$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa File: d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa (raw, json) Hash identifier: Y4yYumdSaqeUtRzfyx9VR5YpH/kWc2WiGkMvEvZk3z8= Subject key identifier: 06:19:E7:83:F8:6E:2D:C6:5A:65:42:47:CB:3C:E8:C4:96:1E:81:42 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9FAC55494D33AC73FDC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:9f:ac:55:49:4d:33:ac:73:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=475360cc-722a-4d0e-a9a2-6a299f409757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:35:03:fa:10:c2:cb:64:26:3a:93:4b:76: ee:ba:2b:ae:bc:2a:d4:4f:c8:d4:bb:cd:99:54:c8: 17:93:72:09:a1:1d:72:6f:5c:42:c2:ae:c2:89:e5: 7c:d1:17:24:fc:04:e3:80:ad:57:ee:b4:2f:65:23: bc:d3:e7:ee:bc:ce:17:e6:81:2d:cb:fd:89:94:01: 43:69:f7:df:97:60:72:4c:8c:c3:67:13:65:00:53: c2:da:0c:b2:fe:72:6c:50:c3:e8:6d:fd:33:bd:d9: e0:76:c8:63:4e:6c:f8:17:a9:0b:64:b9:fa:b9:4d: b2:cf:fc:46:db:25:04:ef:bb:39:91:62:8f:f2:3a: 77:85:94:88:c4:e5:e8:e4:d1:d4:1b:a2:fb:bf:71: a1:6d:96:30:de:a9:e2:9d:4f:33:eb:a5:db:8c:92: 27:41:91:d7:f0:a5:54:39:a9:43:f6:24:5a:09:40: 98:7b:62:50:7c:dc:dd:ff:75:3b:1a:33:48:aa:90: 3c:40:c1:3e:b5:60:b9:c6:4a:19:c3:97:2e:50:33: 98:36:43:32:c1:d9:6c:7e:d5:e9:e4:07:65:cc:70: 06:df:cf:be:3a:0b:36:95:86:a5:cc:d7:66:60:4c: 55:af:4d:45:d1:b9:85:b7:e4:18:3c:9a:84:a3:59: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:19:E7:83:F8:6E:2D:C6:5A:65:42:47:CB:3C:E8:C4:96:1E:81:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d6:4f:15:81:42:e8:91:4b:02:04:57:92:b0:93:b4:9f:83: 63:31:e6:14:14:ab:4e:02:de:f8:a4:74:65:f3:bf:40:60:fc: 8d:d0:15:4d:03:2d:2b:99:5b:c2:fa:d5:0a:6a:38:e2:de:40: 6d:08:0e:6c:3d:0e:c4:da:3f:dc:b4:65:a2:5c:3a:d4:03:68: 8f:72:18:25:d1:79:38:c1:d3:b8:87:b6:32:10:0b:1d:c7:32: e1:ce:31:85:6b:3b:01:c3:50:4f:e6:15:d5:52:9a:fd:5c:63: 48:56:bf:de:5e:ed:24:c6:99:7b:ab:73:d0:1c:e5:eb:8b:24: 46:c9:0f:5e:27:fc:02:4a:a3:3d:e1:6b:0f:4c:f4:71:4b:3a: 35:d2:5a:05:2d:34:9b:c2:ac:21:a7:b9:1e:03:c2:0e:e3:0b: 39:a5:27:8e:78:fb:ab:7f:f6:a8:49:11:4a:41:7a:de:f7:0c: 9c:41:d6:49:5f:be:10:fc:42:81:8e:b6:7f:86:d8:71:2b:c0: a7:59:92:64:d7:9a:5b:18:aa:ea:a2:ea:58:6c:af:44:38:17: c7:8a:ba:cc:27:00:9e:cb:21:4d:a9:d0:41:29:9b:56:ca:9f: 3b:af:a3:bb:d0:74:41:53:be:53:46:bd:2a:37:9a:79:3e:e8: 1b:04:79:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZ+sVUlNM6xz/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDc1MzYwY2MtNzIyYS00ZDBlLWE5YTItNmEyOTlmNDA5NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf81A/oQwstkJjqTS3buuiuuvCrUT8jUu82Z VMgXk3IJoR1yb1xCwq7CieV80Rck/ATjgK1X7rQvZSO80+fuvM4X5oEty/2JlAFD afffl2ByTIzDZxNlAFPC2gyy/nJsUMPobf0zvdngdshjTmz4F6kLZLn6uU2yz/xG 2yUE77s5kWKP8jp3hZSIxOXo5NHUG6L7v3GhbZYw3qninU8z66XbjJInQZHX8KVU OalD9iRaCUCYe2JQfNzd/3U7GjNIqpA8QME+tWC5xkoZw5cuUDOYNkMywdlsftXp 5AdlzHAG38++Ogs2lYalzNdmYExVr01F0bmFt+QYPJqEo1mqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYZ54P4bi3GWmVCR8s86MSWHoFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDBkNjNhYmMtNGNkNS0z MTIzLTg2ODEtM2ViM2I5ZjY2MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfWTxWBQuiRSwIEV5Kwk7Sfg2Mx5hQUq04C3vikdGXzv0Bg/I3QFU0D LSuZW8L61QpqOOLeQG0IDmw9DsTaP9y0ZaJcOtQDaI9yGCXReTjB07iHtjIQCx3H MuHOMYVrOwHDUE/mFdVSmv1cY0hWv95e7STGmXurc9Ac5euLJEbJD14n/AJKoz3h aw9M9HFLOjXSWgUtNJvCrCGnuR4Dwg7jCzmlJ454+6t/9qhJEUpBet73DJxB1klf vhD8QoGOtn+G2HErwKdZkmTXmlsYquqi6lhsr0Q4F8eKuswnAJ7LIU2p0EEpm1bK nzuvo7vQdEFTvlNGvSo3mnk+6BsEeW4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:39:22 2026 by rpki-client