$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4a550ab-8573-304e-9484-414dd9dc7bf3.roa File: f4a550ab-8573-304e-9484-414dd9dc7bf3.roa (raw, json) Hash identifier: 4/Iy4W6bPuzNVIpttXCKCZrgADuaVA9gocU/72ij9Ec= Subject key identifier: AD:5B:8D:6E:72:99:78:F7:66:31:AD:02:85:BA:C8:A2:F9:20:C3:AD Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D92F13C4BA585B610FF80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4a550ab-8573-304e-9484-414dd9dc7bf3.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:92:f1:3c:4b:a5:85:b6:10:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=463c6cca-7401-42b1-956e-460c3d665fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:15:39:38:44:b6:72:1e:7b:3f:33:35:af: c1:53:6c:b2:42:42:4f:b0:a1:31:a6:46:48:3a:12: 0e:bc:cd:ca:db:1c:11:f7:37:76:34:47:60:e8:c9: 30:9d:8d:c8:ed:f1:7e:3b:53:a1:5b:bd:79:a3:1b: 83:22:6b:d7:da:5e:35:0b:7b:78:75:04:87:4c:c9: 9d:ab:1a:c8:fa:7e:a5:fa:41:e8:c2:a8:d8:fc:6a: 5e:59:76:96:8a:b0:42:8f:a7:19:58:04:64:8a:f8: d3:9d:0e:a1:71:74:f1:59:39:93:ce:a6:4e:1a:6c: 87:f2:a3:a7:1d:6d:1d:98:b1:d8:01:ab:4f:11:cd: 63:1d:e6:62:5d:51:8b:a7:eb:3e:99:ff:e9:05:7f: b9:c3:76:7e:a5:98:a2:87:da:3b:6b:9d:02:90:29: 79:d4:08:15:0e:9d:7e:f0:68:29:43:08:c1:3b:fa: 14:6e:aa:47:87:e8:32:c8:c5:2c:37:e1:81:20:f0: 83:cf:63:b7:ef:f8:57:68:c8:1d:11:62:b9:f2:6c: dc:69:2c:30:9c:42:ee:81:12:85:50:63:44:0f:24: 6c:2c:c9:2e:8d:0c:b7:5f:c1:d7:ea:80:80:41:3d: 11:df:e1:5a:1b:f5:32:7e:bd:df:f4:4a:2d:91:b4: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5B:8D:6E:72:99:78:F7:66:31:AD:02:85:BA:C8:A2:F9:20:C3:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f4a550ab-8573-304e-9484-414dd9dc7bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:81:62:1d:77:03:e0:5e:73:9e:89:c6:6a:dc:97:20:9d:94: 6b:bf:be:6b:15:6c:8f:11:ed:4b:5c:37:58:7d:81:78:eb:42: 12:cf:71:75:98:cb:b2:6f:b1:a2:31:e5:9f:89:5b:2d:15:f6: 84:33:9b:c5:92:db:5e:44:44:fc:35:1a:ff:ce:8a:02:9f:e1: 89:39:8c:4a:bf:55:09:1e:4d:d7:95:da:a7:4b:17:33:f7:20: 1e:f0:99:1d:b4:84:2e:5b:1a:25:e1:ad:df:8c:e5:d7:33:85: 53:4b:b2:a9:15:79:55:52:9b:d4:d4:9e:58:b4:7a:f5:6f:88: da:6c:d7:dc:3c:33:74:da:a5:38:4f:c0:96:fd:79:34:a1:fd: c9:1e:aa:7a:67:23:99:7b:91:c5:33:62:82:ea:c6:04:33:48: d6:fc:2c:57:82:7f:aa:a8:9c:33:4f:36:c7:33:80:0f:0b:74: dc:da:a6:37:4d:a0:9a:da:7e:e4:b8:96:82:ed:89:81:59:a4: 98:20:55:e8:96:c5:b6:ba:d8:d9:de:62:f3:c8:73:ce:b1:c4: 1d:58:b7:76:c7:66:67:5a:c2:aa:57:05:5d:08:13:10:9b:f7: 49:5a:7c:f7:50:6d:f0:bc:10:e0:03:ff:80:c3:8f:de:aa:a4: 6e:a4:a7:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZLxPEulhbYQ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDYzYzZjY2EtNzQwMS00MmIxLTk1NmUtNDYwYzNkNjY1ZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcMVOThEtnIeez8zNa/BU2yyQkJPsKExpkZI OhIOvM3K2xwR9zd2NEdg6MkwnY3I7fF+O1OhW715oxuDImvX2l41C3t4dQSHTMmd qxrI+n6l+kHowqjY/GpeWXaWirBCj6cZWARkivjTnQ6hcXTxWTmTzqZOGmyH8qOn HW0dmLHYAatPEc1jHeZiXVGLp+s+mf/pBX+5w3Z+pZiih9o7a50CkCl51AgVDp1+ 8GgpQwjBO/oUbqpHh+gyyMUsN+GBIPCDz2O37/hXaMgdEWK58mzcaSwwnELugRKF UGNEDyRsLMkujQy3X8HX6oCAQT0R3+FaG/Uyfr3f9EotkbRgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1bjW5ymXj3ZjGtAoW6yKL5IMOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjRhNTUwYWItODU3My0z MDRlLTk0ODQtNDE0ZGQ5ZGM3YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiBYh13A+Bec56JxmrclyCdlGu/vmsVbI8R7UtcN1h9gXjrQhLPcXWY y7JvsaIx5Z+JWy0V9oQzm8WS215ERPw1Gv/OigKf4Yk5jEq/VQkeTdeV2qdLFzP3 IB7wmR20hC5bGiXhrd+M5dczhVNLsqkVeVVSm9TUnli0evVviNps19w8M3TapThP wJb9eTSh/ckeqnpnI5l7kcUzYoLqxgQzSNb8LFeCf6qonDNPNsczgA8LdNzapjdN oJrafuS4loLtiYFZpJggVeiWxba62NneYvPIc86xxB1Yt3bHZmdawqpXBV0IExCb 90lafPdQbfC8EOAD/4DDj96qpG6kp6M= -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:02 2026 by rpki-client