$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afaa03b0-c179-354d-ad3e-3bcf8697c362.roa File: afaa03b0-c179-354d-ad3e-3bcf8697c362.roa (raw, json) Hash identifier: 9LJXBTMU8J9uvMbhyvXXCmJ3hz3Sk+v0czSte5hOq4E= Subject key identifier: 9C:F1:8B:41:2A:A1:90:26:12:A7:BC:18:A1:48:8F:63:7C:65:CA:2C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB71C7F6F25145D0A5B400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afaa03b0-c179-354d-ad3e-3bcf8697c362.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:71:c7:f6:f2:51:45:d0:a5:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=8f1a5dc5-28ba-467a-8e95-7bdf6ddcd86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:24:a2:a1:80:36:58:8e:e9:1c:54:08:ac:00: 83:07:32:10:4f:7d:68:16:28:36:3d:8f:c2:2a:de: 98:9c:38:8e:cb:c8:3b:24:0d:00:61:4d:ba:fd:43: 76:4b:bf:27:3e:20:2d:7b:31:b4:63:d4:bc:30:9c: 0c:f7:4b:0e:8f:87:a2:3a:69:26:4e:de:48:fe:6c: df:b2:3e:a3:dd:7e:91:e3:fb:10:31:fc:49:12:e1: e2:0a:bb:1b:83:c0:c8:ab:f2:b3:3a:70:23:d2:90: 2d:44:92:dc:a7:cd:ef:e0:ee:0e:76:78:3f:78:6a: 54:df:da:b1:c9:40:fe:bd:c7:05:c2:d4:4e:15:bc: 33:3f:6c:63:f0:5b:9b:20:61:10:79:c5:ea:5b:c6: b9:3d:68:44:80:5e:a2:7e:c9:96:d1:d2:e2:dd:87: 19:d7:e3:5f:20:58:87:bb:7a:0b:19:88:f2:04:ab: eb:91:0c:80:0d:14:f7:05:d3:b2:ca:98:57:50:71: 05:d1:ff:e5:bf:cf:2c:1b:a9:8d:1a:34:04:81:6c: b7:07:6a:98:bc:10:39:b1:ec:52:b0:a5:78:89:49: f1:fb:d6:e0:59:e5:a9:9d:ec:29:71:17:c0:07:71: 89:3d:b9:e5:ec:4e:36:c8:23:48:bf:bb:80:48:21: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F1:8B:41:2A:A1:90:26:12:A7:BC:18:A1:48:8F:63:7C:65:CA:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afaa03b0-c179-354d-ad3e-3bcf8697c362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:35:f0:be:da:24:e8:77:32:fa:a0:6f:dc:f6:78:06:6a:f8: cc:d9:c5:97:8f:6b:06:9a:b9:f6:86:65:a7:c8:f8:4e:bc:70: 14:f4:26:53:26:a2:60:53:b2:c2:36:63:23:6c:4f:51:89:d0: b7:82:1a:a1:80:c7:89:2e:6a:df:04:f6:f9:88:e5:1b:2c:c5: 04:88:07:38:7d:5f:90:ad:61:97:2a:24:17:5e:0e:92:bd:b1: 8d:a5:64:42:f3:9e:56:c6:2c:50:7e:f8:82:5f:af:0f:f8:2a: 10:83:b3:5a:b6:85:60:2a:eb:fe:62:a2:f2:39:49:f2:c7:5f: 57:ec:cd:26:a3:6b:d4:22:84:7e:cf:fd:d2:91:c3:57:b8:5d: 31:de:1a:4b:81:a2:db:f8:99:4c:70:7f:e6:f2:2c:63:0c:73: 89:d8:72:3a:5f:4c:51:28:66:c4:01:31:8f:70:02:c7:ec:b7: 70:aa:f1:da:69:af:ab:d5:c0:fd:bb:8b:17:a3:99:6a:91:27: ea:a2:3b:d9:5c:8c:29:cc:17:3d:c5:15:85:92:9c:58:e7:09: 31:cc:47:f6:35:e9:d5:1b:39:5b:99:01:11:3d:26:a5:cf:2d: 6c:91:c4:26:c5:d4:14:71:47:4c:52:db:86:bd:46:a9:dd:11: 43:c6:6a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3023HH9vJRRdCltAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk OGYxYTVkYzUtMjhiYS00NjdhLThlOTUtN2JkZjZkZGNkODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCSioYA2WI7pHFQIrACDBzIQT31oFig2PY/C Kt6YnDiOy8g7JA0AYU26/UN2S78nPiAtezG0Y9S8MJwM90sOj4eiOmkmTt5I/mzf sj6j3X6R4/sQMfxJEuHiCrsbg8DIq/KzOnAj0pAtRJLcp83v4O4Odng/eGpU39qx yUD+vccFwtROFbwzP2xj8FubIGEQecXqW8a5PWhEgF6ifsmW0dLi3YcZ1+NfIFiH u3oLGYjyBKvrkQyADRT3BdOyyphXUHEF0f/lv88sG6mNGjQEgWy3B2qYvBA5sexS sKV4iUnx+9bgWeWpnewpcRfAB3GJPbnl7E42yCNIv7uASCHbgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzxi0EqoZAmEqe8GKFIj2N8ZcosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWZhYTAzYjAtYzE3OS0z NTRkLWFkM2UtM2JjZjg2OTdjMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA18L7aJOh3Mvqgb9z2eAZq+MzZxZePawaaufaGZafI+E68cBT0JlMm omBTssI2YyNsT1GJ0LeCGqGAx4kuat8E9vmI5RssxQSIBzh9X5CtYZcqJBdeDpK9 sY2lZELznlbGLFB++IJfrw/4KhCDs1q2hWAq6/5iovI5SfLHX1fszSaja9QihH7P /dKRw1e4XTHeGkuBotv4mUxwf+byLGMMc4nYcjpfTFEoZsQBMY9wAsfst3Cq8dpp r6vVwP27ixejmWqRJ+qiO9lcjCnMFz3FFYWSnFjnCTHMR/Y16dUbOVuZARE9JqXP LWyRxCbF1BRxR0xS24a9RqndEUPGalQ= -----END CERTIFICATE-----Generated at Fri Jun 12 08:31:31 2026 by rpki-client