$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa File: 04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa (raw, json) Hash identifier: rMbx1WZkEhBdykecRsmXWJzULRghUWoM4UpQrLzO28U= Subject key identifier: C7:3D:BB:1E:FF:A6:33:8D:4F:81:AA:6E:17:CC:47:D6:EC:83:A0:94 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB7D1D44A4183BDD9FD280 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:7d:1d:44:a4:18:3b:dd:9f:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=b6b54a69-4798-414f-a92d-32ca384574a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c2:61:51:42:99:49:69:77:a1:86:36:1c:87: d1:a5:c6:a8:35:c5:4b:49:ee:0d:3a:59:3f:18:fa: a9:cd:ef:75:3a:29:ae:f3:51:24:39:34:d5:28:ac: 8b:3f:a8:0c:9f:25:66:95:c0:2d:f5:a3:e5:83:53: 77:8e:f9:70:b3:d3:7e:f1:9a:79:d6:9f:d2:c6:bd: 41:83:4b:fd:db:31:56:00:8c:76:6d:f0:be:4a:12: f8:6c:e8:3b:58:04:b9:14:d2:eb:a3:69:f4:38:b8: 32:30:24:17:7f:78:b6:99:b3:a4:47:9c:f8:e7:12: 5a:53:cd:62:ab:8b:37:c6:dc:42:16:c0:ed:83:87: 7b:0a:81:2a:0a:48:82:49:5c:c0:d9:11:5a:29:c1: 55:54:fe:4a:9f:2e:0c:e8:c7:9a:9e:6b:fe:98:fc: 0c:05:8a:40:d9:73:83:7f:8e:04:21:3f:27:d5:ca: 98:9b:ed:ad:24:07:20:56:4a:08:21:36:48:87:39: 07:94:38:94:b5:67:69:7d:a1:18:ed:25:10:95:2d: 55:9c:96:e1:c4:ea:a8:4a:47:40:a8:df:8e:7e:cc: ee:d7:f7:c5:8c:09:e7:aa:bf:3b:70:24:48:67:8a: d6:5b:5e:47:51:2a:c9:ad:3a:58:f4:fe:ac:7f:9b: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3D:BB:1E:FF:A6:33:8D:4F:81:AA:6E:17:CC:47:D6:EC:83:A0:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:ec:d5:41:a9:96:6b:2b:2b:94:aa:20:35:4f:8b:de:aa:d4: 38:69:e5:56:d1:69:30:ac:82:a9:b3:a7:aa:c1:14:13:1a:d8: 86:e0:7f:7d:9d:07:a6:87:53:82:47:5d:c5:bd:ad:1e:5b:44: dc:03:a0:c5:5a:cd:d9:48:5f:78:a3:d1:f3:99:4c:91:95:34: e1:51:ca:06:91:e7:47:e8:a5:9a:ba:33:2c:57:db:2a:f3:5c: c5:25:69:c7:29:44:d8:c7:88:a6:fa:94:62:9c:f2:47:e2:f5: 50:c2:ba:fa:3d:91:88:e8:d6:11:b1:5d:84:64:78:2c:62:7f: 36:23:47:6e:15:1a:45:ee:ee:7f:b0:d5:35:88:57:6c:e6:da: eb:8a:a6:e8:a7:d1:79:76:cd:7a:e4:4a:1f:01:c5:87:5a:a7: cf:5f:ee:f8:80:2f:ec:0a:ef:a4:bc:07:7f:60:70:2b:9e:cd: 51:8f:f3:55:de:49:81:d8:5d:ff:f0:34:6b:d5:9d:6b:85:99: ac:44:fe:7e:00:10:62:90:bd:1a:d6:cb:23:7b:9a:ad:f4:fe: d9:d0:f8:5b:d3:81:f9:ce:04:1e:ee:ec:cb:2c:2d:f5:3f:64: d8:a1:51:08:f9:1b:9a:fd:87:3e:b1:e4:1d:71:2c:1b:c4:ce: 35:fe:48:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE30230dRKQYO92f0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjZiNTRhNjktNDc5OC00MTRmLWE5MmQtMzJjYTM4NDU3NGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+MJhUUKZSWl3oYY2HIfRpcaoNcVLSe4NOlk/ GPqpze91Oimu81EkOTTVKKyLP6gMnyVmlcAt9aPlg1N3jvlws9N+8Zp51p/Sxr1B g0v92zFWAIx2bfC+ShL4bOg7WAS5FNLro2n0OLgyMCQXf3i2mbOkR5z45xJaU81i q4s3xtxCFsDtg4d7CoEqCkiCSVzA2RFaKcFVVP5Kny4M6Meanmv+mPwMBYpA2XOD f44EIT8n1cqYm+2tJAcgVkoIITZIhzkHlDiUtWdpfaEY7SUQlS1VnJbhxOqoSkdA qN+Ofszu1/fFjAnnqr87cCRIZ4rWW15HUSrJrTpY9P6sf5szgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc9ux7/pjONT4GqbhfMR9bsg6CUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRlNWE1ZGItM2ExOS0z MTYxLWIxODctN2FkNGNkODA4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXs1UGplmsrK5SqIDVPi96q1Dhp5VbRaTCsgqmzp6rBFBMa2Ibgf32d B6aHU4JHXcW9rR5bRNwDoMVazdlIX3ij0fOZTJGVNOFRygaR50fopZq6MyxX2yrz XMUlaccpRNjHiKb6lGKc8kfi9VDCuvo9kYjo1hGxXYRkeCxifzYjR24VGkXu7n+w 1TWIV2zm2uuKpuin0Xl2zXrkSh8BxYdap89f7viAL+wK76S8B39gcCuezVGP81Xe SYHYXf/wNGvVnWuFmaxE/n4AEGKQvRrWyyN7mq30/tnQ+FvTgfnOBB7u7MssLfU/ ZNihUQj5G5r9hz6x5B1xLBvEzjX+SNc= -----END CERTIFICATE-----Generated at Fri Jun 12 09:12:31 2026 by rpki-client