$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa File: d57ca891-b161-3132-ab8b-ca273d80971e.roa (raw, json) Hash identifier: S8HjS1CoYh+Xv7skdrqAi6FmhngGUL+LJmcifNSHjKk= Subject key identifier: 16:21:A1:B6:59:83:E0:DD:C5:37:EE:C9:62:C9:3D:FD:AB:99:27:89 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A774E9EF9B914F30C3F00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395973 IP address blocks: 104.134.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:77:4e:9e:f9:b9:14:f3:0c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=aa0154b9-8ea2-4f96-a4c4-83bd565076bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:ed:43:0d:bb:da:34:50:8e:87:75:ce:74: 6f:65:77:32:78:53:06:e6:57:fc:ad:3e:8a:01:52: 7e:84:db:a9:37:cf:bc:1f:ed:23:00:1c:a6:a0:4a: 29:70:53:a0:a1:c7:58:87:c3:7a:c1:6a:48:1b:11: 09:16:9d:2e:f8:0d:f6:ef:e4:cf:37:f4:cf:0f:f5: 2f:84:8b:7b:dc:0f:fe:c4:47:38:de:ea:dd:bd:5e: 64:0b:f2:96:e3:50:8d:fb:4b:5a:29:8e:ed:b2:28: ec:33:56:bd:f5:fd:76:9d:80:21:1b:b6:51:2b:d1: 47:8e:dc:5b:af:a5:34:2d:bc:37:38:0d:91:2a:3d: 81:7e:70:d8:0d:95:0c:1a:9c:ba:45:b0:d3:a3:d0: 6f:d7:29:bf:e4:01:cc:46:9e:cd:da:38:23:0d:d2: 3e:9b:71:82:66:5f:ac:f9:aa:5e:be:2a:91:21:72: ec:cc:bc:45:6b:8a:1f:56:97:da:62:88:e9:ca:af: 98:d0:cd:ae:6d:66:6e:53:ce:c6:d6:ba:10:d0:6f: 24:69:09:1a:f7:be:f0:db:85:6f:7e:ec:23:9c:ff: 1f:e6:5d:fa:83:a9:d8:80:a1:81:84:89:2c:37:25: 57:ce:37:2b:7c:61:b7:26:cc:2a:17:4d:11:e2:ff: ae:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:21:A1:B6:59:83:E0:DD:C5:37:EE:C9:62:C9:3D:FD:AB:99:27:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d57ca891-b161-3132-ab8b-ca273d80971e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:6b:1f:e8:27:a9:b8:a6:8f:60:46:0a:f0:5e:cb:e9:1a:fa: eb:9b:e6:9d:2e:f3:5a:aa:6c:13:7b:04:51:1c:13:21:35:48: 6b:eb:d9:30:86:7d:82:68:4d:e9:69:ef:1c:4a:c2:8c:02:2a: f5:c6:48:20:98:b8:69:df:ed:59:5b:e3:92:30:d8:a3:01:9c: a2:7d:6c:cf:22:c5:1b:34:fe:22:0f:3b:65:64:e0:02:e6:d0: 6a:9f:f7:a9:45:58:6c:03:82:51:56:54:e7:02:4a:5d:28:6d: 8c:a0:c5:93:49:5c:5f:1e:bb:ea:3b:62:36:67:f6:83:e2:83: e9:2e:0f:cb:88:0d:60:ae:6f:a1:f5:64:0e:f9:8b:f3:70:bf: 29:f3:c3:da:6e:9a:4c:8e:d2:2e:39:fb:4d:68:aa:e2:46:98: 8d:c1:de:ec:97:98:d2:be:ba:d7:97:8c:b3:87:22:14:5b:30: 9f:87:09:48:75:20:1d:9a:ff:b8:ed:c0:90:0d:cb:b0:ba:67: 9c:c1:ac:e4:a4:0c:f3:cf:4e:7b:0e:79:d7:3e:39:3e:f9:e6: 21:81:50:88:f7:92:58:f5:b4:c2:04:3f:35:7e:98:66:9c:f2: d3:4a:ec:26:ca:2e:bc:25:6c:04:a6:51:51:80:62:4f:17:f8: d5:db:4b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSndOnvm5FPMMPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YWEwMTU0YjktOGVhMi00Zjk2LWE0YzQtODNiZDU2NTA3NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIztQw272jRQjod1znRvZXcyeFMG5lf8rT6K AVJ+hNupN8+8H+0jABymoEopcFOgocdYh8N6wWpIGxEJFp0u+A327+TPN/TPD/Uv hIt73A/+xEc43urdvV5kC/KW41CN+0taKY7tsijsM1a99f12nYAhG7ZRK9FHjtxb r6U0Lbw3OA2RKj2BfnDYDZUMGpy6RbDTo9Bv1ym/5AHMRp7N2jgjDdI+m3GCZl+s +apeviqRIXLszLxFa4ofVpfaYojpyq+Y0M2ubWZuU87G1roQ0G8kaQka977w24Vv fuwjnP8f5l36g6nYgKGBhIksNyVXzjcrfGG3JswqF00R4v+uSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYhobZZg+DdxTfuyWLJPf2rmSeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDU3Y2E4OTEtYjE2MS0z MTMyLWFiOGItY2EyNzNkODA5NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIa+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAprH+gnqbimj2BGCvBey+ka+uub5p0u81qqbBN7BFEcEyE1SGvr2TCG fYJoTelp7xxKwowCKvXGSCCYuGnf7Vlb45Iw2KMBnKJ9bM8ixRs0/iIPO2Vk4ALm 0Gqf96lFWGwDglFWVOcCSl0obYygxZNJXF8eu+o7YjZn9oPig+kuD8uIDWCub6H1 ZA75i/Nwvynzw9pumkyO0i45+01oquJGmI3B3uyXmNK+uteXjLOHIhRbMJ+HCUh1 IB2a/7jtwJANy7C6Z5zBrOSkDPPPTnsOedc+OT755iGBUIj3klj1tMIEPzV+mGac 8tNK7CbKLrwlbASmUVGAYk8X+NXbS8k= -----END CERTIFICATE-----Generated at Thu Mar 26 14:57:44 2026 by rpki-client