$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa File: 3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa (raw, json) Hash identifier: N3CsVWmJdiGojcPfX6hNPlgreObILN+RDTBx++rLk0o= Subject key identifier: 5F:01:C3:E8:2E:5B:37:7C:5F:DA:33:E0:27:22:D4:84:DC:96:70:78 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB79B2DBC96C6E84D48380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:79:b2:db:c9:6c:6e:84:d4:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=bb161481-8358-4786-9408-bf93bbda9b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:30:81:f0:e9:79:dd:b0:76:5e:a4:c6:85:ae: e2:2c:5c:d6:51:40:3e:46:bd:ae:5b:96:1e:52:6b: cd:a3:59:af:d4:c3:3d:bb:b7:a5:e9:41:fd:9e:e2: f7:a9:c7:db:88:c1:33:d6:3b:b3:9c:57:70:d8:d2: ed:5a:c0:e8:53:4f:4c:b2:00:7e:0b:f0:09:aa:4e: ba:b7:73:bf:ad:02:38:cf:28:b3:cb:00:6f:73:da: a7:8d:40:d9:07:07:06:73:c8:cc:f3:9d:13:a9:fd: eb:09:9d:4f:3b:24:83:c8:a7:4b:23:92:dc:83:71: 94:57:25:7a:31:3c:63:83:ed:aa:16:56:34:a8:a9: 85:a9:66:26:b7:d1:31:28:36:4d:4a:81:d7:b4:72: 1e:48:a0:74:0a:5b:ab:e9:96:44:02:c7:ba:26:74: b6:c1:4f:83:d6:21:42:69:75:a0:5f:d4:f2:7f:37: 62:f1:27:99:d5:83:ab:98:29:5f:30:45:9a:34:b5: ad:ce:16:a1:6a:ae:2d:30:90:e5:c5:fb:2f:9d:4c: 0c:5a:a5:42:ce:2f:15:61:84:d3:05:ba:4e:8b:d3: 27:e9:ed:42:8e:1c:88:12:32:28:30:42:f2:e9:8d: 9d:b5:a5:31:d8:cf:b5:b8:83:82:fb:e2:1c:c3:63: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:01:C3:E8:2E:5B:37:7C:5F:DA:33:E0:27:22:D4:84:DC:96:70:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4a:a2:96:4d:74:08:27:55:f2:70:9d:9e:a4:15:ab:83:93: c9:da:47:48:18:fc:94:52:5f:08:e9:e4:c5:f7:6f:22:c8:07: 0e:5f:8d:73:4b:1f:79:2e:8e:78:86:63:93:fb:34:60:48:94: fc:89:2d:f0:06:ed:8b:34:d7:cc:38:b2:d0:e5:18:2e:b5:e3: 1a:ac:2b:27:7b:2f:d6:b8:6c:5a:df:7e:83:6f:27:0a:91:4c: d7:8a:73:25:e4:d3:ab:59:1a:02:2d:b1:e0:fc:fe:d0:8d:06: 86:c0:a5:ed:64:6e:0b:e0:ca:24:3b:07:a3:9b:06:47:79:cc: ae:61:45:9c:65:4b:c5:e6:ca:69:3d:ec:2e:fe:12:50:d9:27: 83:89:ea:cc:56:3c:aa:37:e7:e0:cf:d0:20:61:cf:00:a8:e5: 0a:b3:72:9a:4a:6f:2f:f6:f0:ce:5a:80:ec:d9:8a:3f:ab:9c: 2b:16:36:ac:51:4f:6b:fb:44:80:74:4d:12:cf:7f:2b:40:4d: bd:e0:4b:24:a8:55:dd:ca:73:7a:f6:89:35:e6:0d:b9:a5:a3: b7:dc:79:4c:aa:9b:e6:c1:a0:16:56:d3:e8:25:48:7a:9a:b3: 36:b9:38:8c:6f:e8:5f:27:bf:fd:47:e3:16:e0:7b:e9:36:99: ca:aa:65:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3023my28lsboTUg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk YmIxNjE0ODEtODM1OC00Nzg2LTk0MDgtYmY5M2JiZGE5YjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjCB8Ol53bB2XqTGha7iLFzWUUA+Rr2uW5Ye UmvNo1mv1MM9u7el6UH9nuL3qcfbiMEz1juznFdw2NLtWsDoU09MsgB+C/AJqk66 t3O/rQI4zyizywBvc9qnjUDZBwcGc8jM850Tqf3rCZ1POySDyKdLI5Lcg3GUVyV6 MTxjg+2qFlY0qKmFqWYmt9ExKDZNSoHXtHIeSKB0Clur6ZZEAse6JnS2wU+D1iFC aXWgX9Tyfzdi8SeZ1YOrmClfMEWaNLWtzhahaq4tMJDlxfsvnUwMWqVCzi8VYYTT BbpOi9Mn6e1CjhyIEjIoMELy6Y2dtaUx2M+1uIOC++Icw2P9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8Bw+guWzd8X9oz4Cci1ITclnB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2ZkNDAyNTktNjEzOC0z ZGNkLWJmMDItNTRhMzFlOGQzN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxKopZNdAgnVfJwnZ6kFauDk8naR0gY/JRSXwjp5MX3byLIBw5fjXNL H3kujniGY5P7NGBIlPyJLfAG7Ys018w4stDlGC614xqsKyd7L9a4bFrffoNvJwqR TNeKcyXk06tZGgItseD8/tCNBobApe1kbgvgyiQ7B6ObBkd5zK5hRZxlS8Xmymk9 7C7+ElDZJ4OJ6sxWPKo35+DP0CBhzwCo5QqzcppKby/28M5agOzZij+rnCsWNqxR T2v7RIB0TRLPfytATb3gSySoVd3Kc3r2iTXmDbmlo7fceUyqm+bBoBZW0+glSHqa sza5OIxv6F8nv/1H4xbge+k2mcqqZXE= -----END CERTIFICATE-----Generated at Fri Jun 12 09:11:38 2026 by rpki-client