$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa File: 1a5f887f-53ef-3852-8ecd-31eb4511b635.roa (raw, json) Hash identifier: 74mQ/snf9+vuarU1Clq/Q/H58DAmG57sZe/TUAS/VLI= Subject key identifier: CD:E4:EE:AF:05:49:A4:FD:F7:8A:B8:8A:E3:09:50:98:2B:F1:B7:DC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB71A431CC56F2DC9F1180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:71:a4:31:cc:56:f2:dc:9f:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=f1d9c24e-8e74-46b5-a327-dd814efae76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:41:e0:a6:5c:af:59:d0:5f:18:c3:8e:95: c4:ca:af:ca:81:94:23:ef:ee:2c:f7:6b:3c:1e:67: 6e:ad:43:fb:df:9e:be:1b:88:9d:27:d3:b1:7c:41: 08:3f:14:0a:9e:cf:f6:34:98:c4:45:0e:e5:06:a7: 15:0b:23:f3:72:4a:d7:dd:01:c8:36:fb:c5:e6:0b: 99:b4:37:1b:58:97:b0:12:0d:54:77:15:2f:7d:07: 13:5b:9a:a3:7f:17:a9:72:ba:18:7c:61:04:05:c0: 50:23:8d:46:52:42:62:82:33:01:05:80:93:d7:b3: 4b:3c:ad:d4:c6:11:a0:13:12:d6:03:d2:97:03:5f: 92:f3:b4:b3:df:e7:da:fd:36:e1:49:92:23:bb:de: 93:6d:6f:61:d9:85:75:92:28:8b:66:fd:31:2f:25: 4f:87:44:ae:b1:f1:7e:02:41:91:7e:22:ff:33:fe: ea:73:b4:54:b1:21:36:96:3c:3b:ec:c6:7e:40:88: 4b:3f:a6:cd:04:95:f7:11:9e:86:9e:da:f8:ab:f9: b1:44:ef:51:b0:b4:63:f2:49:70:d2:de:ad:be:2a: 5f:79:57:a5:e5:53:b7:bf:e9:5f:ff:ff:c8:c1:7d: 27:7f:b1:c2:1b:53:09:53:45:d5:c7:38:d8:fc:39: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E4:EE:AF:05:49:A4:FD:F7:8A:B8:8A:E3:09:50:98:2B:F1:B7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8e:f3:13:33:fa:f3:c0:2a:04:31:f1:58:3a:12:95:61:8e: c7:03:fa:99:c1:be:c4:70:ba:15:ea:1d:0a:31:9f:be:14:39: 29:c6:0f:65:32:c9:73:88:cd:18:e5:1e:14:3a:10:4f:d4:8d: ea:97:ab:df:e9:13:0a:7f:14:a2:83:c8:29:2c:55:55:1f:f8: f5:be:a5:de:42:3d:82:e4:a4:41:ab:0e:4c:79:a6:d7:e5:40: 31:90:7b:f6:ec:8c:ce:08:06:ba:d5:cb:e8:4b:6a:30:32:b1: e1:44:b9:3a:a6:ab:83:2c:bd:7e:84:9d:57:8c:18:d3:f7:1c: f4:31:93:9f:2b:86:09:21:6a:4d:80:60:ce:32:c0:60:af:04: 72:cb:92:bb:d3:ba:f3:7b:6c:9c:d7:22:02:95:e2:f9:6a:5d: 8b:24:04:1b:99:f7:a6:80:1e:d1:dc:12:ad:e9:fe:1b:ab:e0: c2:7f:a2:0e:6a:ba:aa:91:50:4e:42:84:66:92:01:1d:a0:6c: 52:99:ee:b4:48:3a:71:bd:6b:ac:7e:6a:39:7a:09:1f:3b:77: 03:ab:70:c8:16:7f:5c:8a:98:61:60:14:29:6b:90:6c:1f:a5: e0:44:4b:7d:58:43:48:a6:34:67:15:83:28:17:45:6a:ac:47: 25:96:65:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3023GkMcxW8tyfEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjFkOWMyNGUtOGU3NC00NmI1LWEzMjctZGQ4MTRlZmFlNzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhntB4KZcr1nQXxjDjpXEyq/KgZQj7+4s92s8 HmdurUP7356+G4idJ9OxfEEIPxQKns/2NJjERQ7lBqcVCyPzckrX3QHINvvF5guZ tDcbWJewEg1UdxUvfQcTW5qjfxepcroYfGEEBcBQI41GUkJigjMBBYCT17NLPK3U xhGgExLWA9KXA1+S87Sz3+fa/TbhSZIju96TbW9h2YV1kiiLZv0xLyVPh0SusfF+ AkGRfiL/M/7qc7RUsSE2ljw77MZ+QIhLP6bNBJX3EZ6Gntr4q/mxRO9RsLRj8klw 0t6tvipfeVel5VO3v+lf///IwX0nf7HCG1MJU0XVxzjY/DktOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3k7q8FSaT994q4iuMJUJgr8bfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWE1Zjg4N2YtNTNlZi0z ODUyLThlY2QtMzFlYjQ1MTFiNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSO8xMz+vPAKgQx8Vg6EpVhjscD+pnBvsRwuhXqHQoxn74UOSnGD2Uy yXOIzRjlHhQ6EE/UjeqXq9/pEwp/FKKDyCksVVUf+PW+pd5CPYLkpEGrDkx5ptfl QDGQe/bsjM4IBrrVy+hLajAyseFEuTqmq4MsvX6EnVeMGNP3HPQxk58rhgkhak2A YM4ywGCvBHLLkrvTuvN7bJzXIgKV4vlqXYskBBuZ96aAHtHcEq3p/hur4MJ/og5q uqqRUE5ChGaSAR2gbFKZ7rRIOnG9a6x+ajl6CR87dwOrcMgWf1yKmGFgFClrkGwf peBES31YQ0imNGcVgygXRWqsRyWWZVU= -----END CERTIFICATE-----Generated at Fri Jun 12 08:33:57 2026 by rpki-client