$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa File: 9158427a-1d04-354e-adfe-4f9895288e0a.roa (raw, json) Hash identifier: Lk6joJNZ+TZL/BTTfusIIIudgdN3uXbu/4HX2plXfkU= Subject key identifier: C1:B9:9B:C2:A3:0F:ED:4C:12:83:6E:5B:B9:66:07:BC:AF:2F:A0:F4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984AA914E72C7665D3364E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:aa:91:4e:72:c7:66:5d:33:64:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ceca39bf-cd32-4396-82bf-e3aa3fd98b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:c5:77:4b:4a:8d:f5:bc:9f:2e:7f:10:bb: 76:92:f6:2f:a7:c9:76:12:46:3b:f8:24:24:89:a2: e3:82:ed:18:d8:1d:55:26:a5:49:3e:d4:42:15:7a: c6:38:91:c4:8d:85:cc:4e:01:b9:6e:11:19:3b:06: d2:ac:25:9d:f5:0b:12:73:4f:dc:1e:ad:15:b7:5a: c3:7d:4c:8d:12:63:97:d3:ec:33:64:63:55:61:a3: 9d:ed:2b:61:80:a8:2f:63:8f:38:f4:8d:b8:7e:0b: b8:13:73:88:95:a8:92:bd:d9:4f:bd:47:f2:69:93: 62:78:52:b1:1f:e9:50:cb:d1:f6:48:08:60:9a:0f: 2f:05:12:f2:d8:f0:26:3c:b3:9c:40:1c:88:87:ca: a5:ea:19:72:1a:34:fb:84:e6:7c:03:4b:97:42:7c: ec:dc:f3:ad:e0:0d:c2:91:79:d4:ef:54:7e:07:43: fc:70:d9:85:b6:d9:e8:91:da:fd:bb:e8:62:57:74: 5f:96:ed:21:52:61:14:60:e8:85:d2:ff:07:09:27: 47:00:a4:d1:c9:f1:a2:b8:36:7d:47:9a:dd:64:1f: 6a:df:a3:34:f6:68:17:83:27:ca:ed:80:e5:69:49: 48:91:3e:d9:a1:40:6b:72:a0:96:43:f0:2f:16:83: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:9B:C2:A3:0F:ED:4C:12:83:6E:5B:B9:66:07:BC:AF:2F:A0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9158427a-1d04-354e-adfe-4f9895288e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6a:44:e6:1f:7e:8f:8e:d8:4d:da:e8:e3:41:2a:49:ce:7d: ff:95:ef:6b:57:9d:3a:8d:ab:a4:df:1c:2e:1f:44:b1:09:4b: f2:45:92:3c:7a:63:34:0c:23:99:ed:7f:81:45:f0:ad:b5:b7: 99:d0:3a:54:54:3d:25:c1:b9:da:93:b6:a9:cf:56:b8:75:05: 53:4b:10:d5:4f:4d:87:53:ee:df:88:8b:fe:87:19:0e:b6:35: 43:17:72:d4:ff:6a:37:73:04:a7:7d:fa:82:e8:c3:b2:38:09: f2:83:ee:65:fe:52:e4:ad:f5:17:06:80:33:34:64:42:4b:96: 69:c8:55:e8:10:ad:fe:54:aa:59:2a:db:62:c6:99:e7:b2:cd: 2b:45:dc:d4:89:f9:c2:34:97:17:94:1f:95:3c:eb:53:a6:f9: 6e:2f:91:af:20:b6:f8:58:79:30:63:d7:34:ec:cb:97:73:11: e0:f3:9a:20:79:c9:bc:23:a4:10:9f:ef:03:a2:f2:36:5f:d5: 1a:5c:61:34:88:98:0a:de:76:2b:a4:8f:35:f1:e2:b9:43:ca: e7:33:0a:05:78:3d:50:0f:b2:fe:70:29:ee:e2:42:94:4a:a5: 06:7a:2c:44:5c:4c:50:ca:01:e3:86:b0:e0:37:19:34:72:5d: 17:95:02:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKqRTnLHZl0zZOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2VjYTM5YmYtY2QzMi00Mzk2LTgyYmYtZTNhYTNmZDk4YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOHFd0tKjfW8ny5/ELt2kvYvp8l2EkY7+CQk iaLjgu0Y2B1VJqVJPtRCFXrGOJHEjYXMTgG5bhEZOwbSrCWd9QsSc0/cHq0Vt1rD fUyNEmOX0+wzZGNVYaOd7SthgKgvY4849I24fgu4E3OIlaiSvdlPvUfyaZNieFKx H+lQy9H2SAhgmg8vBRLy2PAmPLOcQByIh8ql6hlyGjT7hOZ8A0uXQnzs3POt4A3C kXnU71R+B0P8cNmFttnokdr9u+hiV3Rflu0hUmEUYOiF0v8HCSdHAKTRyfGiuDZ9 R5rdZB9q36M09mgXgyfK7YDlaUlIkT7ZoUBrcqCWQ/AvFoNh/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG5m8KjD+1MEoNuW7lmB7yvL6D0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTE1ODQyN2EtMWQwNC0z NTRlLWFkZmUtNGY5ODk1Mjg4ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNqROYffo+O2E3a6ONBKknOff+V72tXnTqNq6TfHC4fRLEJS/JFkjx6 YzQMI5ntf4FF8K21t5nQOlRUPSXBudqTtqnPVrh1BVNLENVPTYdT7t+Ii/6HGQ62 NUMXctT/ajdzBKd9+oLow7I4CfKD7mX+UuSt9RcGgDM0ZEJLlmnIVegQrf5Uqlkq 22LGmeeyzStF3NSJ+cI0lxeUH5U861Om+W4vka8gtvhYeTBj1zTsy5dzEeDzmiB5 ybwjpBCf7wOi8jZf1RpcYTSImArediukjzXx4rlDyuczCgV4PVAPsv5wKe7iQpRK pQZ6LERcTFDKAeOGsOA3GTRyXReVAiE= -----END CERTIFICATE-----Generated at Mon Sep 28 00:26:53 2026 by rpki-client