$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa File: dfd93ee2-24f3-3c72-927e-16cb7326efed.roa (raw, json) Hash identifier: xVPhPaatVOjidmsN+3sPDlsI7NJa/8rZZc/hVHhgoBY= Subject key identifier: 67:23:B8:F8:3C:D6:BB:D2:E8:DD:41:6E:BF:82:EF:F6:B0:89:2B:1F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D0EA7E859E9CE7B6C3307A100 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.132.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e8:59:e9:ce:7b:6c:33:07:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=6e8a6b23-f28c-4e56-81c0-78370b54f956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:65:aa:ff:5f:d1:fd:f4:3b:21:a5:37:3f: f0:17:bb:a2:21:b1:2e:2c:db:a7:9a:0a:33:0e:85: 4a:07:07:bc:6e:bb:23:e2:03:56:a7:b4:e3:e7:f0: 80:15:98:a2:e2:2c:88:30:f6:f8:6c:7b:7e:10:a0: a5:15:56:f3:af:ae:4d:10:dc:cb:c7:0e:66:02:16: 79:c5:2c:fa:54:9b:6c:01:d5:92:f9:27:ed:d6:ea: 65:f8:20:0e:56:0b:af:88:bd:30:87:aa:80:92:a3: 84:0d:0d:59:48:cd:9a:38:4d:15:07:6d:fb:ad:ef: d9:62:74:76:24:3e:e5:ad:08:5a:96:20:69:ff:85: 49:79:07:db:70:4b:2a:8a:f9:97:97:2a:3c:ed:d7: 8e:9a:a9:21:e5:b5:9b:41:38:95:bd:07:8c:60:82: d6:bb:86:1c:5d:e9:f9:f3:1d:a3:bf:f7:67:de:0f: b6:62:d8:4f:56:0b:6f:5a:b2:7f:96:22:49:68:33: 43:83:97:3b:eb:45:ba:f0:cf:c9:16:89:89:b4:5c: cc:2a:f2:88:dd:9f:f9:98:40:67:b1:f2:c2:84:42: 93:ef:5a:fb:ee:7f:64:2e:17:4f:6e:e9:84:39:de: e4:83:4f:db:a5:a1:af:3e:3d:8d:44:d8:b7:7a:a3: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:23:B8:F8:3C:D6:BB:D2:E8:DD:41:6E:BF:82:EF:F6:B0:89:2B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfd93ee2-24f3-3c72-927e-16cb7326efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:43:6c:3e:32:72:a9:ab:43:48:af:41:71:be:c7:ef:97:02: 94:1a:02:95:c4:d2:1d:3b:b4:2f:a1:95:57:06:89:45:54:a7: 43:ee:6f:b3:2c:01:a2:56:b5:07:a2:4d:0b:d2:00:8b:db:b7: 9d:c2:1b:d0:f2:0a:ab:82:6d:49:ca:36:e0:56:42:9c:c1:23: c3:06:bd:65:74:93:a2:95:a2:c8:9f:ea:0a:4e:42:2e:bc:80: f3:ea:af:63:a4:7a:1f:b5:bb:96:e8:95:03:69:d7:bb:fe:09: c1:6a:e4:b4:2d:6c:e6:b3:9e:cd:c8:b5:37:61:b5:b5:2b:67: 23:70:97:91:8b:b3:df:4e:20:48:a0:b6:b7:60:86:3f:31:8a: bb:ca:42:2e:7e:77:d9:90:96:33:e2:39:cf:37:bd:e5:2a:7c: d8:9b:6f:1d:eb:9b:57:80:bd:a6:02:39:bb:59:93:15:f7:76: b7:4d:21:ee:da:fe:c7:ff:34:a2:64:9f:3e:02:b9:e6:17:73: df:51:01:6e:75:0c:42:b8:2d:2e:ec:a7:70:68:2f:f3:17:e9: 0e:12:d5:d2:ec:34:38:89:78:f4:77:0d:40:55:76:cf:f5:56: 11:af:7f:40:9f:28:90:db:1a:f4:96:8d:20:12:53:52:3a:c8: e1:8c:ad:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+hZ6c57bDMHoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk NmU4YTZiMjMtZjI4Yy00ZTU2LTgxYzAtNzgzNzBiNTRmOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKdlqv9f0f30OyGlNz/wF7uiIbEuLNunmgoz DoVKBwe8brsj4gNWp7Tj5/CAFZii4iyIMPb4bHt+EKClFVbzr65NENzLxw5mAhZ5 xSz6VJtsAdWS+Sft1upl+CAOVguviL0wh6qAkqOEDQ1ZSM2aOE0VB237re/ZYnR2 JD7lrQhaliBp/4VJeQfbcEsqivmXlyo87deOmqkh5bWbQTiVvQeMYILWu4YcXen5 8x2jv/dn3g+2YthPVgtvWrJ/liJJaDNDg5c760W68M/JFomJtFzMKvKI3Z/5mEBn sfLChEKT71r77n9kLhdPbumEOd7kg0/bpaGvPj2NRNi3eqMyRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcjuPg81rvS6N1Bbr+C7/awiSsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGZkOTNlZTItMjRmMy0z YzcyLTkyN2UtMTZjYjczMjZlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRDbD4ycqmrQ0ivQXG+x++XApQaApXE0h07tC+hlVcGiUVUp0Pub7Ms AaJWtQeiTQvSAIvbt53CG9DyCquCbUnKNuBWQpzBI8MGvWV0k6KVosif6gpOQi68 gPPqr2Okeh+1u5bolQNp17v+CcFq5LQtbOazns3ItTdhtbUrZyNwl5GLs99OIEig trdghj8xirvKQi5+d9mQljPiOc83veUqfNibbx3rm1eAvaYCObtZkxX3drdNIe7a /sf/NKJknz4CueYXc99RAW51DEK4LS7sp3BoL/MX6Q4S1dLsNDiJePR3DUBVds/1 VhGvf0CfKJDbGvSWjSASU1I6yOGMrdY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:56:59 2026 by rpki-client