$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd08032f-3cd4-31c7-9476-d73ca3145fb2.roa File: cd08032f-3cd4-31c7-9476-d73ca3145fb2.roa (raw, json) Hash identifier: u18kTNfoSWNKwkBTL4u9in5RoBmPGnKpv43Fx0glufM= Subject key identifier: 08:E9:0A:66:15:B1:F0:CB:2B:25:F6:CE:66:1F:B6:F8:F8:12:91:0C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7CF723E4A205D3FDD5A00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd08032f-3cd4-31c7-9476-d73ca3145fb2.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:cf:72:3e:4a:20:5d:3f:dd:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=ad00bd43-17e5-492f-9f7c-0172d8d17655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e6:44:f9:8d:57:00:19:bc:18:86:34:b1:83: 3f:4e:5d:38:34:0a:83:a5:98:db:bb:c0:f0:24:fb: 61:00:1f:62:d2:8b:b3:55:89:84:f7:b2:c3:25:7c: 7e:f9:b0:60:8e:fc:aa:af:f5:0f:9b:10:5b:fe:d2: c7:9d:42:89:1f:19:c2:fa:d2:50:ba:95:96:26:56: 63:01:80:b8:e3:da:28:aa:bc:b1:94:02:97:1e:94: 83:73:a9:2e:fe:5c:c1:6f:36:76:cd:2b:fe:7a:61: 9e:f0:d2:39:66:aa:78:0b:69:ac:83:dc:8b:81:58: 33:e2:ef:c8:2b:c9:97:92:a0:a3:83:37:32:ce:62: 15:97:e1:3e:71:96:0c:19:a5:77:86:53:f0:9a:be: 99:64:b6:bf:66:fa:b4:48:67:8b:4a:3b:8d:43:ff: f7:02:f3:66:57:53:73:63:12:5f:a0:48:93:6e:08: 3e:97:ab:c6:87:51:5a:da:00:0e:3e:ed:07:76:e3: 84:00:d6:99:bd:50:fe:a8:65:52:f5:60:f3:54:7c: 4d:d2:d6:55:64:d9:3b:ec:b1:ce:dc:56:9d:c7:ae: 33:f7:99:f0:49:3c:e8:04:06:f7:30:ad:88:92:82: 01:58:92:a9:f0:13:47:70:eb:73:33:d1:79:d6:0a: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:0A:66:15:B1:F0:CB:2B:25:F6:CE:66:1F:B6:F8:F8:12:91:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd08032f-3cd4-31c7-9476-d73ca3145fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:33:a4:07:12:5f:59:cf:19:30:d6:9b:37:98:30:11:d3:54: 2a:81:0a:6c:7d:9d:4e:c6:d1:af:45:dd:91:0a:b3:b6:5e:86: 6b:10:5f:b2:59:b6:f1:4d:b5:51:ee:57:2c:0e:d2:a3:b3:f6: 35:a7:bf:8b:78:55:88:75:21:be:c3:86:6a:51:f1:8a:b1:60: 37:79:0d:2b:a5:0e:59:e2:c7:56:52:e2:2a:cc:a6:41:c1:c3: 32:4a:d3:a4:55:da:14:ca:c6:be:cf:39:7f:04:45:60:23:31: 57:09:6c:c7:ab:ab:2b:bf:8e:b6:95:a9:d2:be:77:78:90:b5: 3d:8b:6d:78:2a:76:5a:33:aa:c2:6f:49:ad:28:f4:4e:3a:4b: 57:1b:16:51:e4:6f:4f:f8:42:4b:83:4b:0e:6b:00:40:60:08: 91:3a:18:75:a5:83:02:25:ab:9a:c4:a1:35:54:40:93:3f:c2: 54:92:98:6e:2a:f3:09:5e:89:db:e7:5c:70:a6:01:2a:46:6e: 91:91:e6:ea:34:ff:68:f6:45:7c:35:d7:fe:8e:b6:8f:4c:cf: 03:5f:0a:c6:2a:ba:1b:ae:49:b2:33:8e:5e:ef:1d:96:37:41: ee:13:e4:ef:5d:09:e1:37:98:c8:84:ea:0a:49:70:d1:9f:82: cf:3d:bf:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op89yPkogXT/dWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YWQwMGJkNDMtMTdlNS00OTJmLTlmN2MtMDE3MmQ4ZDE3NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+ZE+Y1XABm8GIY0sYM/Tl04NAqDpZjbu8Dw JPthAB9i0ouzVYmE97LDJXx++bBgjvyqr/UPmxBb/tLHnUKJHxnC+tJQupWWJlZj AYC449ooqryxlAKXHpSDc6ku/lzBbzZ2zSv+emGe8NI5Zqp4C2msg9yLgVgz4u/I K8mXkqCjgzcyzmIVl+E+cZYMGaV3hlPwmr6ZZLa/Zvq0SGeLSjuNQ//3AvNmV1Nz YxJfoEiTbgg+l6vGh1Fa2gAOPu0HduOEANaZvVD+qGVS9WDzVHxN0tZVZNk77LHO 3Fadx64z95nwSTzoBAb3MK2IkoIBWJKp8BNHcOtzM9F51gqBuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjpCmYVsfDLKyX2zmYftvj4EpEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2QwODAzMmYtM2NkNC0z MWM3LTk0NzYtZDczY2EzMTQ1ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAzpAcSX1nPGTDWmzeYMBHTVCqBCmx9nU7G0a9F3ZEKs7ZehmsQX7JZ tvFNtVHuVywO0qOz9jWnv4t4VYh1Ib7DhmpR8YqxYDd5DSulDlnix1ZS4irMpkHB wzJK06RV2hTKxr7POX8ERWAjMVcJbMerqyu/jraVqdK+d3iQtT2LbXgqdlozqsJv Sa0o9E46S1cbFlHkb0/4QkuDSw5rAEBgCJE6GHWlgwIlq5rEoTVUQJM/wlSSmG4q 8wleidvnXHCmASpGbpGR5uo0/2j2RXw11/6Oto9MzwNfCsYquhuuSbIzjl7vHZY3 Qe4T5O9dCeE3mMiE6gpJcNGfgs89vwc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:20 2026 by rpki-client