$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d86d7119-9c0e-3b91-b4d8-85a5ca2c49f6.roa File: d86d7119-9c0e-3b91-b4d8-85a5ca2c49f6.roa (raw, json) Hash identifier: fKZk4Vj6mKHzorAAKaNxyhxbi+W8d50DQFz4asiWuwg= Subject key identifier: 19:B5:33:2A:0F:EC:C6:5F:38:CF:BD:63:D4:50:8B:1A:09:12:1D:06 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C7F559711DB0A238D7360 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d86d7119-9c0e-3b91-b4d8-85a5ca2c49f6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:7f:55:97:11:db:0a:23:8d:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0f8da0b5-0e9d-453e-ba65-132cdb313e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:64:08:90:ca:78:08:48:72:58:49:0e:c3: 66:de:db:5f:e3:b4:57:a4:06:95:5b:3e:bf:6d:b5: d0:f5:9d:03:9d:79:b4:2c:34:61:fb:62:b7:a5:de: 3f:03:51:e0:35:7c:3a:a2:41:c3:26:e5:6e:16:d2: b3:26:65:52:00:71:95:c5:67:e3:47:ee:bc:f5:7d: 26:f3:97:9f:5e:57:63:67:be:1b:0d:7c:ab:6f:16: 0f:27:97:18:6a:03:1f:bb:19:16:75:28:90:61:7b: c3:07:44:4f:ec:58:8c:29:08:98:26:01:09:b4:73: 66:f5:68:93:46:49:e3:eb:a3:68:1c:62:ce:71:35: 29:b2:80:a9:50:3d:b7:48:93:4e:9d:82:fa:e2:fe: 54:f5:9f:c7:61:18:71:7e:54:04:fd:e8:0c:9d:2d: 4a:e9:21:52:f0:34:87:71:ad:90:54:12:71:77:a0: 4a:9b:e3:b4:84:9e:65:db:09:9f:09:64:34:f0:c6: 76:42:b2:68:5a:d5:94:98:16:21:bc:28:1c:94:d6: 73:6f:14:18:53:d6:61:46:0a:14:43:5b:c7:2b:c5: 9c:c7:ca:16:67:95:92:8d:d2:64:4d:a6:ae:0e:f9: e2:26:64:a5:ca:30:ce:a5:a5:24:67:65:81:f9:b3: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B5:33:2A:0F:EC:C6:5F:38:CF:BD:63:D4:50:8B:1A:09:12:1D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d86d7119-9c0e-3b91-b4d8-85a5ca2c49f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:50:19:06:33:6a:54:3e:10:f8:37:7f:2d:d0:ed:7a:0d:62: aa:11:0a:32:b5:be:64:32:6e:27:1a:d6:cf:80:9f:c7:96:ea: 53:f6:97:0e:2c:72:03:c6:f2:31:9e:be:a3:64:37:ee:9a:e2: 52:07:c8:35:d5:35:b7:ef:68:89:2e:bc:93:45:18:4c:39:b5: 1b:bc:e0:49:63:fe:17:a2:e3:c7:04:5b:84:1c:e9:17:6b:d2: d8:e3:ae:e1:1a:cd:96:c8:98:1d:42:be:92:cb:be:21:ac:ab: b8:93:e3:47:73:21:54:bc:02:b3:ea:da:d9:8a:47:b7:f8:71: 3d:83:43:14:cb:8f:1c:5f:99:fd:d4:4f:d9:07:47:73:c2:f8: 2e:e9:14:9c:d3:5c:1c:86:1b:f2:ae:bf:3b:f1:42:7f:d7:ce: 4a:e8:bb:40:b8:b9:ab:a0:64:6e:35:72:0b:97:4b:69:4e:ec: 24:b0:11:43:24:6f:66:24:ce:ac:92:f0:65:fb:e2:2a:7f:df: 63:0e:8a:fa:d4:4b:e5:19:f6:50:01:ca:6a:ed:00:fe:13:f9: 6c:52:2d:77:10:74:8a:d5:21:be:87:7a:94:9f:2d:75:7e:33: 43:36:31:e4:eb:bc:39:84:c7:a1:9f:f6:bf:3d:a4:4b:da:91: f7:e3:d6:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfH9VlxHbCiONc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGY4ZGEwYjUtMGU5ZC00NTNlLWJhNjUtMTMyY2RiMzEzZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjFkCJDKeAhIclhJDsNm3ttf47RXpAaVWz6/ bbXQ9Z0DnXm0LDRh+2K3pd4/A1HgNXw6okHDJuVuFtKzJmVSAHGVxWfjR+689X0m 85efXldjZ74bDXyrbxYPJ5cYagMfuxkWdSiQYXvDB0RP7FiMKQiYJgEJtHNm9WiT Rknj66NoHGLOcTUpsoCpUD23SJNOnYL64v5U9Z/HYRhxflQE/egMnS1K6SFS8DSH ca2QVBJxd6BKm+O0hJ5l2wmfCWQ08MZ2QrJoWtWUmBYhvCgclNZzbxQYU9ZhRgoU Q1vHK8Wcx8oWZ5WSjdJkTaauDvniJmSlyjDOpaUkZ2WB+bOAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm1MyoP7MZfOM+9Y9RQixoJEh0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDg2ZDcxMTktOWMwZS0z YjkxLWI0ZDgtODVhNWNhMmM0OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpQGQYzalQ+EPg3fy3Q7XoNYqoRCjK1vmQybica1s+An8eW6lP2lw4s cgPG8jGevqNkN+6a4lIHyDXVNbfvaIkuvJNFGEw5tRu84Elj/hei48cEW4Qc6Rdr 0tjjruEazZbImB1CvpLLviGsq7iT40dzIVS8ArPq2tmKR7f4cT2DQxTLjxxfmf3U T9kHR3PC+C7pFJzTXByGG/KuvzvxQn/Xzkrou0C4uaugZG41cguXS2lO7CSwEUMk b2YkzqyS8GX74ip/32MOivrUS+UZ9lABymrtAP4T+WxSLXcQdIrVIb6HepSfLXV+ M0M2MeTrvDmEx6Gf9r89pEvakffj1t0= -----END CERTIFICATE-----Generated at Sat Sep 26 01:58:37 2026 by rpki-client