$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa File: c8c24147-75ec-35e3-a350-2da570a3661b.roa (raw, json) Hash identifier: YGZwkw2bbjwOAnF//oXiphXg1SjZb3KQVFIN11O4B+4= Subject key identifier: BB:3A:EB:C0:56:BA:4A:AB:A9:8C:E8:44:39:D6:3E:03:A3:30:1A:38 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA437A930CFB1E2940BEC Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a4:37:a9:30:cf:b1:e2:94:0b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=22a4b6b0-79e8-440b-b73e-44dee2b8e5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:7d:83:d6:eb:6e:37:94:2e:c9:b3:c4:e5: 2d:38:72:78:61:b5:34:8b:ec:3a:2c:c1:12:60:dc: 03:5a:0f:5c:01:78:63:eb:83:b9:9c:c5:d4:1f:48: 08:bc:48:e4:80:76:a2:eb:72:69:70:46:a6:00:cd: c8:f9:74:65:df:c4:bd:d0:c7:93:ce:95:03:93:6f: 3e:e7:38:bf:8c:4e:1e:14:56:d8:72:2b:d1:33:3b: 85:eb:9f:c0:59:9d:54:16:26:1c:ff:d1:99:98:f0: 2a:18:68:c3:e0:62:39:57:1e:0d:f1:c1:51:31:7e: 8c:19:c2:cd:f5:cc:cd:3f:33:f0:ea:bb:a8:a9:3d: 29:72:87:ab:1f:8e:4f:4b:52:06:1b:d0:8a:60:4d: ce:77:d9:49:bc:a9:ae:e4:5f:ea:ee:64:b7:41:ef: 26:48:7e:c4:dc:bc:29:8c:a7:eb:7a:40:79:8e:3f: 02:9e:38:14:87:8c:b9:89:ef:59:e4:48:ca:c6:9b: b8:56:b5:03:29:d3:2d:1b:eb:e2:42:d7:e1:81:12: b2:8e:13:54:19:d5:44:b1:a2:b9:41:96:81:00:e0: fc:cf:37:71:f8:7d:bf:69:19:fe:1f:69:03:3a:23: 48:59:51:dd:a6:17:68:17:50:09:68:94:9f:b4:6f: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3A:EB:C0:56:BA:4A:AB:A9:8C:E8:44:39:D6:3E:03:A3:30:1A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8c24147-75ec-35e3-a350-2da570a3661b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f3:5e:4c:f3:6b:25:b9:8b:8d:a8:20:4b:1b:7b:bf:c4:2f: 38:dc:13:a7:3f:b7:10:a6:a8:cc:fd:12:88:f8:83:81:3c:0c: da:a7:b8:dd:a2:69:25:4f:c1:19:5d:61:74:f2:fd:ae:ad:7a: ea:be:ec:c9:84:70:e9:75:cd:6e:f2:b1:8f:cb:24:dc:77:b6: 69:26:02:0f:c5:08:7d:f7:8d:0d:8e:6e:61:1b:7e:78:56:64: a9:40:4c:16:c6:34:82:16:95:cd:a9:cf:7c:8b:10:39:49:2d: 77:ec:2a:fa:ed:b6:e4:a0:99:12:16:bc:13:fe:e9:27:fd:b3: 19:42:35:a9:ff:a4:27:c0:cb:ef:c1:85:8f:8e:0b:d5:57:b5: e1:8e:3f:54:dd:d3:ed:75:df:21:6c:61:51:a4:26:9f:1c:89: 97:60:1f:da:97:3a:f2:cd:c2:f4:c9:12:d2:55:1f:b0:6d:42: cc:c2:e6:be:20:bb:6a:16:58:bf:2a:24:a0:c0:61:1e:cc:81: 34:aa:43:cc:c3:e9:ac:5d:87:4c:01:20:c7:4d:eb:36:ab:ce: 4b:f3:8e:dc:4b:ba:8c:b7:66:ec:e6:a0:6a:64:38:ed:1e:c3: 15:8a:10:76:82:ee:e0:01:37:31:a9:7e:bc:02:03:10:c1:f4: 4f:a2:b2:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaQ3qTDPseKUC+wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MjJhNGI2YjAtNzllOC00NDBiLWI3M2UtNDRkZWUyYjhlNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL19g9brbjeULsmzxOUtOHJ4YbU0i+w6LMES YNwDWg9cAXhj64O5nMXUH0gIvEjkgHai63JpcEamAM3I+XRl38S90MeTzpUDk28+ 5zi/jE4eFFbYcivRMzuF65/AWZ1UFiYc/9GZmPAqGGjD4GI5Vx4N8cFRMX6MGcLN 9czNPzPw6ruoqT0pcoerH45PS1IGG9CKYE3Od9lJvKmu5F/q7mS3Qe8mSH7E3Lwp jKfrekB5jj8CnjgUh4y5ie9Z5EjKxpu4VrUDKdMtG+viQtfhgRKyjhNUGdVEsaK5 QZaBAOD8zzdx+H2/aRn+H2kDOiNIWVHdphdoF1AJaJSftG+CmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs668BWukqrqYzoRDnWPgOjMBo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzhjMjQxNDctNzVlYy0z NWUzLWEzNTAtMmRhNTcwYTM2NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPzXkzzayW5i42oIEsbe7/ELzjcE6c/txCmqMz9Eoj4g4E8DNqnuN2i aSVPwRldYXTy/a6teuq+7MmEcOl1zW7ysY/LJNx3tmkmAg/FCH33jQ2ObmEbfnhW ZKlATBbGNIIWlc2pz3yLEDlJLXfsKvrttuSgmRIWvBP+6Sf9sxlCNan/pCfAy+/B hY+OC9VXteGOP1Td0+113yFsYVGkJp8ciZdgH9qXOvLNwvTJEtJVH7BtQszC5r4g u2oWWL8qJKDAYR7MgTSqQ8zD6axdh0wBIMdN6zarzkvzjtxLuoy3ZuzmoGpkOO0e wxWKEHaC7uABNzGpfrwCAxDB9E+iso4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:51 2026 by rpki-client