$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa File: 4642f7a4-313d-388a-a150-9b8b4a0751f5.roa (raw, json) Hash identifier: 3mI39i+VqZRd91lUqlHm2+sMXluw7119KpsTT2G+ub4= Subject key identifier: E3:64:57:4B:83:0A:AE:31:19:B4:70:4C:A6:87:F7:09:DB:A9:5A:28 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F498499FDC05C1F04706A0480 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:99:fd:c0:5c:1f:04:70:6a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9fc1b80a-5be4-4b90-8040-7ca6e38e98fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:f2:a7:67:ed:2b:cb:3a:0f:20:91:0b:c5: 25:ff:7d:31:92:14:c5:6f:0f:b2:78:56:98:04:65: 32:22:7c:a5:6e:5f:4e:bd:4a:72:27:d5:a8:35:be: 5e:73:21:ac:68:58:33:6e:b9:6c:53:dd:25:e7:7b: 6c:af:15:42:f9:2c:30:41:dc:a0:76:cd:b3:40:4c: 96:50:ed:19:6a:1d:f9:5b:ab:86:10:d7:b8:31:02: 04:e1:02:ec:8a:47:0d:b6:50:99:42:e4:6c:af:94: 4d:1e:51:38:c0:1e:74:38:dc:8d:fa:c0:6d:08:67: 55:2b:77:55:9e:e9:19:f9:95:83:30:cc:8f:6a:ae: 88:aa:6b:48:4e:e8:4f:83:b5:18:5e:3a:3b:cf:5f: c6:7c:b7:72:05:72:47:b0:83:0b:4f:e8:7d:c4:b9: b8:b7:a4:b6:63:26:9b:17:4e:bc:cc:62:61:58:bf: 1c:b7:90:87:7b:4e:41:3c:21:96:ac:c6:a4:14:5a: 00:4f:d4:98:a3:28:5d:aa:52:a0:d8:79:4d:a6:d2: 70:45:39:88:b9:39:bc:70:9a:05:59:87:30:e7:62: ce:a7:a0:d5:c0:06:db:32:97:5f:13:ff:85:bd:21: 1b:b5:93:58:2d:93:3f:8c:28:d1:51:a7:d7:be:4e: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:64:57:4B:83:0A:AE:31:19:B4:70:4C:A6:87:F7:09:DB:A9:5A:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4642f7a4-313d-388a-a150-9b8b4a0751f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d0:b8:24:ec:7f:4e:e5:a3:21:a0:a2:39:e2:24:9b:07:85: 2f:d6:54:04:05:1b:ed:fc:7b:a2:1b:74:4c:4d:e5:35:e0:47: a2:65:2f:c5:7d:dc:8b:d1:c5:28:64:c2:af:0d:cf:17:e4:55: 68:49:bc:50:df:e2:af:77:51:d5:c3:6c:83:64:0a:e6:4e:8a: 46:b3:f6:a7:8f:b1:64:6b:d2:f2:ab:48:ad:fa:75:ea:f2:89: 6d:be:aa:d7:d9:4f:eb:b0:c0:01:23:b7:f3:e9:bb:61:ea:31: cb:f1:9f:98:66:82:dd:11:29:10:58:fb:8f:be:cb:b0:9d:99: 26:09:a9:ca:be:d8:83:56:d6:84:4e:cc:b6:22:76:7d:17:93: 10:67:3f:60:32:7a:b3:51:5a:03:b2:2c:97:72:29:17:cd:12: 3e:fd:8c:b7:9c:78:af:1e:21:9c:30:cc:78:fc:68:c3:0b:c0: eb:ff:01:cc:ac:84:40:7c:17:c6:1a:29:15:50:ce:0f:8f:d4: d1:fa:51:61:2a:f8:1b:80:c3:87:42:c1:b4:48:de:a3:75:e3: c2:50:9c:f3:f9:0a:75:35:cb:c3:80:7b:48:08:f2:21:52:46: 61:a3:10:4a:05:f5:bd:5f:59:5b:00:7c:e7:0f:e8:0c:32:9d: b1:ad:20:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhJn9wFwfBHBqBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWZjMWI4MGEtNWJlNC00YjkwLTgwNDAtN2NhNmUzOGU5OGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBzyp2ftK8s6DyCRC8Ul/30xkhTFbw+yeFaY BGUyInylbl9OvUpyJ9WoNb5ecyGsaFgzbrlsU90l53tsrxVC+SwwQdygds2zQEyW UO0Zah35W6uGENe4MQIE4QLsikcNtlCZQuRsr5RNHlE4wB50ONyN+sBtCGdVK3dV nukZ+ZWDMMyPaq6IqmtITuhPg7UYXjo7z1/GfLdyBXJHsIMLT+h9xLm4t6S2Yyab F068zGJhWL8ct5CHe05BPCGWrMakFFoAT9SYoyhdqlKg2HlNptJwRTmIuTm8cJoF WYcw52LOp6DVwAbbMpdfE/+FvSEbtZNYLZM/jCjRUafXvk5UpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONkV0uDCq4xGbRwTKaH9wnbqVooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDY0MmY3YTQtMzEzZC0z ODhhLWExNTAtOWI4YjRhMDc1MWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALQuCTsf07loyGgojniJJsHhS/WVAQFG+38e6IbdExN5TXgR6JlL8V9 3IvRxShkwq8NzxfkVWhJvFDf4q93UdXDbINkCuZOikaz9qePsWRr0vKrSK36dery iW2+qtfZT+uwwAEjt/Ppu2HqMcvxn5hmgt0RKRBY+4++y7CdmSYJqcq+2INW1oRO zLYidn0XkxBnP2AyerNRWgOyLJdyKRfNEj79jLeceK8eIZwwzHj8aMMLwOv/Acys hEB8F8YaKRVQzg+P1NH6UWEq+BuAw4dCwbRI3qN148JQnPP5CnU1y8OAe0gI8iFS RmGjEEoF9b1fWVsAfOcP6AwynbGtIPQ= -----END CERTIFICATE-----Generated at Tue Sep 29 17:39:21 2026 by rpki-client