$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecc2173f-4b9c-3973-81c8-d689a6730d1c.roa File: ecc2173f-4b9c-3973-81c8-d689a6730d1c.roa (raw, json) Hash identifier: h5mesi5SLtLN9+TBAls5YW/NV9D0Y1cWZ25eXOlN35k= Subject key identifier: A9:8E:A1:65:6D:BB:10:FF:14:EB:A0:C7:4D:55:E2:B3:94:09:1E:C3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143DA4A7E6CE54CB62352E00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecc2173f-4b9c-3973-81c8-d689a6730d1c.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:a4:a7:e6:ce:54:cb:62:35:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=76f51e3b-5aa7-45f7-8106-3a011b9181aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:86:a4:59:23:61:4e:ef:16:23:98:58:d8: 61:03:78:02:3e:06:e2:c8:a5:63:5d:54:4b:4b:48: c8:1a:f0:98:16:97:d1:38:d0:f4:e9:da:93:b2:05: 4d:50:f7:6f:7d:98:61:91:6b:51:4c:a8:e5:7c:b3: 40:26:72:c3:fc:40:8b:88:ff:52:eb:bf:c1:22:0a: b8:00:9d:03:d8:d0:f0:c7:d8:2c:95:ea:86:84:24: 68:04:f9:da:b9:04:22:91:11:67:e7:66:fb:f1:cb: 66:05:5f:b8:cd:04:7e:a3:30:23:c9:cf:4f:16:13: 7a:1f:7e:83:63:9f:7d:f0:77:e8:bf:ba:10:3e:7d: 91:cc:8d:a5:ab:36:32:e1:17:24:52:04:30:c4:ae: e7:f9:28:d8:47:6e:be:4a:70:2a:50:8d:f5:bb:45: c8:9d:50:0e:90:62:7b:3d:67:35:17:2b:a8:0c:e6: 1f:9c:f0:7f:0e:4f:8a:a7:6d:bc:de:7c:3c:20:6a: 71:a8:f9:7d:30:cf:dd:8b:fc:cc:73:58:2f:ef:e5: 3a:e6:90:d5:3c:17:c8:72:35:8c:a9:04:e7:ec:66: 64:8d:32:01:49:4d:2d:3f:26:eb:1f:fc:ba:5b:9b: 7b:05:48:f8:80:c4:93:50:df:1a:43:35:cc:d3:e8: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8E:A1:65:6D:BB:10:FF:14:EB:A0:C7:4D:55:E2:B3:94:09:1E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecc2173f-4b9c-3973-81c8-d689a6730d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:68:07:e5:9a:db:ce:3c:48:02:37:85:17:e3:7d:8d:88:c9: 39:0c:79:c3:f6:e0:cd:d7:13:88:49:a5:65:5c:a9:91:7d:9f: b3:9a:6c:9d:1a:2d:bd:fe:cd:1d:49:b1:b9:c8:42:59:8f:61: 05:b8:71:06:8f:61:32:61:64:2f:3e:3b:6d:76:9f:9a:db:1a: 49:67:6e:ce:8b:b8:54:66:94:71:55:d9:b4:65:6e:3a:8b:d3: 1f:3f:b2:ac:ed:ef:ea:0c:4b:fb:0d:61:12:7a:81:da:df:8d: da:15:c4:8e:d4:44:83:d7:03:4f:8b:cf:20:ec:29:c0:2a:f6: 8b:1a:fd:db:01:8d:57:78:f3:d4:c8:1c:7d:62:a8:b2:d1:87: 04:47:f2:19:97:17:ae:2e:73:50:42:b6:e7:91:bb:8a:cd:04: b5:54:4f:a1:dc:8c:bb:2c:59:2f:ef:74:63:17:7c:c9:33:aa: a0:9d:7d:ac:70:a8:6b:6e:64:05:02:12:bb:97:30:e3:88:d5: f8:d1:68:f0:d6:2c:7f:3f:88:ae:1b:78:30:32:28:60:0d:fe: c6:19:da:2f:8c:fd:3d:1a:65:e1:f7:83:fc:57:f0:4b:e3:36: c7:72:37:99:ff:5f:1b:bc:25:58:9c:ba:16:29:22:40:f2:7b: 2e:2a:de:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPaSn5s5Uy2I1LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NzZmNTFlM2ItNWFhNy00NWY3LTgxMDYtM2EwMTFiOTE4MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gyGpFkjYU7vFiOYWNhhA3gCPgbiyKVjXVRL S0jIGvCYFpfROND06dqTsgVNUPdvfZhhkWtRTKjlfLNAJnLD/ECLiP9S67/BIgq4 AJ0D2NDwx9gsleqGhCRoBPnauQQikRFn52b78ctmBV+4zQR+ozAjyc9PFhN6H36D Y5998Hfov7oQPn2RzI2lqzYy4RckUgQwxK7n+SjYR26+SnAqUI31u0XInVAOkGJ7 PWc1FyuoDOYfnPB/Dk+Kp2283nw8IGpxqPl9MM/di/zMc1gv7+U65pDVPBfIcjWM qQTn7GZkjTIBSU0tPybrH/y6W5t7BUj4gMSTUN8aQzXM0+gb8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmOoWVtuxD/FOugx01V4rOUCR7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWNjMjE3M2YtNGI5Yy0z OTczLTgxYzgtZDY4OWE2NzMwZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFoB+Wa2848SAI3hRfjfY2IyTkMecP24M3XE4hJpWVcqZF9n7OabJ0a Lb3+zR1JsbnIQlmPYQW4cQaPYTJhZC8+O212n5rbGklnbs6LuFRmlHFV2bRlbjqL 0x8/sqzt7+oMS/sNYRJ6gdrfjdoVxI7URIPXA0+LzyDsKcAq9osa/dsBjVd489TI HH1iqLLRhwRH8hmXF64uc1BCtueRu4rNBLVUT6HcjLssWS/vdGMXfMkzqqCdfaxw qGtuZAUCEruXMOOI1fjRaPDWLH8/iK4beDAyKGAN/sYZ2i+M/T0aZeH3g/xX8Evj NsdyN5n/Xxu8JVicuhYpIkDyey4q3tQ= -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:13 2026 by rpki-client