$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa File: f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa (raw, json) Hash identifier: 6Lq10+kTr4B0SvZZdaLgX+xXxumuS/agsr0MhJBm4W8= Subject key identifier: ED:39:22:A7:F0:9E:C0:1F:20:48:E6:62:90:F5:3D:84:F1:2D:A6:F6 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984A2A321FE8C1499D186E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:a2:a3:21:fe:8c:14:99:d1:86:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=958da7a6-4d87-4c09-b182-9474ca862666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:11:83:41:a3:f9:73:d8:ad:48:5b:84:51: 97:54:ba:24:ae:1b:61:1f:08:2a:47:34:a8:e8:14: bb:0b:64:cd:e0:de:ef:60:f8:47:b6:66:72:62:94: 83:e5:31:b6:1e:03:ef:79:27:0b:92:7a:b0:d6:f8: 41:51:27:29:4a:b8:b6:0c:b7:9b:9d:fc:31:7b:87: fe:fd:71:c4:1e:05:3d:fa:b9:28:bb:bd:21:8b:d8: 12:70:44:a3:0e:f9:c1:bb:c1:65:89:0e:3d:20:23: 60:10:df:3a:b3:e6:1a:0e:ca:66:58:40:17:cc:ce: c3:52:32:e6:11:e6:89:f3:42:65:53:4e:ff:25:be: a1:0f:86:81:94:99:b4:8e:b1:55:01:2d:45:23:eb: b4:67:67:34:a5:0b:f1:9c:0d:66:70:3d:39:66:c2: 7b:ec:7f:d8:52:62:ed:70:f8:66:8f:15:27:1d:ec: 8c:bd:89:b0:cd:29:b8:c8:27:bc:ce:1b:4c:85:2e: 81:60:b6:6b:28:92:fb:89:68:ef:68:19:0f:ae:ce: ab:9c:ab:60:95:39:d9:a8:7d:e0:f0:e9:fc:bc:3c: db:71:5a:a0:4e:42:84:2b:ad:36:0d:17:6e:4e:e1: ce:b7:cb:dc:98:23:d0:a4:6b:74:b8:a5:93:30:b9: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:39:22:A7:F0:9E:C0:1F:20:48:E6:62:90:F5:3D:84:F1:2D:A6:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81a5d8c-a6ec-32af-83fa-676dc7c15566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4b:58:98:70:4b:da:d6:1d:a2:dd:be:b9:57:c6:3f:50:e0: de:9c:35:9e:06:95:91:f3:63:f7:04:46:c2:49:a9:1b:08:07: ff:ef:66:e2:ba:3b:19:0c:6a:69:6a:74:e2:28:ab:b5:90:70: ae:0c:3e:e9:f7:a0:79:43:49:b0:2b:4f:13:1f:84:8f:d2:4d: 50:13:39:a1:44:53:7e:74:94:c5:96:82:b8:15:9f:5e:10:df: a8:ba:b2:2b:55:b7:98:67:f1:e2:10:3d:e4:2e:3a:69:9c:9a: 35:d5:61:aa:72:8b:92:a6:1a:c2:0c:ec:75:3c:7e:f6:62:18: 93:97:58:26:3e:00:18:c6:60:3b:54:0c:1a:b7:1e:d0:27:27: d9:ee:bd:48:5c:f6:fd:12:4d:cb:11:b2:18:e2:77:f3:6c:51: 67:0b:4a:80:1f:10:ff:49:93:8b:e5:7b:01:20:30:a7:50:f4: e3:df:3f:b4:71:68:b7:f1:6a:34:6c:82:d6:a7:49:be:d9:ec: bc:51:86:52:23:5f:ed:16:e8:30:13:fe:90:05:7d:36:a9:1a: d5:7c:1f:08:5f:30:ba:f4:22:67:77:bb:f6:b7:a1:04:51:5f: 63:58:3c:c8:e8:dc:f0:5c:f2:72:98:7c:6a:28:77:70:f4:5e: 98:ab:2f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKKjIf6MFJnRhuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTU4ZGE3YTYtNGQ4Ny00YzA5LWIxODItOTQ3NGNhODYyNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2sRg0Gj+XPYrUhbhFGXVLokrhthHwgqRzSo 6BS7C2TN4N7vYPhHtmZyYpSD5TG2HgPveScLknqw1vhBUScpSri2DLebnfwxe4f+ /XHEHgU9+rkou70hi9gScESjDvnBu8FliQ49ICNgEN86s+YaDspmWEAXzM7DUjLm EeaJ80JlU07/Jb6hD4aBlJm0jrFVAS1FI+u0Z2c0pQvxnA1mcD05ZsJ77H/YUmLt cPhmjxUnHeyMvYmwzSm4yCe8zhtMhS6BYLZrKJL7iWjvaBkPrs6rnKtglTnZqH3g 8On8vDzbcVqgTkKEK602DRduTuHOt8vcmCPQpGt0uKWTMLkbwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO05IqfwnsAfIEjmYpD1PYTxLab2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjgxYTVkOGMtYTZlYy0z MmFmLTgzZmEtNjc2ZGM3YzE1NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRLWJhwS9rWHaLdvrlXxj9Q4N6cNZ4GlZHzY/cERsJJqRsIB//vZuK6 OxkMamlqdOIoq7WQcK4MPun3oHlDSbArTxMfhI/STVATOaFEU350lMWWgrgVn14Q 36i6sitVt5hn8eIQPeQuOmmcmjXVYapyi5KmGsIM7HU8fvZiGJOXWCY+ABjGYDtU DBq3HtAnJ9nuvUhc9v0STcsRshjid/NsUWcLSoAfEP9Jk4vlewEgMKdQ9OPfP7Rx aLfxajRsgtanSb7Z7LxRhlIjX+0W6DAT/pAFfTapGtV8HwhfMLr0Imd3u/a3oQRR X2NYPMjo3PBc8nKYfGood3D0XpirL6w= -----END CERTIFICATE-----Generated at Sat Sep 26 03:16:58 2026 by rpki-client