$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa File: 5afeb378-224a-3c24-b822-69b5d1a03f18.roa (raw, json) Hash identifier: l9F+q5qfYOp4U94wwKJru5juvRSIx/4KkFmSgWV8nXQ= Subject key identifier: AD:B8:9A:F1:A0:50:AE:9A:5F:12:A3:48:10:17:E0:4B:FD:97:13:FC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C9A6B0EE56EFBC1900B20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:9a:6b:0e:e5:6e:fb:c1:90:0b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e0ffc9f5-c7e1-480e-9f58-2df2cbc01b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:68:ab:b3:24:1b:04:f6:00:6d:11:55:3d: 1c:4a:6b:1a:26:08:d6:1d:34:30:80:eb:b4:0a:45: ac:ec:20:ae:c5:25:7e:20:33:79:c5:13:8d:a9:73: 9f:56:8e:34:f3:89:78:44:50:74:b7:99:a2:7f:71: 78:b9:29:64:68:85:a0:80:4d:a7:84:66:7c:12:c4: db:19:f5:b3:3e:89:e7:b5:5e:91:f9:fc:c7:96:da: fb:94:9d:d9:69:09:1f:04:96:22:17:38:2b:ff:24: 12:72:3e:b2:7d:dd:3c:f7:84:99:84:aa:ee:34:dd: fc:83:ef:93:e6:f9:e7:2f:21:ae:c6:d5:68:c5:84: 31:47:b3:be:89:9b:d6:e9:16:bd:05:26:45:d9:29: cc:37:c3:a6:3c:0a:3e:df:0b:1c:14:d9:13:74:3b: 8b:3c:78:72:d4:2e:15:56:bd:89:67:f5:40:51:78: f1:7c:e7:8e:72:fc:d5:c3:c1:c1:33:1d:2f:a1:55: f2:b9:e4:d5:7a:44:48:20:0b:32:f5:e4:de:48:f5: 01:9e:55:28:49:60:cd:fd:47:3d:32:23:7b:92:a1: 3e:ed:fe:2f:9b:b2:67:ab:87:ae:d4:9a:b9:cd:cb: 2d:0a:ba:3f:28:28:e5:78:d8:64:fc:4f:5d:52:04: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B8:9A:F1:A0:50:AE:9A:5F:12:A3:48:10:17:E0:4B:FD:97:13:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5afeb378-224a-3c24-b822-69b5d1a03f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e2:2e:66:2e:b7:e5:94:3d:6c:ee:6d:59:e6:35:79:fb:00: 19:8e:7b:3b:94:1a:6a:26:23:67:1e:86:21:0a:08:77:2e:04: 70:e2:7f:45:46:72:f3:8e:f1:76:9e:0d:1a:14:50:55:98:26: e3:2c:87:82:d4:55:19:9e:75:d8:a2:4d:a3:42:1f:80:c6:95: c9:1a:7a:97:75:32:47:e8:75:aa:8f:c1:3b:0c:eb:ea:c9:3e: c7:da:ef:19:64:40:81:85:b4:f6:4a:18:d8:16:54:3a:85:92: 71:51:11:ab:68:6b:2f:d2:39:90:6f:04:64:e7:0a:60:86:c4: f7:a1:c7:9d:31:93:c4:bd:ee:ba:69:28:39:ea:c9:55:be:db: 2d:8a:9b:54:59:13:b4:82:eb:db:e5:13:3d:37:75:fb:7e:79: 78:e4:48:0f:01:68:2e:c4:ed:e8:10:8b:eb:28:5f:4c:36:1e: a0:cc:af:c0:99:5b:b2:8d:df:bf:4e:b6:32:6b:00:54:1f:0c: c3:aa:4d:4c:06:fc:9d:c8:6b:e1:0b:b6:f4:ed:3a:44:a9:20: 2a:52:6c:eb:17:e4:d4:3f:b5:aa:3a:84:7d:66:e2:8c:ab:81: ed:01:18:f3:11:7e:0e:52:bf:ee:de:d2:ca:cd:26:ce:f3:39: d5:56:1c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfJprDuVu+8GQCyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTBmZmM5ZjUtYzdlMS00ODBlLTlmNTgtMmRmMmNiYzAxYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOJoq7MkGwT2AG0RVT0cSmsaJgjWHTQwgOu0 CkWs7CCuxSV+IDN5xRONqXOfVo4084l4RFB0t5mif3F4uSlkaIWggE2nhGZ8EsTb GfWzPonntV6R+fzHltr7lJ3ZaQkfBJYiFzgr/yQScj6yfd0894SZhKruNN38g++T 5vnnLyGuxtVoxYQxR7O+iZvW6Ra9BSZF2SnMN8OmPAo+3wscFNkTdDuLPHhy1C4V Vr2JZ/VAUXjxfOeOcvzVw8HBMx0voVXyueTVekRIIAsy9eTeSPUBnlUoSWDN/Uc9 MiN7kqE+7f4vm7Jnq4eu1Jq5zcstCro/KCjleNhk/E9dUgSxQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK24mvGgUK6aXxKjSBAX4Ev9lxP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWFmZWIzNzgtMjI0YS0z YzI0LWI4MjItNjliNWQxYTAzZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7iLmYut+WUPWzubVnmNXn7ABmOezuUGmomI2cehiEKCHcuBHDif0VG cvOO8XaeDRoUUFWYJuMsh4LUVRmeddiiTaNCH4DGlckaepd1MkfodaqPwTsM6+rJ Psfa7xlkQIGFtPZKGNgWVDqFknFREatoay/SOZBvBGTnCmCGxPehx50xk8S97rpp KDnqyVW+2y2Km1RZE7SC69vlEz03dft+eXjkSA8BaC7E7egQi+soX0w2HqDMr8CZ W7KN379OtjJrAFQfDMOqTUwG/J3Ia+ELtvTtOkSpICpSbOsX5NQ/tao6hH1m4oyr ge0BGPMRfg5Sv+7e0srNJs7zOdVWHCw= -----END CERTIFICATE-----Generated at Sat Sep 26 14:49:04 2026 by rpki-client