$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/914122a5-5a40-3ade-80b7-5b425b5ccacb.roa File: 914122a5-5a40-3ade-80b7-5b425b5ccacb.roa (raw, json) Hash identifier: Q2CD1jDyc56EZw1nUDB6z6kWGz0gK9D09CEJL6tsgNs= Subject key identifier: 28:06:EF:F1:AE:36:5C:00:90:FA:C9:B1:90:3C:4D:F1:51:D9:02:08 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984A492A33DFD0EDE1CAA40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/914122a5-5a40-3ade-80b7-5b425b5ccacb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:a4:92:a3:3d:fd:0e:de:1c:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bbc39a1-329f-40f3-8c2c-d8255e30ba09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:fc:ae:67:66:b5:53:f3:09:f2:1c:1b:3a: 5c:04:88:c8:41:78:0f:a3:71:38:fa:d4:22:85:a7: 09:e6:3c:8d:fd:99:09:62:68:0e:9b:d2:ea:d9:b4: 81:41:08:98:55:2d:3b:ba:5b:03:24:d0:7c:2a:62: 89:d2:c5:7e:85:80:c3:3a:e5:02:04:b6:ce:2e:a0: 5a:6c:ac:b6:68:12:7c:ba:e3:0f:7e:c3:40:0b:83: 14:cc:7f:b0:8c:42:fb:4e:1d:19:38:f9:36:06:9a: 1f:50:84:93:81:c0:3b:86:8c:dc:81:77:cb:54:8b: 3a:09:8f:72:23:ae:3b:80:32:12:7e:22:59:4e:d9: 7e:5b:39:56:e7:2d:80:d0:c4:c3:2d:90:32:ee:3e: db:d3:4b:33:11:09:1d:1b:88:8b:62:f0:83:5b:3b: cb:99:ed:46:f9:b5:14:3e:b2:4a:d7:18:b7:5a:9f: 85:60:a4:ca:c7:52:be:c2:0b:7e:d7:48:42:5c:87: 2e:e6:bd:2b:35:74:cc:6e:b8:52:bd:45:69:1b:3c: 45:c7:a1:3b:a3:4b:3c:37:a3:b7:ef:2c:ac:4c:94: b7:c0:1d:26:47:52:29:a9:24:10:e6:de:59:97:47: 68:90:7f:5a:1a:95:45:87:47:0a:89:36:44:7d:3d: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:06:EF:F1:AE:36:5C:00:90:FA:C9:B1:90:3C:4D:F1:51:D9:02:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/914122a5-5a40-3ade-80b7-5b425b5ccacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:74:f5:76:3d:0f:e1:1d:88:f3:c0:d9:ef:f5:a2:d7:5c:bf: 8f:a1:48:e2:f3:0e:e7:49:f5:16:36:93:83:68:33:d2:d6:9a: a5:6f:bc:d6:45:b8:77:bb:14:f2:0d:80:1c:97:d2:63:1e:5f: a2:57:97:53:1f:b1:e2:d5:e1:f0:0f:6e:cf:45:15:3c:09:3c: d2:0d:2e:1d:4f:37:fd:9e:11:e0:d6:90:18:bb:3f:4d:f6:4e: fc:91:78:c2:1d:bc:22:f5:e2:67:c3:62:c2:1d:4e:03:91:0f: 28:d3:3f:81:22:a3:27:bc:84:52:53:39:1e:07:c5:be:2c:26: c0:44:b6:ee:71:74:43:16:bd:a6:2b:ae:75:36:cc:06:b8:ad: 45:4f:16:52:e1:82:e1:d3:6a:89:ea:d0:9e:fb:41:23:ca:34: ab:23:7c:9c:9e:40:63:6c:99:b5:fe:49:c5:ea:66:e0:6c:02: e2:b1:82:8d:d3:73:bb:7b:d7:9a:7c:a6:ff:d0:96:d9:17:ec: 01:2c:0b:a8:f7:13:72:33:96:1e:ff:0d:fd:57:d4:0b:1a:9d: 5a:11:ad:dc:ca:7f:cd:aa:47:85:ee:31:3e:0e:34:13:5c:46: c3:41:04:5d:4d:ba:ce:89:1f:31:11:a6:8f:c4:e9:f5:45:90: 4e:d6:2d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKSSoz39Dt4cqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJiYzM5YTEtMzI5Zi00MGYzLThjMmMtZDgyNTVlMzBiYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6L8rmdmtVPzCfIcGzpcBIjIQXgPo3E4+tQi hacJ5jyN/ZkJYmgOm9Lq2bSBQQiYVS07ulsDJNB8KmKJ0sV+hYDDOuUCBLbOLqBa bKy2aBJ8uuMPfsNAC4MUzH+wjEL7Th0ZOPk2BpofUISTgcA7hozcgXfLVIs6CY9y I647gDISfiJZTtl+WzlW5y2A0MTDLZAy7j7b00szEQkdG4iLYvCDWzvLme1G+bUU PrJK1xi3Wp+FYKTKx1K+wgt+10hCXIcu5r0rNXTMbrhSvUVpGzxFx6E7o0s8N6O3 7yysTJS3wB0mR1IpqSQQ5t5Zl0dokH9aGpVFh0cKiTZEfT1nPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgG7/GuNlwAkPrJsZA8TfFR2QIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTE0MTIyYTUtNWE0MC0z YWRlLTgwYjctNWI0MjViNWNjYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB109XY9D+EdiPPA2e/1otdcv4+hSOLzDudJ9RY2k4NoM9LWmqVvvNZF uHe7FPINgByX0mMeX6JXl1MfseLV4fAPbs9FFTwJPNINLh1PN/2eEeDWkBi7P032 TvyReMIdvCL14mfDYsIdTgORDyjTP4Eioye8hFJTOR4Hxb4sJsBEtu5xdEMWvaYr rnU2zAa4rUVPFlLhguHTaonq0J77QSPKNKsjfJyeQGNsmbX+ScXqZuBsAuKxgo3T c7t715p8pv/QltkX7AEsC6j3E3Izlh7/Df1X1AsanVoRrdzKf82qR4XuMT4ONBNc RsNBBF1Nus6JHzERpo/E6fVFkE7WLcI= -----END CERTIFICATE-----Generated at Fri Sep 25 09:52:28 2026 by rpki-client