$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa File: fa64b528-4d5e-3048-93d6-79bf8737e58c.roa (raw, json) Hash identifier: tPojDB97PfTEm5IfZ406c4RV19hX9sCiHgSILQsdSJk= Subject key identifier: 91:05:82:6E:73:D9:61:23:AC:A8:57:15:7C:D0:C6:B4:86:D5:81:C5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D117285A568F82989FF7A4A40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 41264 IP address blocks: 104.133.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:85:a5:68:f8:29:89:ff:7a:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=f08ef2d5-2109-4dff-a99a-9959489f415d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:66:af:78:88:2d:ef:ed:fb:d7:c2:0d:72: e0:d3:03:90:87:74:ef:f3:0b:22:95:7a:6f:06:c5: a3:e5:9c:88:50:93:5c:86:fc:5b:d6:57:ba:8c:bb: 3b:73:3a:7b:aa:ca:6d:1c:b2:a1:4b:40:50:e2:db: 66:2c:82:1a:2f:ac:07:a9:19:5c:04:d4:b6:9f:86: c1:d8:06:f3:50:9f:99:3b:50:d9:23:8e:bf:f9:49: 67:2c:3e:21:10:c9:ad:bb:8e:89:32:15:6e:ab:cb: fc:38:64:08:a6:b6:9e:23:ee:46:29:ad:43:7a:a0: b1:b6:73:66:98:4f:ca:bb:bf:c6:f9:df:38:68:e0: 25:10:85:fc:ae:27:d7:73:4c:c7:c0:ea:db:c2:69: 70:71:72:da:ac:24:28:e0:cc:31:0a:51:06:aa:1e: be:25:24:4b:84:ac:68:2b:b4:29:46:cb:ed:f6:12: ce:ca:54:39:bc:61:d2:ea:68:0b:59:50:c1:5e:21: 85:ab:c5:51:c9:d5:eb:86:1b:6a:87:ef:62:07:d3: a6:35:f3:ab:79:33:87:37:4a:21:1b:e9:ca:1c:dc: 5c:c8:57:75:52:7d:1a:fb:3e:d9:51:92:72:fe:a1: f8:71:8e:c4:c6:0a:83:ee:1c:de:67:01:9a:54:d8: 2e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:05:82:6E:73:D9:61:23:AC:A8:57:15:7C:D0:C6:B4:86:D5:81:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fa64b528-4d5e-3048-93d6-79bf8737e58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e1:de:82:9c:b1:ae:51:7d:7f:bb:ca:7e:49:cd:5c:cc:af: c3:d7:d8:4f:22:58:f0:22:e5:6c:cd:d8:ab:b4:83:93:cf:e7: 80:12:9d:62:44:6c:48:33:f6:44:f7:85:b5:59:38:9e:36:21: 9b:bb:ec:1b:00:71:fc:2c:12:8f:de:f2:d5:50:d9:2a:7f:f3: 18:f7:41:f9:f9:bb:e9:1b:42:3b:88:8e:61:a1:6c:77:b7:7a: 43:2f:13:25:ee:65:05:1d:73:89:17:6a:82:04:0d:7a:19:ab: 89:57:25:ef:09:d6:d9:a2:31:f9:d3:00:97:6f:38:b5:d2:27: d2:26:4f:63:66:52:f0:4d:17:ed:da:6a:b0:7f:e0:df:dc:2e: d4:bd:92:79:88:b8:4d:3e:cf:d6:0e:ab:0c:1c:64:8c:53:cc: b9:3a:37:83:83:b7:e2:40:ce:85:6f:02:98:ca:3f:ae:74:60: ea:27:f2:f8:6e:8a:13:bb:c6:44:3c:c3:8d:3d:03:23:f4:75: d5:02:4a:da:98:d3:84:8c:ee:39:04:b6:2e:1a:c1:b9:d7:ff: cc:33:5c:f3:70:8b:a4:66:69:78:68:e1:e5:f7:78:c0:e4:ed: 4b:44:87:bd:ce:09:cc:7c:07:7d:30:9c:ca:07:8a:1d:d0:8a: 42:b1:92:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcoWlaPgpif96SkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZjA4ZWYyZDUtMjEwOS00ZGZmLWE5OWEtOTk1OTQ4OWY0MTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoytmr3iILe/t+9fCDXLg0wOQh3Tv8wsilXpv BsWj5ZyIUJNchvxb1le6jLs7czp7qsptHLKhS0BQ4ttmLIIaL6wHqRlcBNS2n4bB 2AbzUJ+ZO1DZI46/+UlnLD4hEMmtu46JMhVuq8v8OGQIpraeI+5GKa1DeqCxtnNm mE/Ku7/G+d84aOAlEIX8rifXc0zHwOrbwmlwcXLarCQo4MwxClEGqh6+JSRLhKxo K7QpRsvt9hLOylQ5vGHS6mgLWVDBXiGFq8VRydXrhhtqh+9iB9OmNfOreTOHN0oh G+nKHNxcyFd1Un0a+z7ZUZJy/qH4cY7ExgqD7hzeZwGaVNguUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEFgm5z2WEjrKhXFXzQxrSG1YHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmE2NGI1MjgtNGQ1ZS0z MDQ4LTkzZDYtNzliZjg3MzdlNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbh3oKcsa5RfX+7yn5JzVzMr8PX2E8iWPAi5WzN2Ku0g5PP54ASnWJE bEgz9kT3hbVZOJ42IZu77BsAcfwsEo/e8tVQ2Sp/8xj3Qfn5u+kbQjuIjmGhbHe3 ekMvEyXuZQUdc4kXaoIEDXoZq4lXJe8J1tmiMfnTAJdvOLXSJ9ImT2NmUvBNF+3a arB/4N/cLtS9knmIuE0+z9YOqwwcZIxTzLk6N4ODt+JAzoVvApjKP650YOon8vhu ihO7xkQ8w409AyP0ddUCStqY04SM7jkEti4awbnX/8wzXPNwi6RmaXho4eX3eMDk 7UtEh73OCcx8B30wnMoHih3QikKxkgU= -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:06 2026 by rpki-client