$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa File: cecb8fd1-3349-3a59-8802-c852e28ef747.roa (raw, json) Hash identifier: LUCgU36eqYzraUzwQR1QoeKtqXYT0/CpHnfbk7iltOo= Subject key identifier: 75:2A:75:BC:5C:CB:FD:D8:4C:F2:E2:6D:D6:99:88:E9:F7:A1:C4:B5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A5DB26A0693354C62EC30 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 15169 IP address blocks: 104.134.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:5d:b2:6a:06:93:35:4c:62:ec:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=e66fc5ba-93b8-4305-b7a7-7a64e6a13f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:07:1b:ba:7b:39:c3:d3:16:9e:83:1b:2c: e6:f8:ee:64:2b:14:3f:52:35:f8:aa:4c:3e:e7:92: b1:9a:b0:51:2d:ca:d7:9a:f2:f3:3e:54:c8:a4:fa: 93:b4:5c:eb:7f:6a:35:32:44:33:35:38:11:a5:4a: 02:ac:ba:bc:3a:2b:a2:b6:eb:37:60:64:a5:f2:40: 7d:f6:2d:0c:7c:5d:2d:99:53:35:c9:b0:9e:d2:19: 17:94:02:e6:4b:f0:59:81:d1:34:f0:b0:85:fa:d2: a4:b2:f0:c8:88:25:c8:03:07:49:0e:94:3d:18:1a: 2e:82:b2:30:8e:43:34:25:03:a1:24:1f:0c:10:3b: 42:d7:2a:16:de:fb:2c:75:1f:d2:5d:c1:3e:25:de: 4b:fb:2b:24:27:97:e0:41:1e:81:2b:b5:7b:5f:92: 64:80:82:c7:b7:8e:4b:5b:85:c5:d6:3e:fd:9f:a4: dc:fa:dd:94:dc:ec:d3:1d:70:fb:15:3f:24:e5:dc: ea:45:2d:03:f9:4c:84:01:1f:b8:70:d4:d5:4e:6b: e3:66:cd:8b:4c:bf:c7:60:6e:09:c1:96:d1:eb:02: 64:4a:ec:e3:78:71:62:87:ec:ea:0c:01:a5:e4:28: c2:2c:e8:96:c1:7f:e1:ca:fd:ae:b1:7b:6b:04:52: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2A:75:BC:5C:CB:FD:D8:4C:F2:E2:6D:D6:99:88:E9:F7:A1:C4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cecb8fd1-3349-3a59-8802-c852e28ef747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ff:88:75:4d:f9:55:72:be:d3:8b:7c:9b:d2:4a:58:90:66: ae:ae:78:89:9e:dd:09:d8:e6:bd:07:87:88:1b:4b:ac:9b:bf: 7f:d9:20:c5:58:75:05:19:e6:86:46:ae:8c:b7:a5:05:7a:99: 70:66:f6:b8:fb:11:ee:3e:ad:b6:3b:1d:ff:67:31:77:76:03: cb:49:a0:88:63:24:0a:d9:fc:af:4f:c7:0c:f8:81:55:d0:ff: f5:f4:ec:21:46:d6:cf:83:14:05:54:8c:c1:cb:3e:4a:63:1a: 89:95:b9:70:24:98:71:05:0d:23:1a:a5:27:24:07:ee:af:fd: ee:20:c3:ff:0f:0f:01:1c:1b:be:9f:1c:6e:c5:de:5f:4f:64: 5c:91:f4:30:0e:80:16:bb:67:54:52:cd:0b:9f:a8:73:79:89: dd:09:74:7f:8f:ff:54:26:8d:0e:bb:dc:ca:7f:72:f5:db:d2: ca:42:19:db:ae:4a:f1:fd:53:30:ff:a9:54:2e:eb:3a:8c:18: 06:d4:c4:a0:d4:74:15:94:1b:50:67:3b:e7:91:a1:6d:df:55: 7b:d8:bd:15:c5:80:82:24:7c:0a:ab:0b:ca:1c:98:3a:42:50: ef:20:9c:1a:3e:be:62:ad:30:34:ac:07:28:85:8c:3f:2b:a3: 20:b7:21:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSl2yagaTNUxi7DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZTY2ZmM1YmEtOTNiOC00MzA1LWI3YTctN2E2NGU2YTEzZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtckHG7p7OcPTFp6DGyzm+O5kKxQ/UjX4qkw+ 55KxmrBRLcrXmvLzPlTIpPqTtFzrf2o1MkQzNTgRpUoCrLq8Oiuitus3YGSl8kB9 9i0MfF0tmVM1ybCe0hkXlALmS/BZgdE08LCF+tKksvDIiCXIAwdJDpQ9GBougrIw jkM0JQOhJB8MEDtC1yoW3vssdR/SXcE+Jd5L+yskJ5fgQR6BK7V7X5JkgILHt45L W4XF1j79n6Tc+t2U3OzTHXD7FT8k5dzqRS0D+UyEAR+4cNTVTmvjZs2LTL/HYG4J wZbR6wJkSuzjeHFih+zqDAGl5CjCLOiWwX/hyv2usXtrBFI+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUqdbxcy/3YTPLibdaZiOn3ocS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2VjYjhmZDEtMzM0OS0z YTU5LTg4MDItYzg1MmUyOGVmNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP/iHVN+VVyvtOLfJvSSliQZq6ueIme3QnY5r0Hh4gbS6ybv3/ZIMVY dQUZ5oZGroy3pQV6mXBm9rj7Ee4+rbY7Hf9nMXd2A8tJoIhjJArZ/K9Pxwz4gVXQ //X07CFG1s+DFAVUjMHLPkpjGomVuXAkmHEFDSMapSckB+6v/e4gw/8PDwEcG76f HG7F3l9PZFyR9DAOgBa7Z1RSzQufqHN5id0JdH+P/1QmjQ673Mp/cvXb0spCGduu SvH9UzD/qVQu6zqMGAbUxKDUdBWUG1BnO+eRoW3fVXvYvRXFgIIkfAqrC8ocmDpC UO8gnBo+vmKtMDSsByiFjD8royC3ISA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:46 2026 by rpki-client