$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f306d4ae-3092-3749-b2f3-c0544e7edfd8.roa File: f306d4ae-3092-3749-b2f3-c0544e7edfd8.roa (raw, json) Hash identifier: B4heO0omTp5zsGyb5wzgIP2APJNpgun05QlgCb4MRLE= Subject key identifier: 5C:1E:BA:6C:3A:52:29:44:B9:B4:7C:A0:9B:17:16:FE:00:21:E5:2C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D1F4A825F0F1ABEAA3845E900 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f306d4ae-3092-3749-b2f3-c0544e7edfd8.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 41264 IP address blocks: 104.135.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:82:5f:0f:1a:be:aa:38:45:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=00349a3f-7d1d-42bc-8328-4f2417c28aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:ec:13:1d:89:98:a7:df:06:f6:50:08:ce: 8a:1b:6d:33:6a:cd:00:36:79:4e:ba:a8:b9:04:50: 76:12:d6:13:59:3f:25:9e:b0:c0:d3:62:34:e2:b1: df:0a:67:5e:6b:dd:75:b9:e5:5a:f1:83:62:6d:df: f7:8d:c6:29:ec:18:25:a9:ae:74:1a:2b:65:48:6f: ae:b9:94:ca:c8:f6:c1:30:15:38:bd:8e:cc:72:ae: ee:8d:b1:0a:f1:24:c6:aa:a6:74:43:71:6d:7b:9c: d1:e0:29:f9:86:1a:60:17:91:f1:28:a9:62:08:c8: 3f:d1:6b:0d:b0:1c:7e:1e:8e:1f:04:50:08:86:32: f4:62:4f:b8:89:04:f6:f6:31:fc:16:c7:75:c2:4e: ac:ba:f8:69:d7:84:84:a2:85:94:d6:49:4c:3d:26: 6d:37:5d:43:40:68:7a:87:95:63:96:5d:0a:6b:0e: fd:14:d4:1b:b6:d4:cb:4b:36:ff:2c:c8:2e:be:81: 9d:96:4c:e5:c5:03:ef:d0:51:1b:e8:d3:de:48:35: 73:c1:3c:f9:27:07:ef:a5:76:bf:13:71:c5:1f:f6: 9e:92:14:3a:89:f2:8a:bb:40:d6:a0:26:ce:4e:f3: cc:e0:ca:f7:6f:6f:bb:28:9b:38:9b:75:fe:da:c4: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1E:BA:6C:3A:52:29:44:B9:B4:7C:A0:9B:17:16:FE:00:21:E5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f306d4ae-3092-3749-b2f3-c0544e7edfd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.135.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:89:3f:c7:fc:0a:82:db:8c:a3:17:bd:2d:d7:7c:aa:f8:59: 42:8d:5c:8f:ea:11:6d:bb:45:69:15:c9:64:8b:b1:6a:be:9b: 4d:19:d4:86:29:61:88:98:45:f9:4b:b3:d5:0f:1d:65:ba:94: 6f:1b:13:cc:1e:60:0d:a7:ca:29:b3:67:d7:f8:d4:b1:cb:a5: 22:8f:b8:40:d0:70:10:2e:ce:d4:78:4f:1e:0f:e1:06:de:57: 5b:9d:c4:e0:fe:dc:fe:c9:a6:c7:65:42:d0:6a:eb:c3:4b:a9: dc:18:0d:b4:21:25:0b:78:f0:ae:b6:e0:8f:2f:10:c1:a2:c4: 29:76:83:06:21:f5:e8:d8:a4:f3:22:3b:6b:76:3c:ff:a0:16: 7d:1e:2a:5d:f0:91:af:a6:24:b6:7d:76:18:2a:64:40:fc:47: a0:c6:fd:9c:82:43:0e:fb:32:3c:e5:e8:08:30:05:72:e2:41: c3:95:39:2f:6c:42:f8:38:dd:e2:f5:08:0f:bc:5b:6c:84:3c: fc:ec:4c:39:ca:7e:15:0d:8c:3d:c0:cd:b6:b3:c6:49:2d:c3: 53:5c:db:1e:2d:34:93:c0:b8:34:29:12:95:42:5a:92:1b:18: af:9c:c8:d2:fc:49:17:12:7c:07:3e:34:b3:fe:fc:35:c6:08: 61:8e:72:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSoJfDxq+qjhF6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MDAzNDlhM2YtN2QxZC00MmJjLTgzMjgtNGYyNDE3YzI4YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBTsEx2JmKffBvZQCM6KG20zas0ANnlOuqi5 BFB2EtYTWT8lnrDA02I04rHfCmdea911ueVa8YNibd/3jcYp7Bglqa50GitlSG+u uZTKyPbBMBU4vY7Mcq7ujbEK8STGqqZ0Q3Fte5zR4Cn5hhpgF5HxKKliCMg/0WsN sBx+Ho4fBFAIhjL0Yk+4iQT29jH8Fsd1wk6suvhp14SEooWU1klMPSZtN11DQGh6 h5Vjll0Kaw79FNQbttTLSzb/LMguvoGdlkzlxQPv0FEb6NPeSDVzwTz5JwfvpXa/ E3HFH/aekhQ6ifKKu0DWoCbOTvPM4Mr3b2+7KJs4m3X+2sTlXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFweumw6UilEubR8oJsXFv4AIeUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjMwNmQ0YWUtMzA5Mi0z NzQ5LWIyZjMtYzA1NDRlN2VkZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaJP8f8CoLbjKMXvS3XfKr4WUKNXI/qEW27RWkVyWSLsWq+m00Z1IYp YYiYRflLs9UPHWW6lG8bE8weYA2nyimzZ9f41LHLpSKPuEDQcBAuztR4Tx4P4Qbe V1udxOD+3P7JpsdlQtBq68NLqdwYDbQhJQt48K624I8vEMGixCl2gwYh9ejYpPMi O2t2PP+gFn0eKl3wka+mJLZ9dhgqZED8R6DG/ZyCQw77Mjzl6AgwBXLiQcOVOS9s Qvg43eL1CA+8W2yEPPzsTDnKfhUNjD3Azbazxkktw1Nc2x4tNJPAuDQpEpVCWpIb GK+cyNL8SRcSfAc+NLP+/DXGCGGOcl4= -----END CERTIFICATE-----Generated at Thu Mar 26 11:38:51 2026 by rpki-client