$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa File: 8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa (raw, json) Hash identifier: jKEUX8BwFO9f3xVO7uTuhoJVhNnfawj0o1a2JAWW2y8= Subject key identifier: 5C:2D:AD:C5:C5:6F:B7:25:92:E4:69:7E:8F:C7:10:D1:0D:F7:BF:1E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB67E708F3C509F9D6AB20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 15169 IP address blocks: 104.134.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:67:e7:08:f3:c5:09:f9:d6:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=1457ad74-962c-430b-a271-64779b8ffa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:91:40:fe:8e:df:43:55:d0:22:af:bc:98: 21:51:77:47:df:bd:3a:17:8a:21:8f:c5:b2:c2:e9: 19:5f:a7:d1:3a:1e:96:3b:c2:f3:f0:c2:be:2b:f0: e8:25:2d:85:c9:d3:6e:48:53:9a:83:3c:c4:9a:0e: f4:3a:6e:f8:ec:ae:8e:a4:59:8f:a0:c3:eb:7d:50: dd:e3:f1:0b:83:88:4c:8a:22:92:47:e8:93:f9:d2: fc:c0:61:fe:69:79:6d:de:d6:04:6a:57:e4:90:07: d9:e6:1e:d8:17:18:41:c9:89:01:af:ed:81:55:1e: e6:ca:98:de:eb:19:7c:39:b2:6e:98:da:35:49:40: a6:7a:a7:8c:80:de:50:8d:34:48:80:de:70:16:3c: e5:cc:35:52:34:0d:7c:12:07:53:d6:01:8c:ec:12: cd:8e:6d:0d:45:64:c7:1e:cc:dc:37:6c:d9:24:70: 7b:cf:db:07:30:1e:42:8b:68:3b:8c:ef:bb:0b:b1: d9:c1:61:1f:88:21:bc:95:43:92:84:08:85:2a:45: df:5a:e0:f1:e3:74:12:1a:50:46:5b:5c:f9:e5:fa: d3:31:9d:e1:23:ff:97:a9:bb:0e:13:13:e8:d7:7d: 96:5d:a8:d4:8b:32:9d:f0:18:df:b9:32:f9:7e:f2: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2D:AD:C5:C5:6F:B7:25:92:E4:69:7E:8F:C7:10:D1:0D:F7:BF:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6b:bd:88:bc:85:66:eb:c3:b7:70:6d:5d:b0:32:fe:5c:9b: 50:bb:c8:a2:ff:ad:0f:e3:93:e8:ea:b3:c5:03:3e:6c:15:17: 5a:c1:c3:99:0d:e4:f0:f0:f1:77:81:04:63:60:0e:25:2a:56: 7c:c8:99:8a:9c:e0:61:d1:0e:ca:9b:a5:d6:dd:33:a4:66:e5: e9:56:ff:72:57:c3:eb:e0:53:a5:d4:8b:da:90:4e:c2:fe:5f: 70:92:df:3b:15:49:22:23:6f:46:92:df:a4:a1:d1:2e:2b:d7: bc:f6:c8:e4:3a:dc:9e:f0:e4:c2:33:5f:73:00:6c:9b:a7:5c: 79:3a:b0:ae:62:be:43:c7:fb:10:c8:59:f3:8a:74:28:e2:f9: b4:ce:73:04:f5:b1:fe:d0:5a:54:a8:81:0a:ec:0b:35:26:8f: 71:31:52:c2:06:15:13:9d:75:4d:99:e2:1a:ce:f4:d6:de:17: 7c:30:c4:c7:2c:96:71:de:10:cb:8f:a2:f9:f4:c0:6f:3a:85: 01:6f:2a:b3:2d:46:fd:a4:ed:1d:75:d4:db:73:92:a6:29:53: 61:86:bb:84:22:6a:49:7d:c7:fa:c3:39:78:7f:f7:f9:8d:19: c6:95:09:16:e0:d7:0e:a3:ed:cf:4a:7b:3d:ca:66:50:7d:29: 85:83:cf:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022fnCPPFCfnWqyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MTQ1N2FkNzQtOTYyYy00MzBiLWEyNzEtNjQ3NzliOGZmYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2eRQP6O30NV0CKvvJghUXdH3706F4ohj8Wy wukZX6fROh6WO8Lz8MK+K/DoJS2FydNuSFOagzzEmg70Om747K6OpFmPoMPrfVDd 4/ELg4hMiiKSR+iT+dL8wGH+aXlt3tYEalfkkAfZ5h7YFxhByYkBr+2BVR7mypje 6xl8ObJumNo1SUCmeqeMgN5QjTRIgN5wFjzlzDVSNA18EgdT1gGM7BLNjm0NRWTH HszcN2zZJHB7z9sHMB5Ci2g7jO+7C7HZwWEfiCG8lUOShAiFKkXfWuDx43QSGlBG W1z55frTMZ3hI/+XqbsOExPo132WXajUizKd8BjfuTL5fvKtvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwtrcXFb7clkuRpfo/HENEN978eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGEyZDZhNTctMzVkNS0z MmIyLWI3MWQtNzMxM2UxOTM5YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFrvYi8hWbrw7dwbV2wMv5cm1C7yKL/rQ/jk+jqs8UDPmwVF1rBw5kN 5PDw8XeBBGNgDiUqVnzImYqc4GHRDsqbpdbdM6Rm5elW/3JXw+vgU6XUi9qQTsL+ X3CS3zsVSSIjb0aS36Sh0S4r17z2yOQ63J7w5MIzX3MAbJunXHk6sK5ivkPH+xDI WfOKdCji+bTOcwT1sf7QWlSogQrsCzUmj3ExUsIGFROddU2Z4hrO9NbeF3wwxMcs lnHeEMuPovn0wG86hQFvKrMtRv2k7R111NtzkqYpU2GGu4Qiakl9x/rDOXh/9/mN GcaVCRbg1w6j7c9Kez3KZlB9KYWDz2c= -----END CERTIFICATE-----Generated at Fri Jun 12 08:30:44 2026 by rpki-client