$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de52c09a-bbc1-3233-a08b-ac13505b6b99.roa File: de52c09a-bbc1-3233-a08b-ac13505b6b99.roa (raw, json) Hash identifier: ELNpIwlD4353mMQxSP+A74SS/f3bsH0dd+x8/6maqWI= Subject key identifier: F5:A9:87:65:79:64:0D:4E:AD:42:94:86:02:EA:9C:28:F3:9A:25:DB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA095F8C364A95F16B940 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de52c09a-bbc1-3233-a08b-ac13505b6b99.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a0:95:f8:c3:64:a9:5f:16:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1d4c7f05-fab7-4cf7-8322-58228ac03b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:36:58:7f:c7:04:07:c3:7e:f8:54:1e:c8: 5f:ca:b2:fd:ee:6f:00:3c:01:ed:00:cc:31:73:6a: ad:6d:94:f2:28:b0:c6:c2:88:c2:71:a8:83:0a:7a: 54:69:56:0a:fc:ed:56:c9:1e:b9:ee:2c:b4:30:d7: 02:91:f6:5a:e7:3e:f2:ff:dc:5e:e4:e3:45:9f:0a: 46:82:20:48:75:e3:11:2f:34:d9:5e:ca:e6:4d:e7: fa:7d:75:6b:40:93:c9:3f:f6:e5:9b:9f:3a:b5:36: f7:d2:a0:ac:1b:b5:f3:b6:fc:56:2b:fc:fc:f7:b1: 4f:b2:a0:3a:ee:7b:42:ef:1d:35:fa:c3:25:45:d4: be:bf:cf:90:5b:1d:72:65:98:f9:7f:aa:38:f2:e8: 12:2b:6e:e3:74:b3:42:f5:b8:2b:bb:69:fa:e2:ae: 0b:b3:30:8a:8f:f6:df:f5:87:d2:6a:33:0d:72:00: a5:86:94:d0:90:e8:07:74:5a:e4:30:10:c0:61:0f: c3:ae:ee:d9:9a:40:ad:fc:91:62:93:0d:d7:a7:bc: a1:f9:47:1f:dd:f9:dc:50:48:ae:90:a4:31:8d:67: 37:f2:64:3e:34:46:9a:57:0e:66:70:c1:d8:d5:3b: 0b:73:ca:24:fc:72:f9:ec:89:0a:40:e8:3e:0d:a3: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A9:87:65:79:64:0D:4E:AD:42:94:86:02:EA:9C:28:F3:9A:25:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de52c09a-bbc1-3233-a08b-ac13505b6b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:f6:d5:62:c2:2a:75:05:9b:4f:c8:66:34:25:09:6d:8e: 1e:ba:ff:65:79:c8:25:46:12:73:2f:35:90:59:e1:34:66:22: 8f:f1:b4:05:6a:6e:41:4c:c2:af:c0:66:7f:85:17:cc:eb:98: 0e:fb:89:0d:71:90:ca:8b:7a:d4:d7:aa:09:9f:48:bd:54:0f: a3:3e:de:aa:dc:7c:c8:2a:fc:19:24:21:dc:46:e2:e5:8d:4e: 9a:2d:05:34:34:13:0f:ad:66:11:ad:f9:d5:53:1f:a9:38:bb: fd:e7:6d:07:b0:94:a8:1d:1f:2c:7e:91:f3:a1:62:33:8d:44: 0d:ca:f9:01:d7:99:f9:66:be:98:b4:b9:bd:5f:a7:47:9b:c4: a1:7f:b4:cd:3a:4b:70:f2:e7:7d:f7:d3:02:3b:2b:eb:30:82: 41:c9:47:01:41:ea:a0:54:27:ab:90:c5:74:84:a3:a2:53:c6: e4:6f:c3:47:c0:22:6f:cd:53:be:f1:80:40:79:bd:4b:29:b0: 36:35:48:20:1e:b8:9f:50:98:ce:33:10:c5:28:21:44:a5:90: 33:84:92:80:dd:5a:cf:54:d2:6c:c7:df:53:c1:0a:e1:f7:a7: 6e:6b:f5:8a:d9:54:22:b1:a1:91:e9:53:8c:51:7c:4f:96:2d: c5:3e:d4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaCV+MNkqV8WuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWQ0YzdmMDUtZmFiNy00Y2Y3LTgzMjItNTgyMjhhYzAzYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRs2WH/HBAfDfvhUHshfyrL97m8APAHtAMwx c2qtbZTyKLDGwojCcaiDCnpUaVYK/O1WyR657iy0MNcCkfZa5z7y/9xe5ONFnwpG giBIdeMRLzTZXsrmTef6fXVrQJPJP/blm586tTb30qCsG7XztvxWK/z897FPsqA6 7ntC7x01+sMlRdS+v8+QWx1yZZj5f6o48ugSK27jdLNC9bgru2n64q4LszCKj/bf 9YfSajMNcgClhpTQkOgHdFrkMBDAYQ/Dru7ZmkCt/JFikw3Xp7yh+Ucf3fncUEiu kKQxjWc38mQ+NEaaVw5mcMHY1TsLc8ok/HL57IkKQOg+DaOQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWph2V5ZA1OrUKUhgLqnCjzmiXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGU1MmMwOWEtYmJjMS0z MjMzLWEwOGItYWMxMzUwNWI2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn29tViwip1BZtPyGY0JQltjh66/2V5yCVGEnMvNZBZ4TRmIo/xtAVq bkFMwq/AZn+FF8zrmA77iQ1xkMqLetTXqgmfSL1UD6M+3qrcfMgq/BkkIdxG4uWN TpotBTQ0Ew+tZhGt+dVTH6k4u/3nbQewlKgdHyx+kfOhYjONRA3K+QHXmflmvpi0 ub1fp0ebxKF/tM06S3Dy53330wI7K+swgkHJRwFB6qBUJ6uQxXSEo6JTxuRvw0fA Im/NU77xgEB5vUspsDY1SCAeuJ9QmM4zEMUoIUSlkDOEkoDdWs9U0mzH31PBCuH3 p25r9YrZVCKxoZHpU4xRfE+WLcU+1B8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:39 2026 by rpki-client