OO6S9QpCc3nj CKb8JN4+aJTa0Ooanx8RVAAULYSguC9MW8Ooieif3UTPDKp3k4nxmyWcU1QIX60e /BFhpc2WHlo7yjEqH0E7Ab4clbadhkc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:02:16 2026 by rpki-client