$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa File: 4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa (raw, json) Hash identifier: QoADzj+3iYd+n5BLJNzIC0MO1xzhJD2q7KGOpR7OPdQ= Subject key identifier: 40:99:75:07:4D:17:A8:9E:3B:AE:05:2E:1F:85:57:AB:37:51:EE:A2 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584D5884E413C0E3B5383CA93860 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 15169 IP address blocks: 104.134.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e4:13:c0:e3:b5:38:3c:a9:38:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=83a9836e-880c-4f0a-b3ec-1423dde291d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:a4:dd:e1:48:57:c1:e6:a1:ee:41:37:dc: e4:05:fb:19:97:b5:9c:49:99:02:6d:23:58:b4:5b: f0:02:5b:75:23:c5:15:f6:1f:1e:ac:df:a4:54:4a: fd:15:d9:69:d4:6d:67:b2:b9:da:ba:45:22:ab:87: 94:68:6c:75:29:e2:6c:72:03:ac:b8:c0:6e:6f:6d: 1b:57:2d:f2:a4:f7:f1:e6:2c:e3:62:25:a5:e0:f3: b1:4c:4b:09:c8:8d:b3:7f:7b:ef:a5:8e:72:31:7c: 00:6a:f4:2b:83:b3:ae:97:21:ca:e6:37:6f:b4:13: 85:f2:7b:af:f8:31:bb:af:cf:8a:ac:bc:e8:d0:c8: 4f:f4:01:13:5e:72:b4:76:ab:8e:61:c6:34:50:5e: 45:0e:29:22:84:72:68:0a:e9:e2:7d:33:c2:b2:85: e2:47:6b:cf:a5:5f:75:a8:4c:75:b5:48:b9:ca:ad: 07:98:cf:b5:c9:97:36:54:ab:69:9b:86:d8:b8:3b: 8b:df:6f:c6:7c:25:36:30:77:cc:ac:5b:75:7b:54: 7b:d3:a4:55:65:5e:63:54:2a:e2:d1:08:d6:8e:2a: c0:de:57:41:61:c4:b8:fc:e5:b6:0a:6f:ce:20:9c: 69:0d:58:40:77:6b:d0:22:44:20:07:57:c4:77:c9: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:99:75:07:4D:17:A8:9E:3B:AE:05:2E:1F:85:57:AB:37:51:EE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4ff3ccdd-0ea6-3d4d-a76c-c11ec62d5f35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f5:4c:8b:53:3d:2f:c7:7c:77:b9:c9:e4:cf:db:6f:fc:80: f4:50:c9:4a:11:6d:ed:13:6d:68:64:ae:c2:32:2d:14:cc:6d: 73:b1:99:3a:eb:29:23:db:18:d7:54:22:1b:ec:c3:ed:6d:55: 34:7b:63:59:c8:8e:bc:19:5f:71:4c:ef:f2:06:dd:fd:ca:f7: c2:59:5f:4a:75:bb:8c:29:5d:b4:00:3a:19:4c:fb:61:b4:d9: 95:f6:1a:2d:3b:80:3a:4e:b4:85:45:30:2e:3e:ac:f0:66:c0: bd:06:b1:6d:f6:5e:c8:c8:cd:62:f8:21:52:42:68:72:71:de: 86:68:1c:e5:45:c7:cf:72:c7:da:c0:57:54:51:72:3c:0a:65: 84:2a:fa:2f:69:7f:9e:77:68:e7:e6:85:90:04:59:64:ad:3a: 67:2a:7d:a0:10:fa:ba:23:28:32:ee:98:e9:46:7d:5c:06:67: 5f:b1:04:81:b8:85:60:57:7d:ec:d6:c0:0e:c6:52:c5:b0:00: a4:9c:40:12:bd:7d:60:1d:ce:c2:b3:d1:45:2d:21:50:ea:5d: 1a:a5:68:0c:77:25:bb:4f:01:df:c6:02:ed:36:da:6b:b1:14: ba:84:55:d5:10:bc:3d:c0:f9:c4:43:37:91:44:59:37:6f:e0: fe:95:dd:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOQTwOO1ODypOGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk ODNhOTgzNmUtODgwYy00ZjBhLWIzZWMtMTQyM2RkZTI5MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufik3eFIV8Hmoe5BN9zkBfsZl7WcSZkCbSNY tFvwAlt1I8UV9h8erN+kVEr9Fdlp1G1nsrnaukUiq4eUaGx1KeJscgOsuMBub20b Vy3ypPfx5izjYiWl4POxTEsJyI2zf3vvpY5yMXwAavQrg7OulyHK5jdvtBOF8nuv +DG7r8+KrLzo0MhP9AETXnK0dquOYcY0UF5FDikihHJoCunifTPCsoXiR2vPpV91 qEx1tUi5yq0HmM+1yZc2VKtpm4bYuDuL32/GfCU2MHfMrFt1e1R706RVZV5jVCri 0QjWjirA3ldBYcS4/OW2Cm/OIJxpDVhAd2vQIkQgB1fEd8lLiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECZdQdNF6ieO64FLh+FV6s3Ue6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGZmM2NjZGQtMGVhNi0z ZDRkLWE3NmMtYzExZWM2MmQ1ZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC31TItTPS/HfHe5yeTP22/8gPRQyUoRbe0TbWhkrsIyLRTMbXOxmTrr KSPbGNdUIhvsw+1tVTR7Y1nIjrwZX3FM7/IG3f3K98JZX0p1u4wpXbQAOhlM+2G0 2ZX2Gi07gDpOtIVFMC4+rPBmwL0GsW32XsjIzWL4IVJCaHJx3oZoHOVFx89yx9rA V1RRcjwKZYQq+i9pf553aOfmhZAEWWStOmcqfaAQ+rojKDLumOlGfVwGZ1+xBIG4 hWBXfezWwA7GUsWwAKScQBK9fWAdzsKz0UUtIVDqXRqlaAx3JbtPAd/GAu022mux FLqEVdUQvD3A+cRDN5FEWTdv4P6V3Uo= -----END CERTIFICATE-----Generated at Sun Apr 19 08:15:52 2026 by rpki-client