$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa File: c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa (raw, json) Hash identifier: oXqjGqi7hD/Aebe803gxtEvcstgmQi1IvSW1Jr1RkiM= Subject key identifier: CE:BC:A6:C7:07:0E:7E:A5:7C:C4:C0:E2:7A:52:D3:B6:2E:28:97:72 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D92E432B5F9E24FE94280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:92:e4:32:b5:f9:e2:4f:e9:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=cb1e3505-65d5-4008-9d58-d0c38b7cb9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:7b:86:4c:6e:d0:1d:9a:3d:c1:97:55:e9: a8:ce:65:e9:51:a7:dd:58:71:da:f7:40:6b:10:0e: c8:d0:66:21:0a:06:df:d2:fc:cf:29:f4:14:a2:22: ca:e9:9d:fc:a2:dc:ef:cb:38:66:50:b3:36:a6:d8: 8e:7e:6a:dc:b6:7f:d1:34:1d:ef:06:48:90:54:5f: ad:3e:e4:83:56:5d:4c:2d:9d:21:37:64:e5:16:16: 2c:2a:e1:9c:cb:d2:d8:3d:59:f3:6b:bf:8f:d4:ae: 74:2c:44:fb:a6:f0:a6:d0:8b:77:f3:4a:0f:09:ac: 1b:d2:f2:76:5a:25:e4:7e:33:0c:b9:56:f2:5a:a6: 5e:29:8e:c4:32:24:9c:67:07:2f:2b:ad:b9:bc:37: a6:89:0a:e5:d5:f3:d4:02:78:ab:f2:0c:2c:37:97: 07:61:a1:14:7c:a9:08:5c:05:94:da:53:29:99:90: e8:1f:d6:ed:67:98:b2:16:23:58:d4:30:0c:bb:4f: a5:9e:0f:1d:f7:a5:a5:ef:c1:6c:5f:87:52:33:8e: 8c:c9:26:d2:d0:28:58:6c:a0:fb:ea:5c:5d:6b:51: 07:5a:6e:6b:fc:cb:03:0f:b9:ef:78:2e:57:e6:aa: dc:71:06:f9:ae:0c:da:21:23:d3:c6:d9:89:8a:14: 46:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:A6:C7:07:0E:7E:A5:7C:C4:C0:E2:7A:52:D3:B6:2E:28:97:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e0deaf-24b4-3941-8a38-be8f042ebfbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b7:f1:88:c5:d2:48:88:43:80:32:2a:31:cb:0b:a3:6c:3c: 5d:2a:58:60:b4:75:ff:6f:40:3d:70:89:4b:5d:6f:8e:33:23: 11:84:61:97:cc:3d:f2:af:22:25:41:ca:d0:06:dd:fb:b1:07: 0d:58:6c:f7:44:3f:44:8d:18:d9:d9:12:51:6a:91:8b:7a:ec: 74:86:cd:3a:00:c9:db:b6:e9:11:80:74:84:03:1c:40:d2:f3: cd:36:d8:88:d2:7f:17:f0:33:85:0f:e4:45:3b:5a:3a:71:c4: f7:31:b8:28:7c:3a:8c:55:39:45:fe:ff:e2:4a:96:e4:0e:1a: f4:43:9e:f8:05:a0:22:bb:09:0a:17:e0:ae:bc:72:45:9f:36: ab:89:f1:be:df:33:2d:07:90:b9:86:00:f0:58:94:af:dc:70: dd:b4:fa:76:e2:e5:15:5a:14:c6:25:c6:78:57:e9:85:fe:d9: 21:eb:c7:45:b4:ff:92:11:1e:30:b6:69:bd:e6:5c:f0:e5:91: 88:23:ea:cb:47:81:d6:41:08:4c:f7:6d:a8:5d:f6:db:3d:62: 19:ae:ce:da:2d:63:81:a9:9a:96:e2:83:17:74:c6:59:47:bb: 61:7e:24:6e:2e:80:d1:20:f5:f3:92:b3:46:fc:ff:fd:71:fd: d9:dd:15:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZLkMrX54k/pQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2IxZTM1MDUtNjVkNS00MDA4LTlkNTgtZDBjMzhiN2NiOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrB7hkxu0B2aPcGXVemozmXpUafdWHHa90Br EA7I0GYhCgbf0vzPKfQUoiLK6Z38otzvyzhmULM2ptiOfmrctn/RNB3vBkiQVF+t PuSDVl1MLZ0hN2TlFhYsKuGcy9LYPVnza7+P1K50LET7pvCm0It380oPCawb0vJ2 WiXkfjMMuVbyWqZeKY7EMiScZwcvK625vDemiQrl1fPUAnir8gwsN5cHYaEUfKkI XAWU2lMpmZDoH9btZ5iyFiNY1DAMu0+lng8d96Wl78FsX4dSM46MySbS0ChYbKD7 6lxda1EHWm5r/MsDD7nveC5X5qrccQb5rgzaISPTxtmJihRGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM68pscHDn6lfMTA4npS07YuKJdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzhlMGRlYWYtMjRiNC0z OTQxLThhMzgtYmU4ZjA0MmViZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK38YjF0kiIQ4AyKjHLC6NsPF0qWGC0df9vQD1wiUtdb44zIxGEYZfM PfKvIiVBytAG3fuxBw1YbPdEP0SNGNnZElFqkYt67HSGzToAydu26RGAdIQDHEDS 88022IjSfxfwM4UP5EU7WjpxxPcxuCh8OoxVOUX+/+JKluQOGvRDnvgFoCK7CQoX 4K68ckWfNquJ8b7fMy0HkLmGAPBYlK/ccN20+nbi5RVaFMYlxnhX6YX+2SHrx0W0 /5IRHjC2ab3mXPDlkYgj6stHgdZBCEz3bahd9ts9YhmuztotY4Gpmpbigxd0xllH u2F+JG4ugNEg9fOSs0b8//1x/dndFdo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:55 2026 by rpki-client