$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa File: d6d3afbf-f6e2-312e-b299-feebdb230800.roa (raw, json) Hash identifier: 0k0kE/Ron5PPe/zAaCEgrgVeaeafQCAkWQwexiMN364= Subject key identifier: 3B:65:71:CC:B1:76:46:2A:75:53:09:D4:2C:4D:0A:40:53:D3:E5:EC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C84512D8AB8663616F100 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:84:51:2d:8a:b8:66:36:16:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c6c18a20-40e8-4667-9205-2992bb385eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:57:ea:f0:10:79:9c:fa:35:3c:f5:a4:44:26: c0:1a:32:05:15:f2:92:53:76:4f:e6:42:d1:41:50: 81:11:b5:63:b3:20:27:8c:52:fd:23:04:51:2c:44: e2:95:ad:4c:3d:43:15:5d:5d:d3:5b:b7:16:cf:8f: b7:6b:ac:2b:cf:af:c8:7f:ab:3c:20:2d:40:a1:14: 4a:61:ac:c4:35:aa:7f:c1:19:4e:09:92:d5:58:17: 7c:62:06:3f:8d:1e:d7:dc:d9:5a:e9:b3:0a:dc:e3: d5:5b:c2:01:8d:ed:27:54:6f:f8:b6:98:69:79:ed: 78:fd:d2:26:ee:84:b5:de:b7:73:0e:25:8f:96:a6: 53:af:a3:92:0e:63:7b:ba:0c:f8:19:9d:6b:e3:d9: 36:72:a5:90:9c:4a:98:86:7c:94:d9:d6:86:81:3b: 36:4d:f0:a3:9a:47:b6:67:de:ad:fe:74:17:30:51: ad:2b:18:37:3a:51:5c:27:a0:a8:ba:af:32:b9:5f: a8:e1:81:33:1a:cc:9a:2a:c4:91:39:8c:b5:f6:09: a3:ea:59:7f:f1:b5:a7:a0:87:bc:1e:85:a0:b2:ac: ad:62:53:63:28:45:16:19:c2:31:c6:01:c0:8a:51: df:5c:2e:bc:db:21:9d:b3:6e:15:fe:ba:0d:84:c3: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:65:71:CC:B1:76:46:2A:75:53:09:D4:2C:4D:0A:40:53:D3:E5:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d6d3afbf-f6e2-312e-b299-feebdb230800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ba:17:90:2e:9b:a7:c3:63:9c:dd:3f:14:31:8a:91:e1:92: 44:a7:d9:f9:45:d0:96:a2:1a:9b:69:33:e0:30:cd:44:65:63: 2c:d1:d5:43:f6:33:3f:0f:4a:84:b1:21:98:99:76:fe:e7:64: 7b:18:a3:1b:18:bd:52:81:ed:3c:53:60:c5:f5:ea:21:68:6c: f9:7e:20:4c:ce:e5:aa:f2:7d:0b:90:d5:16:c5:ef:45:e6:21: 21:2b:0f:0e:6e:98:88:87:9f:c0:0d:ea:67:ef:87:65:81:3b: 39:57:91:c7:af:3a:00:6d:b5:76:02:23:b1:ba:c6:4c:cd:d1: 23:5c:a8:a7:41:8c:f6:e9:2d:28:f6:54:c3:1c:5d:d2:75:35: be:3b:08:c5:c4:2e:14:2b:58:81:41:2c:63:2a:5f:21:e5:3d: f2:aa:e1:23:61:8c:30:3f:88:5d:11:a9:ef:6b:9b:0b:1a:0c: 3b:c4:12:0d:bb:bc:10:00:cf:32:ee:3f:43:03:74:84:10:db: 60:f2:bb:36:9f:eb:af:1c:f2:86:34:fd:d2:9e:57:24:c8:6d: d1:55:7a:b4:2a:ee:37:bb:60:53:60:71:2c:8d:b5:07:78:a5: 75:c2:03:35:bf:ac:93:4e:0a:70:5f:31:1b:8e:d2:d0:ae:56: a7:83:18:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfIRRLYq4ZjYW8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzZjMThhMjAtNDBlOC00NjY3LTkyMDUtMjk5MmJiMzg1ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVfq8BB5nPo1PPWkRCbAGjIFFfKSU3ZP5kLR QVCBEbVjsyAnjFL9IwRRLETila1MPUMVXV3TW7cWz4+3a6wrz6/If6s8IC1AoRRK YazENap/wRlOCZLVWBd8YgY/jR7X3Nla6bMK3OPVW8IBje0nVG/4tphpee14/dIm 7oS13rdzDiWPlqZTr6OSDmN7ugz4GZ1r49k2cqWQnEqYhnyU2daGgTs2TfCjmke2 Z96t/nQXMFGtKxg3OlFcJ6Couq8yuV+o4YEzGsyaKsSROYy19gmj6ll/8bWnoIe8 HoWgsqytYlNjKEUWGcIxxgHAilHfXC682yGds24V/roNhMOZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtlccyxdkYqdVMJ1CxNCkBT0+XsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDZkM2FmYmYtZjZlMi0z MTJlLWIyOTktZmVlYmRiMjMwODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu6F5Aum6fDY5zdPxQxipHhkkSn2flF0JaiGptpM+AwzURlYyzR1UP2 Mz8PSoSxIZiZdv7nZHsYoxsYvVKB7TxTYMX16iFobPl+IEzO5aryfQuQ1RbF70Xm ISErDw5umIiHn8AN6mfvh2WBOzlXkcevOgBttXYCI7G6xkzN0SNcqKdBjPbpLSj2 VMMcXdJ1Nb47CMXELhQrWIFBLGMqXyHlPfKq4SNhjDA/iF0Rqe9rmwsaDDvEEg27 vBAAzzLuP0MDdIQQ22Dyuzaf668c8oY0/dKeVyTIbdFVerQq7je7YFNgcSyNtQd4 pXXCAzW/rJNOCnBfMRuO0tCuVqeDGIk= -----END CERTIFICATE-----Generated at Sat Sep 26 20:53:04 2026 by rpki-client