$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa File: fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa (raw, json) Hash identifier: g+tBeRYCOII/8ORsvNMPuF8RU8sm7BYweKDFbX5jDok= Subject key identifier: F6:DE:8B:05:6A:6F:91:15:67:3E:B3:AD:2C:91:EB:1A:A1:7D:9A:FB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D143D9352C768448B92BF13A8 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 104.134.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:93:52:c7:68:44:8b:92:bf:13:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=9ea672ff-bf72-4bb1-9d0a-5f3d118d1806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:88:e1:a4:3a:31:73:f5:65:e7:aa:8f:30:bc: ae:69:ab:e8:c6:72:b9:9d:9b:67:ea:08:0d:5a:1f: 7c:d9:3f:7a:8b:28:bb:e0:2a:07:4a:a0:25:49:4b: 23:44:0b:b8:7e:2f:2e:1b:57:23:29:1d:27:5b:8e: 70:9d:ea:e9:3c:35:21:0f:1f:54:70:9b:dd:21:cc: 8e:4c:02:fe:88:f7:6e:79:02:d6:8b:40:60:e4:fa: d2:01:e1:ce:66:c9:de:eb:0e:42:1d:ae:cb:fb:b1: bb:2c:07:dc:7e:e5:7e:e6:56:ef:6c:53:f5:a2:6c: f0:c5:4f:90:e3:f6:65:c6:85:1a:d7:69:bb:76:3c: 2a:95:25:b1:d5:a8:61:30:c7:1b:9d:b4:74:86:4a: ea:67:bb:7f:08:11:13:1f:1a:2d:8f:50:f8:0b:1f: 98:34:74:8e:bb:14:0b:4c:f1:e6:e5:f4:34:86:d2: a2:da:9b:14:2a:09:d9:9e:c3:6d:4a:43:fb:22:8c: 6b:f1:c5:78:6b:27:66:dd:f6:4e:87:4c:f2:33:3c: b7:ae:e1:a0:0e:11:98:06:10:a3:6d:56:3a:e2:91: 1e:4f:78:d6:8a:28:03:6f:92:c8:8b:91:09:c5:64: f1:01:0c:3b:85:3b:c0:3f:50:ee:bf:45:12:57:91: 72:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DE:8B:05:6A:6F:91:15:67:3E:B3:AD:2C:91:EB:1A:A1:7D:9A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/fbfc91f3-afee-3d43-ac70-16a118eb72b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:99:b8:25:70:f7:65:00:c8:27:5c:eb:11:87:54:6a:fa:d2: 00:df:ee:ee:d2:a6:27:28:da:27:05:00:84:ee:d7:c8:48:a2: 94:f9:b2:f0:56:b9:51:df:a7:a8:03:1e:fe:ab:97:2b:06:a3: 8d:77:11:e9:31:28:c3:05:30:0a:9a:c1:db:91:2c:d4:7a:46: 37:e9:e1:c4:9a:73:00:28:bf:65:4c:cf:48:48:81:50:b6:52: c5:c1:d9:57:cd:de:51:af:49:e8:03:60:60:13:a3:84:55:0a: ee:38:c8:a3:8f:ee:19:54:3d:9d:5f:4e:42:05:56:0a:41:9d: ad:86:5c:40:83:f5:a9:86:37:46:cf:56:4d:eb:6e:77:87:5b: eb:ae:89:c5:18:fc:bb:1c:76:63:20:e8:93:03:52:d8:b6:e5: 33:16:bb:30:dd:56:25:a0:54:a0:ba:6f:42:37:d2:95:a7:4a: 95:70:a6:67:8a:85:47:a0:04:c7:a4:30:5f:52:10:cd:ce:df: db:bc:8c:ed:48:e8:ad:6b:a1:e0:81:84:90:b6:aa:68:45:0a: 4b:4c:d2:34:09:aa:59:a3:92:69:5a:41:85:ef:69:ac:14:8a: b8:5a:14:96:8a:7d:f5:b8:ec:e1:e4:fb:e5:af:67:81:f6:8b: 2b:c8:d2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPZNSx2hEi5K/E6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk OWVhNjcyZmYtYmY3Mi00YmIxLTlkMGEtNWYzZDExOGQxODA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIjhpDoxc/Vl56qPMLyuaavoxnK5nZtn6ggN Wh982T96iyi74CoHSqAlSUsjRAu4fi8uG1cjKR0nW45wnerpPDUhDx9UcJvdIcyO TAL+iPdueQLWi0Bg5PrSAeHOZsne6w5CHa7L+7G7LAfcfuV+5lbvbFP1omzwxU+Q 4/ZlxoUa12m7djwqlSWx1ahhMMcbnbR0hkrqZ7t/CBETHxotj1D4Cx+YNHSOuxQL TPHm5fQ0htKi2psUKgnZnsNtSkP7Ioxr8cV4aydm3fZOh0zyMzy3ruGgDhGYBhCj bVY64pEeT3jWiigDb5LIi5EJxWTxAQw7hTvAP1Duv0USV5FynwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbeiwVqb5EVZz6zrSyR6xqhfZr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmJmYzkxZjMtYWZlZS0z ZDQzLWFjNzAtMTZhMTE4ZWI3MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOZuCVw92UAyCdc6xGHVGr60gDf7u7Spico2icFAITu18hIopT5svBW uVHfp6gDHv6rlysGo413EekxKMMFMAqawduRLNR6Rjfp4cSacwAov2VMz0hIgVC2 UsXB2VfN3lGvSegDYGATo4RVCu44yKOP7hlUPZ1fTkIFVgpBna2GXECD9amGN0bP Vk3rbneHW+uuicUY/LscdmMg6JMDUti25TMWuzDdViWgVKC6b0I30pWnSpVwpmeK hUegBMekMF9SEM3O39u8jO1I6K1roeCBhJC2qmhFCktM0jQJqlmjkmlaQYXvaawU irhaFJaKffW47OHk++WvZ4H2iyvI0uw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:40:27 2026 by rpki-client