$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa File: cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa (raw, json) Hash identifier: 75IfHxmMsqTGl82jtdOe0lAvH5ilcCT0syw/Dhorq8g= Subject key identifier: 9B:49:65:85:F4:1E:D4:F8:AA:98:F1:A6:1E:F0:CA:FA:B9:26:1D:8E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1172912FE4738B6B45D7D000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:91:2f:e4:73:8b:6b:45:d7:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=3108a9a8-32ac-4a80-a4b4-cc6446d2f4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:54:d0:f5:1f:9b:59:e4:d1:8a:27:52:0c: e6:5c:44:3a:ee:24:8d:d7:d2:b6:14:c7:c4:fd:8b: 9e:ea:62:34:44:ca:0d:0a:fb:17:7b:b2:69:b1:d2: 89:c0:2e:df:a2:7b:c4:fe:d0:f1:b1:ad:8a:da:3f: 41:73:15:b8:30:d1:ea:0b:04:91:8a:8d:ec:51:bc: 2f:89:65:f8:de:a9:4d:4d:44:09:ee:92:ac:45:51: 16:06:b4:35:9a:e3:78:4f:27:b5:44:48:ef:1f:96: b3:2e:21:a9:f0:1d:6a:f8:74:56:4e:21:01:c2:71: 0a:44:1a:6d:e1:73:3a:7f:42:2d:ab:8e:84:7c:95: c0:19:9c:96:fa:98:fa:a2:3b:85:1a:6e:b7:98:bd: ed:7c:14:ee:e2:8d:08:ed:26:ba:7e:6d:a1:5c:4f: e1:7e:ac:34:6b:e3:3b:e1:9f:c9:f5:22:44:37:ac: c9:2b:f3:52:56:1d:ff:17:e1:a1:26:01:3c:5b:18: 5a:19:c8:34:b5:6a:03:94:79:23:b0:5c:c3:29:83: 0d:7f:ac:41:04:f6:c7:71:23:26:94:34:20:72:80: 3d:ed:c8:30:c3:f6:34:eb:84:66:5b:3c:a8:39:50: 9d:b9:eb:da:c8:75:8e:a0:51:51:21:d1:7a:63:97: a3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:49:65:85:F4:1E:D4:F8:AA:98:F1:A6:1E:F0:CA:FA:B9:26:1D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:a7:96:f5:51:25:98:c0:79:5b:2d:bf:d3:71:da:60:05:72: 39:7b:0a:c5:79:ba:85:89:3e:44:82:af:96:97:f9:4f:ec:a4: e0:b2:87:59:3a:60:87:b4:d7:f9:69:c7:8a:48:16:28:df:13: 61:e1:6e:40:d3:c5:02:61:c3:20:86:e0:a0:6b:db:72:2c:f0: c9:60:cf:c5:f7:66:f4:15:84:e2:cd:7c:40:e0:6c:9a:cc:03: f2:aa:c9:78:7c:b1:66:d7:91:8b:fc:9b:e1:03:db:28:4d:eb: 1d:f1:65:c1:70:5c:35:10:4b:2c:f4:7c:d0:cb:db:42:72:d4: 42:76:59:39:94:e7:56:80:11:7a:aa:7e:a1:e6:ad:76:f2:79: 94:6e:23:e1:95:99:d0:40:95:ea:d5:66:e9:0f:95:82:a2:6b: f6:57:4a:b1:8b:91:a2:33:21:51:25:63:00:d3:d8:18:96:20: 39:83:24:9f:30:57:5e:05:2e:a6:b3:45:2a:a4:34:74:89:a4: 3a:a2:04:3f:d2:84:21:05:29:4c:e7:dc:8d:e0:ae:3b:2a:d4: a6:3b:cb:d4:44:8e:fc:19:5e:7a:70:e2:bd:01:8c:90:de:17: 28:41:bd:ac:21:00:a7:76:c0:6e:68:0c:35:81:bd:17:ef:de: 51:d6:26:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcpEv5HOLa0XX0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MzEwOGE5YTgtMzJhYy00YTgwLWE0YjQtY2M2NDQ2ZDJmNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmulU0PUfm1nk0YonUgzmXEQ67iSN19K2FMfE /Yue6mI0RMoNCvsXe7JpsdKJwC7fonvE/tDxsa2K2j9BcxW4MNHqCwSRio3sUbwv iWX43qlNTUQJ7pKsRVEWBrQ1muN4Tye1REjvH5azLiGp8B1q+HRWTiEBwnEKRBpt 4XM6f0Itq46EfJXAGZyW+pj6ojuFGm63mL3tfBTu4o0I7Sa6fm2hXE/hfqw0a+M7 4Z/J9SJEN6zJK/NSVh3/F+GhJgE8WxhaGcg0tWoDlHkjsFzDKYMNf6xBBPbHcSMm lDQgcoA97cgww/Y064RmWzyoOVCduevayHWOoFFRIdF6Y5ejSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtJZYX0HtT4qpjxph7wyvq5Jh2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2FmZDFiYzEtZTY5YS0z NmZkLTlmODktYzgzZmEzN2Q2YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKnlvVRJZjAeVstv9Nx2mAFcjl7CsV5uoWJPkSCr5aX+U/spOCyh1k6 YIe01/lpx4pIFijfE2HhbkDTxQJhwyCG4KBr23Is8Mlgz8X3ZvQVhOLNfEDgbJrM A/KqyXh8sWbXkYv8m+ED2yhN6x3xZcFwXDUQSyz0fNDL20Jy1EJ2WTmU51aAEXqq fqHmrXbyeZRuI+GVmdBAlerVZukPlYKia/ZXSrGLkaIzIVElYwDT2BiWIDmDJJ8w V14FLqazRSqkNHSJpDqiBD/ShCEFKUzn3I3grjsq1KY7y9REjvwZXnpw4r0BjJDe FyhBvawhAKd2wG5oDDWBvRfv3lHWJjE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:23 2026 by rpki-client