$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa File: 1bb58749-ba43-3679-b52d-df22c5320431.roa (raw, json) Hash identifier: PU3fT8UQbBfxw62SByQw/r6/GgqyCeDZHtwAUh9Rw18= Subject key identifier: D1:1F:F3:22:4E:C4:96:D4:70:C6:54:EA:73:AC:54:9A:82:FC:B0:A1 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF2109EE3DBC0AB12F0809880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.132.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:9e:e3:db:c0:ab:12:f0:80:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=b67e98fa-016f-409a-9a98-b9e60cd74acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1d:02:b2:73:77:e7:c6:69:2d:f5:b7:a0:76: b9:d5:c7:9b:7f:45:0b:d8:77:27:d9:e4:4b:72:91: a8:26:34:98:1d:19:80:81:6f:91:d7:85:a9:55:e6: ed:44:97:0e:dc:9f:5b:05:da:5d:f8:37:3d:a8:aa: 54:ab:ad:97:c2:f1:3e:49:21:79:e2:c6:b0:94:cc: 8d:b0:97:7b:e8:47:fd:ce:3d:04:e5:d6:41:47:4a: c3:f0:6e:39:34:70:9e:2f:62:50:3c:26:c5:97:71: a6:9a:89:d9:b8:ea:96:39:90:ce:24:ca:40:f4:a8: c5:53:b7:a8:b2:39:8b:d0:b7:59:7b:9c:84:76:85: 29:84:f5:70:67:7f:92:76:d0:e7:5a:25:48:fe:8d: 62:d9:cd:f5:b6:4d:f0:57:57:62:4f:7c:05:32:b7: ff:0e:d1:b7:5f:9c:87:db:3f:69:ce:9f:5c:c4:fe: f7:64:54:da:cd:ab:97:ed:34:09:19:a1:47:6d:b5: 89:3b:d6:56:9d:58:06:2e:bd:59:49:ed:1a:16:a2: 7d:40:7b:73:99:c6:7b:0a:2f:d7:1c:3e:dc:3d:0c: 0a:e0:c0:e2:18:ad:00:78:1e:cf:85:0e:d3:24:7a: 86:fb:9e:38:ec:0c:c0:e5:41:dd:14:89:66:9c:f7: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1F:F3:22:4E:C4:96:D4:70:C6:54:EA:73:AC:54:9A:82:FC:B0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:39:22:d9:ba:0d:77:e1:d3:03:ec:c0:f3:0e:9f:73:e3:a0: 03:e6:df:6b:eb:1d:15:5c:a4:9d:aa:e6:77:c1:40:4a:54:2c: 60:e9:ca:ca:e7:9a:7a:ab:d7:a7:af:68:75:72:9f:31:4b:5a: bf:fe:1e:6a:5a:f5:b5:42:d1:43:08:ac:6e:c3:5f:b0:71:60: b0:50:cb:be:fa:a0:08:49:e6:40:6f:7d:b8:5f:a0:85:a4:d8: 7b:9d:f7:aa:39:de:a6:2a:42:7b:fa:3e:0d:e0:61:8c:bd:53: 65:55:40:3f:93:e7:f5:52:5f:77:4b:47:c2:f5:6e:3f:e7:17: 40:1e:39:72:d0:8e:d0:8f:94:c0:16:f6:83:b8:d6:49:14:cb: ab:ba:98:dc:99:08:46:5c:5a:82:ad:73:eb:20:bc:5f:0a:5b: a6:a3:0d:29:f0:3d:e4:b9:ae:a5:1e:35:70:eb:db:8a:99:f8: 42:69:b0:e0:1e:3e:5c:b6:06:72:7c:3e:74:23:c4:08:14:51: 35:19:4f:ef:1c:a3:34:3e:9f:f1:ec:d4:7d:c6:3f:e1:ba:4d: 5e:be:c7:ce:22:7e:e7:26:6a:59:c7:0e:99:f7:1e:69:63:76: 66:ca:53:94:bc:28:e2:1d:a0:aa:39:16:d9:34:ca:f3:13:c4: ed:d7:12:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEJ7j28CrEvCAmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk YjY3ZTk4ZmEtMDE2Zi00MDlhLTlhOTgtYjllNjBjZDc0YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR0CsnN358ZpLfW3oHa51cebf0UL2Hcn2eRL cpGoJjSYHRmAgW+R14WpVebtRJcO3J9bBdpd+Dc9qKpUq62XwvE+SSF54sawlMyN sJd76Ef9zj0E5dZBR0rD8G45NHCeL2JQPCbFl3GmmonZuOqWOZDOJMpA9KjFU7eo sjmL0LdZe5yEdoUphPVwZ3+SdtDnWiVI/o1i2c31tk3wV1diT3wFMrf/DtG3X5yH 2z9pzp9cxP73ZFTazauX7TQJGaFHbbWJO9ZWnVgGLr1ZSe0aFqJ9QHtzmcZ7Ci/X HD7cPQwK4MDiGK0AeB7PhQ7TJHqG+5447AzA5UHdFIlmnPdb0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEf8yJOxJbUcMZU6nOsVJqC/LChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWJiNTg3NDktYmE0My0z Njc5LWI1MmQtZGYyMmM1MzIwNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALo5Itm6DXfh0wPswPMOn3PjoAPm32vrHRVcpJ2q5nfBQEpULGDpysrn mnqr16evaHVynzFLWr/+Hmpa9bVC0UMIrG7DX7BxYLBQy776oAhJ5kBvfbhfoIWk 2Hud96o53qYqQnv6Pg3gYYy9U2VVQD+T5/VSX3dLR8L1bj/nF0AeOXLQjtCPlMAW 9oO41kkUy6u6mNyZCEZcWoKtc+sgvF8KW6ajDSnwPeS5rqUeNXDr24qZ+EJpsOAe Ply2BnJ8PnQjxAgUUTUZT+8cozQ+n/Hs1H3GP+G6TV6+x84ifucmalnHDpn3Hmlj dmbKU5S8KOIdoKo5Ftk0yvMTxO3XEsI= -----END CERTIFICATE-----Generated at Fri Jun 12 09:13:57 2026 by rpki-client