$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1f62f80-f6d7-3d3d-b7ae-365d160d4a71.roa File: c1f62f80-f6d7-3d3d-b7ae-365d160d4a71.roa (raw, json) Hash identifier: 3JGpHU9jIv59d806x6oYchM+x48+Z4/PnRPu/M5AYD4= Subject key identifier: 72:D3:3F:D1:91:96:DD:F9:3C:6D:36:D2:B7:EA:39:09:D2:56:FD:CD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A55E8973F42564CD92600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1f62f80-f6d7-3d3d-b7ae-365d160d4a71.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:55:e8:97:3f:42:56:4c:d9:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1456055b-471e-4f91-99fe-55918f24967b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:40:58:06:41:a2:d0:bb:61:7e:c8:9f:09:67: 23:5d:cf:75:dc:fb:4b:bf:ed:cb:fd:7f:a6:20:43: 9c:8e:5b:f6:5f:d4:f0:6f:e5:c0:d3:ca:dc:7c:91: 1c:03:f3:0b:dc:12:22:c6:2f:5c:8b:a2:35:bf:21: 59:72:29:0f:00:36:d0:60:23:cd:bd:2c:70:b6:b2: a6:7b:95:65:ad:e8:86:1c:84:a9:97:3a:68:eb:2c: 96:40:51:05:37:80:00:de:7b:c5:bd:c0:43:72:63: b9:90:eb:36:1a:b9:7b:b9:6d:57:d3:c9:41:6c:9c: 50:e7:d8:1e:ad:05:16:4b:33:bc:d7:28:3d:83:09: ee:5e:d5:42:ea:c5:bc:f0:ce:ec:68:11:67:58:ea: ea:3b:bf:ee:12:62:35:71:00:7e:52:d5:28:59:41: 23:de:b8:0c:bc:17:cc:c9:90:17:47:33:88:56:c0: 60:aa:e6:2f:d5:b1:c9:33:7b:cb:c5:f8:6d:b2:5b: d0:7f:9b:4f:00:05:27:38:6b:4c:06:3e:02:06:39: ca:54:16:92:4f:db:bd:b6:49:5e:77:a0:38:ac:4b: 80:59:5d:6b:05:f7:05:fc:6d:19:15:88:98:ac:86: 45:fe:b0:57:c9:6f:04:cc:46:3a:65:90:87:98:e3: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D3:3F:D1:91:96:DD:F9:3C:6D:36:D2:B7:EA:39:09:D2:56:FD:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1f62f80-f6d7-3d3d-b7ae-365d160d4a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ed:94:3b:6f:98:8c:65:d2:90:39:45:cf:c2:cb:1c:47:59: e1:6e:81:0f:bb:e6:18:78:19:3d:be:cb:ff:0c:fb:20:72:a6: ed:4f:3f:ee:de:e8:06:b3:8e:b1:30:68:36:a7:bd:7d:4b:2a: b8:e7:4d:59:a7:e5:d9:d9:94:26:c1:0b:6d:77:21:d7:2a:0c: 81:53:cc:67:93:b4:17:3b:e5:6f:05:3a:6a:5e:7e:24:fc:b1: 94:6c:9b:8c:45:06:06:60:29:f5:14:28:23:66:a6:74:e2:b0: a0:5c:59:80:05:f4:98:32:ef:42:3c:b8:3f:22:04:9a:79:a3: 44:d3:ae:ef:df:d6:c3:2d:6c:07:d6:63:92:5d:91:73:96:09: 93:58:37:ff:cd:1c:d4:f9:dc:07:dd:3b:4c:0a:d9:e9:5c:69: d8:cd:a6:b8:ce:bc:a9:97:3b:b8:79:29:bf:11:db:da:28:b1: c1:00:56:1f:73:cd:7e:8f:b2:c1:b4:88:b9:57:72:1b:4f:15: c2:18:0e:33:9f:31:2f:d6:b9:46:c4:50:81:d8:8e:97:46:35: 33:4e:5b:09:26:9e:03:13:1b:8d:67:1d:73:a6:8d:9a:4d:32: bb:51:18:ec:40:59:b5:ce:c9:1d:05:04:69:dd:b6:f4:26:c1: 49:04:5a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSlXolz9CVkzZJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MTQ1NjA1NWItNDcxZS00ZjkxLTk5ZmUtNTU5MThmMjQ5NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEBYBkGi0LthfsifCWcjXc913PtLv+3L/X+m IEOcjlv2X9Twb+XA08rcfJEcA/ML3BIixi9ci6I1vyFZcikPADbQYCPNvSxwtrKm e5VlreiGHISplzpo6yyWQFEFN4AA3nvFvcBDcmO5kOs2Grl7uW1X08lBbJxQ59ge rQUWSzO81yg9gwnuXtVC6sW88M7saBFnWOrqO7/uEmI1cQB+UtUoWUEj3rgMvBfM yZAXRzOIVsBgquYv1bHJM3vLxfhtslvQf5tPAAUnOGtMBj4CBjnKVBaST9u9tkle d6A4rEuAWV1rBfcF/G0ZFYiYrIZF/rBXyW8EzEY6ZZCHmOOhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLTP9GRlt35PG020rfqOQnSVv3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzFmNjJmODAtZjZkNy0z ZDNkLWI3YWUtMzY1ZDE2MGQ0YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLtlDtvmIxl0pA5Rc/CyxxHWeFugQ+75hh4GT2+y/8M+yBypu1PP+7e 6AazjrEwaDanvX1LKrjnTVmn5dnZlCbBC213IdcqDIFTzGeTtBc75W8FOmpefiT8 sZRsm4xFBgZgKfUUKCNmpnTisKBcWYAF9Jgy70I8uD8iBJp5o0TTru/f1sMtbAfW Y5JdkXOWCZNYN//NHNT53AfdO0wK2elcadjNprjOvKmXO7h5Kb8R29ooscEAVh9z zX6PssG0iLlXchtPFcIYDjOfMS/WuUbEUIHYjpdGNTNOWwkmngMTG41nHXOmjZpN MrtRGOxAWbXOyR0FBGndtvQmwUkEWrI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:46 2026 by rpki-client