$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1aea7d94-7c58-3867-9697-570f065837e1.roa File: 1aea7d94-7c58-3867-9697-570f065837e1.roa (raw, json) Hash identifier: SoERZifbBxQF8GJg+Ql5D2RnFnR1GUZ2JEsBy8VoMs8= Subject key identifier: 71:CC:C2:CD:16:79:62:D9:8B:91:5A:E4:F9:9C:A1:C7:B9:6D:3E:32 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB7BA599A4534167112480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1aea7d94-7c58-3867-9697-570f065837e1.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:7b:a5:99:a4:53:41:67:11:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=b15dc30c-74c0-4269-9b9a-4c48d42b37f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:9c:9f:d1:4b:7e:94:d7:31:7c:dc:cc:f0: 87:0a:1e:7a:75:0f:61:ae:e0:dc:72:00:6a:a6:dd: 61:49:f5:b9:04:41:47:5c:a4:30:ec:f1:4b:8e:ba: 18:b1:a7:fa:72:2d:82:95:8e:3e:d7:fd:ca:2a:7a: 66:d1:d9:79:0d:83:d5:ba:d0:5d:28:8a:48:a1:a4: 59:b2:e5:c5:da:35:be:f5:f9:17:d6:bb:81:93:07: de:53:91:49:bc:68:cd:2a:15:52:9b:ea:cf:1d:d7: 1f:52:8c:a0:ba:95:78:47:50:ca:2b:13:fd:81:a7: c1:c7:44:88:71:3a:f9:a9:8e:29:37:1a:64:bf:d6: 02:53:93:ef:85:a9:4e:03:d5:b2:c7:8b:ac:49:d7: 35:29:c7:96:9c:06:a4:fc:4f:69:87:02:88:d5:f0: ac:fc:06:28:90:e5:65:16:f1:5b:43:16:47:3f:ac: fa:f4:01:00:f3:9c:92:32:52:b1:98:d0:8d:77:75: 4d:f1:48:df:be:e6:11:d7:cd:9e:96:b4:cb:3b:ea: fe:49:bf:41:c9:37:cf:7b:35:00:bf:4f:9a:b3:1b: 4f:7b:84:8b:b4:90:f9:df:9c:25:85:50:6c:ad:a6: 01:3a:e8:97:d3:6d:fa:f1:c2:5f:0b:2e:fd:fa:ae: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:C2:CD:16:79:62:D9:8B:91:5A:E4:F9:9C:A1:C7:B9:6D:3E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1aea7d94-7c58-3867-9697-570f065837e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:25:f1:55:a7:b2:fd:78:5e:c2:34:17:d4:2c:2d:ee:f0:b4: 2e:1f:c2:a3:67:f1:a4:1a:83:f3:77:d0:e5:4c:14:a9:32:99: 55:a2:c7:a6:ef:3b:9b:3c:a7:81:95:69:8e:b0:4c:fd:7f:87: 83:dc:ca:aa:65:80:91:14:39:69:a7:1f:51:fa:f3:72:13:ff: 5c:ac:f2:01:a3:90:0e:fb:d7:71:e9:8a:14:a3:2a:3c:f0:b8: a3:3f:ba:33:52:ba:02:e6:5d:39:ad:aa:f2:72:75:af:fe:ea: e0:8a:9b:27:02:bf:89:5b:54:fd:5b:61:b0:ba:1f:cf:ef:1c: 91:c1:c3:c5:c5:aa:1e:f5:b8:fa:55:c4:85:1a:9f:20:d1:34: ab:23:35:7c:78:d8:ea:2f:66:4a:a9:d5:4f:4b:4e:b5:90:07: 57:b7:20:14:07:81:53:11:dc:70:10:1d:ac:f4:30:f0:92:ab: 2c:9c:30:b1:cd:15:f6:a4:27:8e:79:a1:66:1a:89:15:0e:fa: 11:d9:ce:1c:dc:c7:aa:15:1c:84:98:76:a5:e7:33:1e:80:d4: 26:62:55:d2:15:82:df:3f:ab:3a:6a:2f:6c:f5:1c:fa:a6:bc: 80:94:3a:db:99:40:6f:da:14:90:8e:8b:fd:71:ef:3b:67:4c: d5:d4:b0:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3023ulmaRTQWcRJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjE1ZGMzMGMtNzRjMC00MjY5LTliOWEtNGM0OGQ0MmIzN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhucn9FLfpTXMXzczPCHCh56dQ9hruDccgBq pt1hSfW5BEFHXKQw7PFLjroYsaf6ci2ClY4+1/3KKnpm0dl5DYPVutBdKIpIoaRZ suXF2jW+9fkX1ruBkwfeU5FJvGjNKhVSm+rPHdcfUoygupV4R1DKKxP9gafBx0SI cTr5qY4pNxpkv9YCU5PvhalOA9Wyx4usSdc1KceWnAak/E9phwKI1fCs/AYokOVl FvFbQxZHP6z69AEA85ySMlKxmNCNd3VN8UjfvuYR182elrTLO+r+Sb9ByTfPezUA v0+asxtPe4SLtJD535wlhVBsraYBOuiX02368cJfCy79+q6B9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHMws0WeWLZi5Fa5Pmcoce5bT4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWFlYTdkOTQtN2M1OC0z ODY3LTk2OTctNTcwZjA2NTgzN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUl8VWnsv14XsI0F9QsLe7wtC4fwqNn8aQag/N30OVMFKkymVWix6bv O5s8p4GVaY6wTP1/h4PcyqplgJEUOWmnH1H683IT/1ys8gGjkA7713HpihSjKjzw uKM/ujNSugLmXTmtqvJyda/+6uCKmycCv4lbVP1bYbC6H8/vHJHBw8XFqh71uPpV xIUanyDRNKsjNXx42OovZkqp1U9LTrWQB1e3IBQHgVMR3HAQHaz0MPCSqyycMLHN FfakJ455oWYaiRUO+hHZzhzcx6oVHISYdqXnMx6A1CZiVdIVgt8/qzpqL2z1HPqm vICUOtuZQG/aFJCOi/1x7ztnTNXUsNo= -----END CERTIFICATE-----Generated at Fri Jun 12 08:35:28 2026 by rpki-client