$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json) Hash identifier: /e9crKkGYyBxmcYPe74KJxfWOt10yHy8p7tuLzlm2Y0= Subject key identifier: 34:2F:30:C3:DE:C6:95:18:89:B1:95:C6:AF:FC:71:E7:EC:E8:AE:F9 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584D651519E71B239FF31068C660 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 41378 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:19:e7:1b:23:9f:f3:10:68:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=a37e67b3-05a5-449c-aa27-f3a6ddffc2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:2a:9c:36:08:7a:f7:09:63:ea:14:82:7c: 8e:6c:3b:12:c1:3f:9c:5b:89:e0:43:89:27:bb:7d: 7a:a8:df:a6:ca:d2:6e:82:85:06:98:5d:69:3b:c1: bf:66:2d:04:93:28:2f:b0:dd:b1:9f:32:c2:f6:f4: a9:0f:c6:e2:48:fb:97:32:e8:f2:24:95:84:35:11: 30:55:a1:da:9a:6e:ca:30:41:c0:91:6e:fc:12:8f: f6:1f:0f:14:fe:cc:b9:b1:13:c9:7a:f6:aa:eb:f9: c8:a8:24:31:3b:54:96:dd:74:10:0f:13:24:6d:ee: e7:63:82:e2:1c:85:97:8b:40:38:79:e9:e9:5d:13: 34:0e:b3:23:c9:d6:44:16:d6:5a:0f:e8:03:3a:fd: 04:2d:a8:67:04:7a:fc:ae:2f:6c:62:9c:26:df:9e: 1d:16:42:0a:1a:83:b3:a8:6b:2c:e5:8f:71:28:e3: 8e:32:3a:73:5f:3b:4a:20:38:cc:71:9d:d4:7b:88: 06:20:8e:62:26:2e:82:e6:f6:f4:a0:c4:3e:20:53: 85:b3:0e:fc:30:8d:d5:ee:84:29:24:e5:c9:6b:d8: f2:b5:a3:ce:04:bc:6f:5c:d8:9e:33:b3:34:e7:51: 42:62:3e:8c:8c:ba:a6:77:f8:a9:1e:7a:d9:4c:8f: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2F:30:C3:DE:C6:95:18:89:B1:95:C6:AF:FC:71:E7:EC:E8:AE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:83:db:c6:6f:45:df:53:00:ae:f8:34:32:e6:ed:19:88:2e: e8:0a:4d:c7:d2:38:ae:f8:a7:9b:3b:21:93:63:19:61:cb:a6: 86:3b:b8:50:34:76:0d:c8:54:6a:74:14:19:6b:e2:6e:3a:a2: 73:cc:77:a1:92:ed:06:a4:9a:52:59:d1:99:5b:a1:dc:53:05: 90:9e:53:73:76:87:ee:7e:c4:45:ec:ed:59:47:12:cc:d5:cf: 41:64:40:f4:9c:59:01:9c:3d:38:09:f0:cd:d1:7d:68:63:2f: 91:8a:d5:92:19:53:f9:a9:29:9f:72:8c:6e:6e:c6:8d:0b:46: a6:e4:2f:56:db:f9:71:3e:d0:6b:59:f4:db:a2:10:e5:9f:d5: 51:d9:51:87:4e:73:a0:fe:e2:5a:8b:16:46:ee:6a:00:ba:92: 55:f3:1b:23:9a:51:12:f0:72:3b:54:9d:72:51:ce:b9:bc:0b: 17:c8:78:fe:e2:b6:ce:d5:95:da:de:e1:92:fd:a0:73:90:b1: 23:42:8d:14:ff:57:c9:66:12:31:8f:81:8f:58:fd:18:24:ef: 1d:77:a7:61:37:99:30:f3:4b:1f:27:a3:a0:32:9e:ac:da:d1: d0:57:26:77:39:ec:e3:c4:32:8c:95:ac:48:4f:28:57:bf:90: 1c:47:b4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRnnGyOf8xBoxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YTM3ZTY3YjMtMDVhNS00NDljLWFhMjctZjNhNmRkZmZjMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIcqnDYIevcJY+oUgnyObDsSwT+cW4ngQ4kn u316qN+mytJugoUGmF1pO8G/Zi0EkygvsN2xnzLC9vSpD8biSPuXMujyJJWENREw VaHamm7KMEHAkW78Eo/2Hw8U/sy5sRPJevaq6/nIqCQxO1SW3XQQDxMkbe7nY4Li HIWXi0A4eenpXRM0DrMjydZEFtZaD+gDOv0ELahnBHr8ri9sYpwm354dFkIKGoOz qGss5Y9xKOOOMjpzXztKIDjMcZ3Ue4gGII5iJi6C5vb0oMQ+IFOFsw78MI3V7oQp JOXJa9jytaPOBLxvXNieM7M051FCYj6MjLqmd/ipHnrZTI9yJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQvMMPexpUYibGVxq/8cefs6K75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvODcxNjY0ZGEtNGM0Yy0z ZDlkLTljZWUtYWJkZTNmNWE5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuD28ZvRd9TAK74NDLm7RmILugKTcfSOK74p5s7IZNjGWHLpoY7uFA0 dg3IVGp0FBlr4m46onPMd6GS7QakmlJZ0ZlbodxTBZCeU3N2h+5+xEXs7VlHEszV z0FkQPScWQGcPTgJ8M3RfWhjL5GK1ZIZU/mpKZ9yjG5uxo0LRqbkL1bb+XE+0GtZ 9NuiEOWf1VHZUYdOc6D+4lqLFkbuagC6klXzGyOaURLwcjtUnXJRzrm8CxfIeP7i ts7Vldre4ZL9oHOQsSNCjRT/V8lmEjGPgY9Y/Rgk7x13p2E3mTDzSx8no6Aynqza 0dBXJnc57OPEMoyVrEhPKFe/kBxHtNM= -----END CERTIFICATE-----Generated at Fri Apr 17 12:31:59 2026 by rpki-client