$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa File: d6d3afbf-f6e2-312e-b299-feebdb230800.roa (raw, json) Hash identifier: MieXmjxpQ6i3eppqMrxx3SCYGeKM85Q4KcL2QoqPFm8= Subject key identifier: 0D:D0:8F:2F:E4:B4:C2:E9:F9:13:31:6B:CD:B5:87:28:D4:E4:06:DD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D8889DDD5E499B414EEC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:88:89:dd:d5:e4:99:b4:14:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=b72a3ac2-1b04-4c40-9fe4-2c2013c323d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:b2:cc:09:06:90:e7:65:a4:c9:4f:c7:3f: e5:e6:2f:9e:e5:32:63:39:1f:60:51:46:ad:93:59: 5b:f5:6c:cd:48:44:f1:53:82:e1:d6:95:41:a9:ff: 88:08:f0:43:ca:f3:aa:c3:9e:2e:26:e1:4f:25:e5: ef:27:37:a4:b3:2b:f0:70:4d:ee:5f:a7:73:9e:8a: 39:34:f2:e9:7f:c2:ac:c2:2a:22:04:9b:6e:5c:5b: 4b:18:d5:f4:77:03:2a:e4:c5:39:c0:8f:60:ed:02: 36:34:19:7a:8e:af:5b:69:b7:f3:aa:60:c5:a3:f6: 71:f1:d5:dd:ed:ab:8e:1a:f0:d0:3d:35:f2:f2:09: 31:c7:3f:a2:9c:2d:8f:79:d8:4e:46:dc:b9:36:b9: 95:dc:fa:08:0b:c8:81:81:43:9b:58:86:99:5d:97: b4:00:c3:3f:17:c4:f4:4c:68:11:3e:97:be:fc:10: bc:2d:34:42:d1:db:36:30:4d:60:ca:ca:a6:1d:69: b8:09:9a:46:a8:b8:3a:66:9f:a7:53:cd:83:e2:b2: b0:64:91:e6:5d:98:ea:0f:65:c3:82:38:62:f8:22: 0a:c6:7b:63:15:08:22:39:8d:90:eb:8e:d6:cd:10: bf:70:05:7c:31:07:d6:ca:18:4a:7b:cc:54:a3:d3: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D0:8F:2F:E4:B4:C2:E9:F9:13:31:6B:CD:B5:87:28:D4:E4:06:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c6:7d:87:82:58:4d:57:f6:60:d7:94:ae:1d:42:46:be:88: 03:3a:d0:88:67:ed:8c:c6:64:0e:70:ec:b9:2b:f9:18:a9:8a: 1d:d8:0a:bf:21:cf:40:81:5b:4c:54:b4:ef:c2:d7:ee:5e:f6: 2c:66:b3:2a:b3:95:3d:0d:1e:e9:ce:d6:ca:d9:74:7b:41:f5: 81:ca:a6:ca:56:3e:16:35:9f:58:d1:68:5c:4d:ca:81:cb:fa: d7:16:3d:61:97:d1:4f:11:ed:37:b5:5e:08:64:35:ee:2f:4b: 18:61:24:12:b1:bd:4a:cc:19:48:bf:c8:91:b8:a4:eb:3c:68: b3:9c:3a:ae:08:1f:7a:13:77:fc:9f:b1:d3:f3:33:76:7b:7d: c0:33:08:e1:44:e2:6f:8d:29:ff:b9:f0:67:09:5b:98:55:2e: 0d:f9:72:9d:65:00:2a:22:cb:94:58:87:39:84:21:63:f5:74: 18:83:ea:fc:0f:54:e2:f7:4c:0a:f4:a9:86:12:48:73:71:8e: c6:76:1e:72:bd:f5:75:1c:00:7b:42:47:b7:76:66:42:9b:4e: af:ab:b7:86:3a:3a:fd:bc:68:51:50:c9:df:fe:44:f3:63:2e: ce:bc:16:a2:30:58:da:23:2f:7a:66:b3:9f:8d:ba:aa:d7:1a: 18:96:28:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPYiJ3dXkmbQU7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YjcyYTNhYzItMWIwNC00YzQwLTlmZTQtMmMyMDEzYzMyM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBqyzAkGkOdlpMlPxz/l5i+e5TJjOR9gUUat k1lb9WzNSETxU4Lh1pVBqf+ICPBDyvOqw54uJuFPJeXvJzeksyvwcE3uX6dznoo5 NPLpf8KswioiBJtuXFtLGNX0dwMq5MU5wI9g7QI2NBl6jq9babfzqmDFo/Zx8dXd 7auOGvDQPTXy8gkxxz+inC2PedhORty5NrmV3PoIC8iBgUObWIaZXZe0AMM/F8T0 TGgRPpe+/BC8LTRC0ds2ME1gysqmHWm4CZpGqLg6Zp+nU82D4rKwZJHmXZjqD2XD gjhi+CIKxntjFQgiOY2Q647WzRC/cAV8MQfWyhhKe8xUo9M7bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3Qjy/ktMLp+RMxa821hyjU5AbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDZkM2FmYmYtZjZlMi0z MTJlLWIyOTktZmVlYmRiMjMwODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzGfYeCWE1X9mDXlK4dQka+iAM60Ihn7YzGZA5w7Lkr+Ripih3YCr8h z0CBW0xUtO/C1+5e9ixmsyqzlT0NHunO1srZdHtB9YHKpspWPhY1n1jRaFxNyoHL +tcWPWGX0U8R7Te1XghkNe4vSxhhJBKxvUrMGUi/yJG4pOs8aLOcOq4IH3oTd/yf sdPzM3Z7fcAzCOFE4m+NKf+58GcJW5hVLg35cp1lACoiy5RYhzmEIWP1dBiD6vwP VOL3TAr0qYYSSHNxjsZ2HnK99XUcAHtCR7d2ZkKbTq+rt4Y6Ov28aFFQyd/+RPNj Ls68FqIwWNojL3pms5+NuqrXGhiWKCE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:58:37 2026 by rpki-client