$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa File: e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa (raw, json) Hash identifier: E1wrI0IP4+yvF7xQwT4o3JULA0ZysQhtJ594Ve+M+sw= Subject key identifier: B4:C3:70:AD:CA:C1:D5:28:FC:57:0F:3C:88:FB:66:C9:A6:26:03:02 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584DF4DB6BF41489B1756B53DEC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 41264 IP address blocks: 104.133.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:6b:f4:14:89:b1:75:6b:53:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=77e4afbe-fa1e-4ce4-a3c7-d37d1e3761e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:28:4d:16:0d:c8:82:3f:d2:31:dc:9d:4d: 79:e0:c2:08:77:42:ca:8f:e3:9f:41:57:0f:95:c2: 9f:e1:4e:18:57:3e:74:97:c1:bc:68:2a:a2:0a:5f: 6f:b6:8c:3c:38:57:8f:69:cf:06:61:cb:db:b4:00: 45:1b:ad:33:df:94:cc:09:ce:3d:8d:64:b4:69:27: 50:11:ad:72:33:21:1a:bc:8b:ea:bc:8d:51:cf:06: 1b:10:44:ee:14:98:1e:b7:77:0f:fb:08:dd:ec:ef: bf:02:05:b5:89:af:94:de:78:da:ad:6c:4a:9c:9b: 4f:3c:c7:88:3d:63:ef:e8:20:09:eb:8f:0d:a7:d6: 6e:95:fa:18:f3:3c:2e:2b:97:f9:a0:7b:42:9b:27: ec:18:32:b4:81:0a:45:24:83:ed:d9:b2:29:67:6e: 6e:85:8f:4b:e2:84:ca:49:ab:c1:b5:f8:44:eb:d9: 45:ea:fa:8d:17:bc:fd:fb:fe:b4:ad:c9:db:79:13: f9:fd:f8:af:0e:c4:2b:c7:ad:b6:fc:6a:7c:e2:3b: 72:ec:e0:13:cc:02:9a:73:9f:ff:a3:76:26:6e:c4: 97:94:d6:39:1c:19:29:ba:df:89:5f:e0:53:9d:80: 4e:8f:2f:0e:b5:47:c1:8e:5c:b1:5d:5b:63:5d:0e: 84:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C3:70:AD:CA:C1:D5:28:FC:57:0F:3C:88:FB:66:C9:A6:26:03:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e21d4bc1-19b9-3593-8e99-585b570cc3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f7:b6:64:61:94:9f:c1:5c:6b:15:aa:40:2e:a1:f9:a4:59: ce:14:11:71:2d:5e:1f:34:d6:f4:00:cf:ed:60:fa:e0:22:6e: b7:4a:ab:6d:62:5e:1c:4b:c7:67:1c:dd:74:6f:69:43:53:b0: 10:6b:1f:8e:6e:6e:2a:20:8a:72:a8:cb:52:41:bc:9d:e0:ca: e5:d2:20:68:21:6d:f3:7c:d1:d2:fd:a9:09:b9:dc:f1:d3:76: 0f:03:f1:8e:3e:72:12:36:17:ae:c1:e9:be:6c:09:8b:12:c4: 64:45:9e:0b:a6:d4:3f:b9:b0:ea:4b:da:27:41:02:20:d0:63: 73:f4:6c:73:17:5a:fa:bd:3a:37:36:26:cd:fb:c0:23:8d:0a: 96:8b:da:1a:97:36:71:53:74:7b:8b:32:6c:69:fe:98:60:08: 34:89:fc:01:d2:63:ba:56:9e:64:44:bd:54:bc:e3:7d:a4:87: ad:17:b1:de:10:a7:49:70:7e:f5:6a:fd:e3:a3:7c:8b:ab:57: 96:e1:8e:0d:e7:84:80:7f:5c:3f:04:27:74:c9:47:3e:1e:d9: b0:b9:e5:bb:c1:f4:17:c6:38:a0:93:07:14:a3:c4:e7:10:2a: 1a:a1:58:c8:bb:63:3c:e1:46:a3:2f:c0:9f:44:a9:22:bd:89: 62:a6:f1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3022v0FImxdWtT3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NzdlNGFmYmUtZmExZS00Y2U0LWEzYzctZDM3ZDFlMzc2MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F0oTRYNyII/0jHcnU154MIId0LKj+OfQVcP lcKf4U4YVz50l8G8aCqiCl9vtow8OFePac8GYcvbtABFG60z35TMCc49jWS0aSdQ Ea1yMyEavIvqvI1RzwYbEETuFJget3cP+wjd7O+/AgW1ia+U3njarWxKnJtPPMeI PWPv6CAJ648Np9ZulfoY8zwuK5f5oHtCmyfsGDK0gQpFJIPt2bIpZ25uhY9L4oTK SavBtfhE69lF6vqNF7z9+/60rcnbeRP5/fivDsQrx622/Gp84jty7OATzAKac5// o3YmbsSXlNY5HBkput+JX+BTnYBOjy8OtUfBjlyxXVtjXQ6EIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTDcK3KwdUo/FcPPIj7ZsmmJgMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTIxZDRiYzEtMTliOS0z NTkzLThlOTktNTg1YjU3MGNjM2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT3tmRhlJ/BXGsVqkAuofmkWc4UEXEtXh801vQAz+1g+uAibrdKq21i XhxLx2cc3XRvaUNTsBBrH45ubioginKoy1JBvJ3gyuXSIGghbfN80dL9qQm53PHT dg8D8Y4+chI2F67B6b5sCYsSxGRFngum1D+5sOpL2idBAiDQY3P0bHMXWvq9Ojc2 Js37wCONCpaL2hqXNnFTdHuLMmxp/phgCDSJ/AHSY7pWnmREvVS8432kh60Xsd4Q p0lwfvVq/eOjfIurV5bhjg3nhIB/XD8EJ3TJRz4e2bC55bvB9BfGOKCTBxSjxOcQ KhqhWMi7YzzhRqMvwJ9EqSK9iWKm8c8= -----END CERTIFICATE-----Generated at Fri Jun 12 08:32:10 2026 by rpki-client