$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa File: ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa (raw, json) Hash identifier: H/d2LsYmwadfG5W6HAUdg/LsR8iKcOBx2DfvhBxuwcw= Subject key identifier: F9:A0:A2:2D:51:CE:96:6F:4B:37:76:0A:6B:2F:39:B4:DB:B7:CC:44 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C97A3471AB3C81A6F46A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:97:a3:47:1a:b3:c8:1a:6f:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2e6740a7-6494-4e39-b00a-d997e5940b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:2a:fb:d1:4d:fa:07:91:19:64:54:02:e5: fa:77:6c:f5:be:1a:f3:19:86:4d:b9:f0:a1:52:3a: 9e:13:83:f9:29:2d:78:86:9e:dc:f3:6a:73:1e:38: 87:4f:19:60:f5:ed:99:a0:73:b2:ce:99:b4:1d:55: 70:49:31:19:1d:1e:6a:60:47:ef:da:34:75:5c:3b: 7d:de:f4:a0:61:78:b5:72:1f:2f:d6:4d:c9:7b:cf: 41:78:d8:2c:e2:e6:4f:01:64:a1:84:2d:56:da:8c: 69:43:95:dd:80:39:ab:f0:96:23:5b:52:d4:99:dc: d3:fa:82:12:b5:88:c7:df:8f:d1:88:fd:8c:f4:17: d5:c8:3e:4d:db:25:f6:c1:43:cf:c4:0b:94:2c:ec: cf:22:93:d3:1c:a0:9a:f2:6e:77:ac:d6:5a:30:26: 7e:15:af:fa:91:b0:38:07:ac:7a:c8:6e:6e:47:49: ef:0d:c5:89:20:57:a6:ae:08:2a:4a:89:15:42:8c: 6d:de:08:0c:6d:ea:b2:22:3d:cc:9f:6d:34:b2:d7: bd:df:11:56:36:87:f3:37:af:40:b4:cc:af:c3:1f: 9d:06:1d:6a:1b:25:da:25:11:3d:3a:9c:1d:f1:00: 16:5d:96:7f:a2:c9:be:52:d3:e0:65:d0:00:a5:55: bb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:A2:2D:51:CE:96:6F:4B:37:76:0A:6B:2F:39:B4:DB:B7:CC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:18:9f:c8:d8:12:d2:4b:2e:5f:fe:00:d9:75:b7:d9:cb:4f: 9c:8a:9a:4a:af:60:dd:69:2a:d5:22:bb:02:d2:f0:a2:5c:00: 95:1e:84:55:f6:cc:6f:50:7a:25:16:34:ba:44:a0:9b:a3:3b: 6a:06:61:8f:1d:b5:cd:48:90:e4:5b:59:94:db:50:61:9f:93: 07:79:69:5b:f1:dc:5c:c7:81:53:d8:fe:2a:7d:a8:d9:9d:18: bc:f1:93:e0:a5:bc:cd:5c:98:1e:fd:3b:5c:07:d8:00:86:4d: 81:d9:bc:21:6f:cb:69:13:e4:11:ce:a6:bc:05:a4:32:2d:9b: c1:91:44:fd:3d:cf:13:b7:a4:31:33:20:47:cb:97:e9:5f:0f: c3:a3:71:23:d7:bb:96:f0:d2:a2:06:8c:68:04:03:bd:7a:28: 97:b3:44:01:a4:c6:58:c7:ee:1b:16:b1:6c:6a:ea:6b:a5:c0: d5:2f:f6:92:46:42:a0:b2:3e:71:69:f5:c3:3a:0d:16:03:de: 21:82:91:98:57:40:40:85:c4:db:ee:d4:d4:9c:e0:25:2e:c4: 24:de:66:00:d8:0d:f8:45:22:7f:8c:16:5a:4f:71:e6:e3:f6: ae:56:76:d3:a7:d8:bd:42:2d:77:3c:33:81:b2:c3:9e:e7:fc: a9:4a:25:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfJejRxqzyBpvRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmU2NzQwYTctNjQ5NC00ZTM5LWIwMGEtZDk5N2U1OTQwYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMAq+9FN+geRGWRUAuX6d2z1vhrzGYZNufCh UjqeE4P5KS14hp7c82pzHjiHTxlg9e2ZoHOyzpm0HVVwSTEZHR5qYEfv2jR1XDt9 3vSgYXi1ch8v1k3Je89BeNgs4uZPAWShhC1W2oxpQ5XdgDmr8JYjW1LUmdzT+oIS tYjH34/RiP2M9BfVyD5N2yX2wUPPxAuULOzPIpPTHKCa8m53rNZaMCZ+Fa/6kbA4 B6x6yG5uR0nvDcWJIFemrggqSokVQoxt3ggMbeqyIj3Mn200ste93xFWNofzN69A tMyvwx+dBh1qGyXaJRE9Opwd8QAWXZZ/osm+UtPgZdAApVW7nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmgoi1RzpZvSzd2CmsvObTbt8xEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWNhYWJlYTEtZTUwMC0z ZTk2LTljNDYtMGRjMGI5ZmU5N2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkYn8jYEtJLLl/+ANl1t9nLT5yKmkqvYN1pKtUiuwLS8KJcAJUehFX2 zG9QeiUWNLpEoJujO2oGYY8dtc1IkORbWZTbUGGfkwd5aVvx3FzHgVPY/ip9qNmd GLzxk+ClvM1cmB79O1wH2ACGTYHZvCFvy2kT5BHOprwFpDItm8GRRP09zxO3pDEz IEfLl+lfD8OjcSPXu5bw0qIGjGgEA716KJezRAGkxljH7hsWsWxq6mulwNUv9pJG QqCyPnFp9cM6DRYD3iGCkZhXQECFxNvu1NSc4CUuxCTeZgDYDfhFIn+MFlpPcebj 9q5WdtOn2L1CLXc8M4Gyw57n/KlKJYI= -----END CERTIFICATE-----Generated at Sat Sep 26 13:46:50 2026 by rpki-client