$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d5c4d191-42f2-36d0-a265-f1e968e0272c.roa File: d5c4d191-42f2-36d0-a265-f1e968e0272c.roa (raw, json) Hash identifier: BHzbwVdvrsHqO7LvopuTh00Pg/lWhGC6AZ9i5qmWkUE= Subject key identifier: 2B:53:66:BE:D5:DB:2F:EC:F6:34:61:B9:37:4D:08:82:E3:0F:CF:E9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8C8623612994CD4D5700 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d5c4d191-42f2-36d0-a265-f1e968e0272c.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:8c:86:23:61:29:94:cd:4d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=fa2340c9-ff34-41f6-a030-2bf4b3891f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:81:26:76:c7:a7:d2:18:61:58:fc:17:38:dc: eb:92:7f:6c:52:88:9d:83:cd:4b:14:f0:ec:88:a8: dd:1c:ff:40:9f:f2:03:23:cd:0e:3d:1d:8b:dd:16: ab:d5:8e:46:9b:b3:0a:e5:ea:24:79:b8:e0:68:2a: 77:55:93:ca:40:d0:07:48:97:57:2e:8f:35:ad:29: 34:1c:07:33:65:bd:bb:42:ee:90:92:35:40:da:c5: b7:d1:c1:76:ca:7b:52:c9:2a:b9:d7:ff:6f:2c:20: f6:29:f4:89:a3:0e:c4:97:f9:41:04:a8:f0:a6:d7: ce:fc:68:9e:2c:f9:ad:10:a6:b2:a2:3e:21:c7:e8: 3a:8b:21:0b:e3:12:cf:14:59:0f:27:90:56:c6:8e: 5e:6b:b3:55:87:af:3a:ee:ad:f7:a1:e4:e3:6d:08: b7:97:97:37:5c:14:25:27:3a:30:f4:d9:2b:40:1d: f8:6f:cf:7d:00:b5:19:08:c6:25:7e:18:d0:b5:1a: 18:34:34:5b:23:33:81:b5:95:cd:59:1e:45:e2:64: da:87:2d:f8:a2:4d:d5:cb:d2:1f:2d:9b:7e:25:2a: f5:b6:61:3a:93:1a:a0:5c:f4:63:3c:e4:e9:4b:1d: 3e:7d:60:37:ac:d7:18:d5:6b:e4:f1:48:bf:6e:41: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:53:66:BE:D5:DB:2F:EC:F6:34:61:B9:37:4D:08:82:E3:0F:CF:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d5c4d191-42f2-36d0-a265-f1e968e0272c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f0:bf:29:24:08:df:eb:fa:b8:4f:d1:5a:52:6a:2c:87:ec: 8b:9d:26:de:ae:d6:29:d6:51:bf:ca:90:91:97:92:4d:e0:7c: bc:d3:96:10:57:e1:ed:34:c0:0d:84:ce:15:6d:fe:9a:e8:aa: 34:7a:76:ea:cc:b0:2d:b4:3b:2a:5e:a7:3a:69:b2:45:61:b0: de:5f:1a:28:23:f2:0b:1a:78:9f:66:51:45:f7:6f:5f:0b:40: 0c:9c:8c:54:e8:2f:61:57:cd:72:75:23:a3:e5:ff:01:be:22: 7b:44:3a:2a:f5:0b:7d:4f:c0:a8:81:ab:d6:70:f7:d6:49:23: 39:46:2c:ee:25:44:54:14:c0:5a:18:5f:8d:39:bd:fd:79:25: df:83:e6:ac:2a:43:38:fe:e7:00:94:0c:f7:45:59:2c:31:bc: ef:4c:2d:56:54:7c:c5:1c:c9:4e:ee:4d:3a:13:15:e8:d0:c3: d4:c0:ab:a0:d7:22:11:03:b8:bb:36:1d:84:3a:b9:b5:28:5a: 83:17:fb:3e:b4:e5:64:bb:b0:9d:e0:01:84:e1:ad:05:60:42: b1:5c:df:b0:09:34:0e:d7:5e:c8:9b:ca:8a:3b:8e:07:01:ba: 07:5f:86:6b:1c:18:65:90:f8:9c:09:51:e3:8f:c0:3e:8f:e9: 04:56:09:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYyGI2EplM1NVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmEyMzQwYzktZmYzNC00MWY2LWEwMzAtMmJmNGIzODkxZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoEmdsen0hhhWPwXONzrkn9sUoidg81LFPDs iKjdHP9An/IDI80OPR2L3Rar1Y5Gm7MK5eokebjgaCp3VZPKQNAHSJdXLo81rSk0 HAczZb27Qu6QkjVA2sW30cF2yntSySq51/9vLCD2KfSJow7El/lBBKjwptfO/Gie LPmtEKayoj4hx+g6iyEL4xLPFFkPJ5BWxo5ea7NVh6867q33oeTjbQi3l5c3XBQl Jzow9NkrQB34b899ALUZCMYlfhjQtRoYNDRbIzOBtZXNWR5F4mTahy34ok3Vy9If LZt+JSr1tmE6kxqgXPRjPOTpSx0+fWA3rNcY1Wvk8Ui/bkH0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtTZr7V2y/s9jRhuTdNCILjD8/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDVjNGQxOTEtNDJmMi0z NmQwLWEyNjUtZjFlOTY4ZTAyNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjwvykkCN/r+rhP0VpSaiyH7IudJt6u1inWUb/KkJGXkk3gfLzTlhBX 4e00wA2EzhVt/proqjR6durMsC20OypepzppskVhsN5fGigj8gsaeJ9mUUX3b18L QAycjFToL2FXzXJ1I6Pl/wG+IntEOir1C31PwKiBq9Zw99ZJIzlGLO4lRFQUwFoY X405vf15Jd+D5qwqQzj+5wCUDPdFWSwxvO9MLVZUfMUcyU7uTToTFejQw9TAq6DX IhEDuLs2HYQ6ubUoWoMX+z605WS7sJ3gAYThrQVgQrFc37AJNA7XXsibyoo7jgcB ugdfhmscGGWQ+JwJUeOPwD6P6QRWCRA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:51 2026 by rpki-client