$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf1cdd79-6f23-378f-9067-cae0eabb1491.roa File: cf1cdd79-6f23-378f-9067-cae0eabb1491.roa (raw, json) Hash identifier: t6k9KGAVXUxhfkWNLB2dTbZP9bpD1CRpH9KxHE3aXpE= Subject key identifier: BF:BB:9D:12:68:F6:A1:AA:21:C0:87:60:FD:6A:0D:8B:E5:EE:79:EF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117282B01DAED7029399BC80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf1cdd79-6f23-378f-9067-cae0eabb1491.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:82:b0:1d:ae:d7:02:93:99:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=0a865910-6d52-4e8d-bcae-94fb593d962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:51:75:1d:c1:4f:b7:bd:40:de:6e:7a:c6: b4:45:68:6e:c1:7f:e3:bc:57:99:41:a1:e2:df:75: 0e:ee:7c:73:9c:67:76:e9:0c:38:77:90:d4:c4:92: 4c:41:16:46:0e:a0:41:6a:4b:9d:2d:2f:4f:a8:2d: a9:ed:26:12:51:de:ac:77:11:c7:d3:71:3a:76:d5: f5:45:8a:98:a8:36:54:b5:01:f8:5e:27:3d:6e:08: 2a:79:2e:7c:b0:2a:7f:39:1a:f6:9e:f2:fc:f7:ae: c3:c1:1d:c5:fc:12:21:07:6f:ca:91:ac:e6:3d:e0: c8:ee:af:57:4e:90:8d:4a:42:f5:47:7f:59:40:3b: 5f:a3:a1:74:0d:1e:62:3d:0a:0c:97:43:3a:14:35: 75:05:b4:7f:16:12:8c:12:f6:63:80:ea:11:92:0b: 1d:d7:e2:0f:e1:85:49:35:8d:db:96:e0:c1:75:38: a4:5b:8f:91:03:0e:3d:5b:05:44:0e:ec:4a:12:41: 44:b9:25:7b:24:c6:af:a7:a9:69:71:5c:fd:cd:e2: 63:a0:ba:dd:f3:fc:4f:34:84:b4:d0:43:af:cc:da: c5:b1:61:84:ad:d7:e7:9c:c0:ac:7f:da:46:6c:e9: 38:2c:c1:e4:56:d7:1d:fa:0f:f1:ca:0e:d1:b4:aa: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BB:9D:12:68:F6:A1:AA:21:C0:87:60:FD:6A:0D:8B:E5:EE:79:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf1cdd79-6f23-378f-9067-cae0eabb1491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5b:7f:d9:9e:e7:73:ac:6f:72:a7:24:8e:96:79:88:9b:23: 35:98:2e:78:d5:75:76:62:e3:99:43:4b:a4:7b:bc:6f:70:c0: aa:36:55:20:e4:6b:2a:eb:b2:e6:a0:06:f4:11:9c:1b:ce:93: e7:4a:52:80:a3:19:15:4d:37:d4:d0:e8:3d:c0:29:5b:cb:7e: 36:9a:c2:91:31:3f:d1:2e:2e:a3:16:3a:71:ae:e1:2d:0e:8f: 3d:04:99:8e:a6:2d:68:5e:e6:b4:02:c7:fe:c7:fe:63:c1:54: 46:dc:f1:83:45:8e:f0:ef:ed:1e:5d:00:96:93:fd:eb:c3:72: fa:da:e3:63:2a:1e:c6:a0:84:e2:f4:61:9e:81:00:30:41:36: 5a:b9:0a:e6:f9:fa:80:d2:f3:a3:f5:99:7a:39:21:4e:f1:81: 5f:d0:80:98:ca:96:9c:6f:c7:38:30:43:21:8b:c0:71:ee:e3: bb:d5:70:0d:df:c6:b8:a9:1a:5a:e9:ec:ba:9d:ad:06:23:fd: 26:39:24:fa:9b:3b:24:b4:a2:06:d1:96:83:9e:0e:42:da:c5: f5:b6:89:f7:6e:32:ce:95:4c:54:9a:ce:ff:d2:e4:7e:04:5d: 27:ff:0b:ae:a1:9b:0a:c2:99:3b:e6:27:f3:fc:0e:b6:3f:f6: f0:e4:5e:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoKwHa7XApOZvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MGE4NjU5MTAtNmQ1Mi00ZThkLWJjYWUtOTRmYjU5M2Q5NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMFRdR3BT7e9QN5uesa0RWhuwX/jvFeZQaHi 33UO7nxznGd26Qw4d5DUxJJMQRZGDqBBakudLS9PqC2p7SYSUd6sdxHH03E6dtX1 RYqYqDZUtQH4Xic9bggqeS58sCp/ORr2nvL8967DwR3F/BIhB2/KkazmPeDI7q9X TpCNSkL1R39ZQDtfo6F0DR5iPQoMl0M6FDV1BbR/FhKMEvZjgOoRkgsd1+IP4YVJ NY3bluDBdTikW4+RAw49WwVEDuxKEkFEuSV7JMavp6lpcVz9zeJjoLrd8/xPNIS0 0EOvzNrFsWGErdfnnMCsf9pGbOk4LMHkVtcd+g/xyg7RtKpMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+7nRJo9qGqIcCHYP1qDYvl7nnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YxY2RkNzktNmYyMy0z NzhmLTkwNjctY2FlMGVhYmIxNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApbf9me53Osb3KnJI6WeYibIzWYLnjVdXZi45lDS6R7vG9wwKo2VSDk ayrrsuagBvQRnBvOk+dKUoCjGRVNN9TQ6D3AKVvLfjaawpExP9EuLqMWOnGu4S0O jz0EmY6mLWhe5rQCx/7H/mPBVEbc8YNFjvDv7R5dAJaT/evDcvra42MqHsaghOL0 YZ6BADBBNlq5Cub5+oDS86P1mXo5IU7xgV/QgJjKlpxvxzgwQyGLwHHu47vVcA3f xripGlrp7LqdrQYj/SY5JPqbOyS0ogbRloOeDkLaxfW2ifduMs6VTFSazv/S5H4E XSf/C66hmwrCmTvmJ/P8DrY/9vDkXtE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:16 2026 by rpki-client