$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa File: bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa (raw, json) Hash identifier: MBa5vf7H07KoBmbjOIcyvPu6Ema8xRnsaAQnTHdhZZI= Subject key identifier: EA:52:93:F1:05:0C:AA:A9:B6:89:6E:C9:BA:72:41:10:1D:5A:32:71 Certificate issuer: /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0 Certificate serial: 010D0C9F4328584D40CA5A996B1E7A93645BEF80 Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 104.36.208.0/21 maxlen: 24 2620:12f:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5a:99:6b:1e:7a:93:64:5b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=59a36fb3-1989-4b04-a06f-a654bf044734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:37:c1:84:bf:96:4a:cb:dd:87:2e:b5:a1: cd:ca:37:74:97:b1:49:0e:77:67:1b:bd:1a:10:a7: 43:72:05:c3:8b:04:08:e8:75:64:f7:30:7d:72:a7: 8c:aa:fa:74:83:40:51:ed:51:df:fe:e5:1e:a5:9e: 4a:a1:dd:7c:3d:14:0c:7d:34:10:dd:d6:1c:b2:f8: 24:a7:0a:dc:62:6f:26:66:95:a0:38:d4:f0:e1:09: 43:26:c5:a1:87:1d:a9:c1:65:f8:ba:10:95:15:0b: 24:6e:fa:52:67:7d:8a:74:d2:b7:14:29:bd:a9:82: 1c:1c:39:4c:b2:b4:8a:34:8e:a7:53:56:47:92:d2: ca:33:4c:fe:17:1e:f3:fc:0b:37:db:cf:2f:b2:d0: d1:61:97:aa:00:53:78:26:78:20:f2:c2:83:17:7a: 04:2c:b8:5c:60:4b:03:04:a3:62:5d:26:e7:bb:46: d9:5e:92:ba:22:ee:48:13:81:52:13:ca:a1:58:82: 2b:10:44:f0:28:3c:06:14:d8:93:12:a2:1f:f6:ad: 1d:c1:d7:76:9b:46:72:93:04:af:0a:4c:cd:78:21: 61:89:bc:55:ae:20:72:1e:2a:73:92:8b:ca:86:e3: 34:f5:b5:9b:05:fb:c3:16:a2:a9:d5:90:c9:f9:01: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:52:93:F1:05:0C:AA:A9:B6:89:6E:C9:BA:72:41:10:1D:5A:32:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl X509v3 Authority Key Identifier: keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer sbgp-ipAddrBlock: critical IPv4: 104.36.208.0/21 IPv6: 2620:12f:7000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a0:f4:03:de:68:12:79:c4:a7:39:e7:5f:14:7c:32:89:b7: 57:cd:12:9a:52:65:ba:af:7c:ce:d9:b1:86:96:cb:66:f0:7c: f7:80:f4:2d:bb:3a:f1:27:07:a9:68:67:90:e9:6a:48:42:d8: 36:9e:2a:ff:f6:d7:b7:dc:67:51:7e:fe:61:2e:a1:a6:c4:3d: 0a:18:a3:27:58:ed:aa:da:6e:8a:fa:2b:2c:e7:54:4a:67:27: 46:94:1b:5f:c6:d9:98:f2:fb:e8:b9:7c:15:77:b0:c1:b0:e4: 64:df:ac:c9:70:06:8f:01:bc:5d:0a:ef:c3:13:33:60:b2:d3: 04:c7:ee:4f:11:40:f2:d6:5e:3a:8c:5b:98:0c:0e:a0:f8:e1: e5:b7:f0:ed:28:75:60:bb:b7:11:e3:7f:7b:95:33:85:64:0c: a6:40:27:e6:c1:88:54:79:9f:e0:1e:6d:79:06:71:96:a6:a6: 30:7f:e6:42:2a:92:40:a3:b3:89:09:a6:c0:e5:db:0b:5e:ee: 3d:0d:6f:5b:e3:79:8a:fe:66:81:96:f3:2d:6a:70:5b:c0:95: 72:9b:44:6d:f3:a0:85:1a:89:b3:7e:18:f0:99:1f:4c:4a:48: 69:72:1c:d9:f1:07:14:9d:51:39:a1:15:18:31:d3:c4:b1:63: 44:fc:93:68 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1AylqZax56k2Rb74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI4MjA0ZWItOGNlNS00ZDlhLWIzODMtYjQ0MzNlODA3 NWEwMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NTlhMzZmYjMtMTk4OS00YjA0LWEwNmYtYTY1NGJmMDQ0NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNE3wYS/lkrL3YcutaHNyjd0l7FJDndnG70a EKdDcgXDiwQI6HVk9zB9cqeMqvp0g0BR7VHf/uUepZ5Kod18PRQMfTQQ3dYcsvgk pwrcYm8mZpWgONTw4QlDJsWhhx2pwWX4uhCVFQskbvpSZ32KdNK3FCm9qYIcHDlM srSKNI6nU1ZHktLKM0z+Fx7z/As3288vstDRYZeqAFN4Jngg8sKDF3oELLhcYEsD BKNiXSbnu0bZXpK6Iu5IE4FSE8qhWIIrEETwKDwGFNiTEqIf9q0dwdd2m0ZykwSv CkzNeCFhibxVriByHipzkovKhuM09bWbBfvDFqKp1ZDJ+QEOTQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOpSk/EFDKqptoluybpyQRAdWjJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjgy MDRlYi04Y2U1LTRkOWEtYjM4My1iNDQzM2U4MDc1YTAvYmI5OTNhZTMtMGU2YS0z YTZkLWFjYTUtNjllZGQyMmNmN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWI4MjA0ZWItOGNlNS00ZDlhLWIz ODMtYjQ0MzNlODA3NWEwL2ViODIwNGViLThjZTUtNGQ5YS1iMzgzLWI0NDMzZTgw NzVhMC5jcmwwHwYDVR0jBBgwFoAULGFgsj4J6JefPCz1sTmrvBGlOE8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjgyMDRlYi04Y2U1LTRkOWEtYjM4My1iNDQz M2U4MDc1YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDaCTQMA4E AgACMAgDBgAmIAEvcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYoPQD3mgSecSnOedfFHwyibdXzRKaUmW6 r3zO2bGGlstm8Hz3gPQtuzrxJwepaGeQ6WpIQtg2nir/9te33GdRfv5hLqGmxD0K GKMnWO2q2m6K+iss51RKZydGlBtfxtmY8vvouXwVd7DBsORk36zJcAaPAbxdCu/D EzNgstMEx+5PEUDy1l46jFuYDA6g+OHlt/DtKHVgu7cR4397lTOFZAymQCfmwYhU eZ/gHm15BnGWpqYwf+ZCKpJAo7OJCabA5dsLXu49DW9b43mK/maBlvMtanBbwJVy m0Rt86CFGomzfhjwmR9MSkhpchzZ8QcUnVE5oRUYMdPEsWNE/JNo -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:07 2026 by rpki-client