$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa File: 971c0aba-2882-33af-b5c2-5d49fdd45247.roa (raw, json) Hash identifier: AFqlG5rwQZKuHr1zvEdk/5MogCRl8CS2vshVWqeJ2c0= Subject key identifier: 46:18:FB:E9:7E:19:80:50:41:10:38:25:1E:E5:41:4B:1A:4D:DD:3D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB6BCF3C97C8D73E803D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:6b:cf:3c:97:c8:d7:3e:80:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=ea823949-6199-4c4a-98a7-760b153188a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:03:bb:4f:ac:18:1a:fc:22:f0:fa:50:c1:81: 45:87:36:61:4d:2f:6d:74:8d:62:10:7f:1e:a7:ab: 4f:90:e5:60:69:7d:50:cb:17:e3:ea:d8:28:7a:08: 42:0f:55:90:d9:e1:74:cb:5d:7e:28:28:1f:ec:f2: 75:ed:39:06:c4:9e:63:c2:83:33:8b:16:1a:5d:bc: 02:55:59:ac:e3:4c:97:21:75:92:49:8b:ed:19:66: 69:d7:d4:7b:49:8d:cb:2b:4d:16:3b:ac:51:0d:41: fd:b0:76:45:cf:b9:a8:3e:42:97:35:5d:dd:08:11: aa:98:0c:01:7b:ec:71:7e:e3:c2:49:47:60:24:0e: c5:b2:e6:6b:f5:7c:0b:4b:91:4b:a2:18:e7:c2:00: ae:2d:26:bd:9d:c6:75:59:15:19:f6:bc:68:5c:33: 46:0f:e5:83:f9:99:49:c5:72:43:14:55:9f:4a:ac: 54:f9:d1:27:30:50:43:e5:d5:0f:67:70:30:79:dd: 0c:42:42:50:36:c9:7a:2f:87:f5:ff:9a:12:f3:b1: 47:f0:88:ea:0c:00:32:20:5a:e6:4c:69:66:24:05: 7e:da:28:5b:6e:7b:87:c5:ff:88:3a:76:8e:77:ec: 99:00:fd:32:fa:4f:69:d3:e5:46:05:c2:d6:96:64: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:18:FB:E9:7E:19:80:50:41:10:38:25:1E:E5:41:4B:1A:4D:DD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:71:9a:47:8b:39:1e:b6:64:2c:f6:4a:72:a6:d0:ea:4f:5d: f7:f8:57:f0:ac:a4:1f:51:70:f2:6a:05:62:52:d6:59:22:55: 44:1d:c8:49:26:92:35:03:ec:c8:dd:34:c3:a9:f3:22:86:93: 3e:5e:fc:05:a7:89:d5:cc:98:0d:95:b0:da:b9:32:2e:6a:85: 6b:ae:7b:a5:f9:92:07:77:29:d5:bb:c1:ee:32:1e:09:e6:20: dc:04:c8:54:57:ba:79:f9:e6:d6:2d:d2:dd:40:40:bd:0e:c7: df:ac:bc:ec:78:e9:5c:1d:51:bc:24:8d:56:de:3d:06:78:56: ec:77:e1:36:42:aa:4f:59:d1:92:fe:c4:30:2b:53:48:dc:a8: 6b:2c:c7:ec:82:ce:24:7d:e4:9d:f4:b2:b3:eb:7a:b6:21:95: 21:76:89:ae:f4:7c:df:23:69:f0:4f:7d:ab:60:db:9b:ec:39: 7b:03:31:12:10:9a:6f:54:2b:35:eb:f3:4d:a7:c6:67:f9:23: 05:f5:cb:26:21:99:10:34:1b:0d:ff:f6:57:32:01:a2:9e:6a: 40:f0:89:84:81:cc:3b:4a:4b:c7:93:c2:6b:94:43:e1:6f:7c: 35:6f:d1:5b:fd:fe:c1:b5:19:09:53:3c:51:08:58:41:c7:50: d2:5a:16:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022vPPJfI1z6APYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZWE4MjM5NDktNjE5OS00YzRhLTk4YTctNzYwYjE1MzE4OGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQO7T6wYGvwi8PpQwYFFhzZhTS9tdI1iEH8e p6tPkOVgaX1Qyxfj6tgoeghCD1WQ2eF0y11+KCgf7PJ17TkGxJ5jwoMzixYaXbwC VVms40yXIXWSSYvtGWZp19R7SY3LK00WO6xRDUH9sHZFz7moPkKXNV3dCBGqmAwB e+xxfuPCSUdgJA7FsuZr9XwLS5FLohjnwgCuLSa9ncZ1WRUZ9rxoXDNGD+WD+ZlJ xXJDFFWfSqxU+dEnMFBD5dUPZ3Awed0MQkJQNsl6L4f1/5oS87FH8IjqDAAyIFrm TGlmJAV+2ihbbnuHxf+IOnaOd+yZAP0y+k9p0+VGBcLWlmRUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYY++l+GYBQQRA4JR7lQUsaTd09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTcxYzBhYmEtMjg4Mi0z M2FmLWI1YzItNWQ0OWZkZDQ1MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElxmkeLOR62ZCz2SnKm0OpPXff4V/CspB9RcPJqBWJS1lkiVUQdyEkm kjUD7MjdNMOp8yKGkz5e/AWnidXMmA2VsNq5Mi5qhWuue6X5kgd3KdW7we4yHgnm INwEyFRXunn55tYt0t1AQL0Ox9+svOx46VwdUbwkjVbePQZ4Vux34TZCqk9Z0ZL+ xDArU0jcqGssx+yCziR95J30srPrerYhlSF2ia70fN8jafBPfatg25vsOXsDMRIQ mm9UKzXr802nxmf5IwX1yyYhmRA0Gw3/9lcyAaKeakDwiYSBzDtKS8eTwmuUQ+Fv fDVv0Vv9/sG1GQlTPFEIWEHHUNJaFlY= -----END CERTIFICATE-----Generated at Fri Jun 12 09:12:30 2026 by rpki-client