$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa File: 9e68af77-07fc-3196-a424-0e5192a94064.roa (raw, json) Hash identifier: GvOSmU51Fw6G60xYW6HnL2mXW1LYUluTCEgErVFVevE= Subject key identifier: 5D:83:8D:EC:F9:CF:08:CF:5E:D4:CD:F9:EB:6A:E6:E3:B4:66:A8:82 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49848ED713AB84B7BBF09800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:8e:d7:13:ab:84:b7:bb:f0:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d2fe7d6f-ad63-49e9-8d1b-846f0f763b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:c9:2c:9b:eb:29:f3:c1:e6:fa:b7:26:c6: 29:7c:96:4c:3b:0a:e3:66:a1:8e:89:80:c0:5c:83: 7a:87:05:85:26:34:33:e0:be:41:b0:fb:b7:37:d6: 73:59:79:6f:73:28:ee:d7:a6:11:87:e6:61:3f:d2: 63:05:3b:45:a4:6a:7f:de:7d:ba:87:f3:c3:d3:ac: 37:53:46:41:20:d9:5f:e5:02:0f:d4:37:56:0f:11: 7a:68:5c:3f:09:6f:d4:92:32:e7:55:9e:cb:e9:4b: ce:10:63:5b:72:31:18:b5:35:01:c9:e2:0d:80:c8: 95:d0:fe:f2:5e:44:96:78:86:c2:5e:04:3c:1e:fe: 2f:b3:71:d9:89:f5:5b:97:e8:42:9f:08:c0:d8:0e: ad:2a:f0:83:eb:88:ed:bc:85:c0:f0:86:35:df:66: 01:f2:c5:c1:b9:2d:ee:88:ba:56:42:4f:2d:c3:90: d1:7e:ec:7b:45:2b:31:8e:8e:b6:5a:96:f4:e7:c1: 77:da:28:f3:89:af:39:9e:64:35:40:a4:8e:1f:42: da:82:ff:b6:57:ef:06:04:34:6a:07:11:23:4c:c8: 27:f3:31:1c:40:c0:32:6d:25:57:3c:39:09:1e:f7: 20:5e:98:dc:23:b8:76:7e:43:c4:29:ad:8b:6f:9a: 5a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:83:8D:EC:F9:CF:08:CF:5E:D4:CD:F9:EB:6A:E6:E3:B4:66:A8:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1c:a6:a7:94:11:77:a6:f9:16:c6:63:a9:85:54:36:4c:8a: c1:5a:74:f4:d4:ac:22:89:68:c8:6f:ce:c0:33:ed:12:0c:eb: d1:c9:e1:0f:e9:22:d2:ce:92:f3:8e:c0:89:70:d1:56:c9:31: 51:d7:6d:dd:0a:10:47:5f:93:85:76:2f:37:4f:64:8b:88:af: 26:6d:f4:76:d8:f3:b0:7e:c1:9f:43:cc:db:6b:2a:ec:f0:e5: bd:3e:3d:cc:69:89:cb:b6:c2:fe:ce:b2:92:bd:7a:55:b7:c5: b6:44:cd:00:59:a3:e2:fa:74:b2:5f:c2:67:1a:44:b8:21:24: 90:a2:3a:15:c5:f1:54:21:3a:6d:f2:85:88:30:d3:a0:65:77: b2:14:cb:e8:07:9f:3f:84:02:d9:e7:14:79:2b:6f:1b:bf:30: d0:60:ea:dd:02:65:30:f6:95:c3:03:f2:37:b1:f9:40:37:d6: 32:10:6c:4c:15:f9:34:a1:60:c4:cb:78:40:de:d7:94:46:d3: 48:a0:fe:8f:ef:36:ce:f2:a0:32:df:12:e9:b5:ec:9d:c0:e3: 8b:a7:2d:67:46:0e:db:be:86:a0:d5:d3:2d:9b:02:02:26:53: 09:52:3b:d6:fa:29:b8:b9:f8:5c:22:3d:84:fd:f8:c2:12:8b: 57:83:4c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhI7XE6uEt7vwmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDJmZTdkNmYtYWQ2My00OWU5LThkMWItODQ2ZjBmNzYzYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXnJLJvrKfPB5vq3JsYpfJZMOwrjZqGOiYDA XIN6hwWFJjQz4L5BsPu3N9ZzWXlvcyju16YRh+ZhP9JjBTtFpGp/3n26h/PD06w3 U0ZBINlf5QIP1DdWDxF6aFw/CW/UkjLnVZ7L6UvOEGNbcjEYtTUByeINgMiV0P7y XkSWeIbCXgQ8Hv4vs3HZifVbl+hCnwjA2A6tKvCD64jtvIXA8IY132YB8sXBuS3u iLpWQk8tw5DRfux7RSsxjo62Wpb058F32ijzia85nmQ1QKSOH0Lagv+2V+8GBDRq BxEjTMgn8zEcQMAybSVXPDkJHvcgXpjcI7h2fkPEKa2Lb5pasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2Djez5zwjPXtTN+etq5uO0ZqiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWU2OGFmNzctMDdmYy0z MTk2LWE0MjQtMGU1MTkyYTk0MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4cpqeUEXem+RbGY6mFVDZMisFadPTUrCKJaMhvzsAz7RIM69HJ4Q/p ItLOkvOOwIlw0VbJMVHXbd0KEEdfk4V2LzdPZIuIryZt9HbY87B+wZ9DzNtrKuzw 5b0+Pcxpicu2wv7OspK9elW3xbZEzQBZo+L6dLJfwmcaRLghJJCiOhXF8VQhOm3y hYgw06Bld7IUy+gHnz+EAtnnFHkrbxu/MNBg6t0CZTD2lcMD8jex+UA31jIQbEwV +TShYMTLeEDe15RG00ig/o/vNs7yoDLfEum17J3A44unLWdGDtu+hqDV0y2bAgIm UwlSO9b6Kbi5+FwiPYT9+MISi1eDTFA= -----END CERTIFICATE-----Generated at Fri Sep 25 21:10:29 2026 by rpki-client