$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa File: ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa (raw, json) Hash identifier: j1KTWB25+4MyCM3xxizwabjttOkmxfv2YxT0VxG2dh4= Subject key identifier: 85:87:4C:17:44:81:7E:B0:F4:93:8D:37:6B:91:93:00:7B:B7:AF:20 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C8500C8D1247005C2F7E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:85:00:c8:d1:24:70:05:c2:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e7aa524-e2b8-46a6-9541-a7063d671160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:16:7a:53:36:98:ae:b9:80:96:a3:44:4a: ce:52:6e:a1:71:41:10:21:22:21:8b:2c:0e:0e:04: 43:8c:5d:fb:fd:b4:20:85:5c:31:0c:e3:9b:5f:00: 8c:ed:06:e1:dc:0e:e2:45:2d:a0:32:f5:93:38:8c: cc:a3:af:9e:22:65:91:da:17:b7:50:81:aa:f3:bc: c7:42:c2:bf:61:db:7d:14:16:44:1c:41:02:68:55: 79:3d:cb:14:1d:55:5e:e8:11:3f:27:84:22:93:6a: cf:05:9f:17:06:af:4d:2d:d9:82:0a:3d:34:de:cc: be:10:64:47:3a:bd:e0:f3:ae:da:cf:01:6d:3d:98: 0d:c2:2b:1f:9f:3d:d9:be:42:36:60:5b:da:92:3b: 12:28:c8:35:54:6d:e3:aa:b6:78:d2:6e:16:45:51: ab:36:af:c1:66:d7:a2:ee:de:38:f4:18:ad:ba:1a: b5:6b:e7:0c:01:d2:79:4c:08:c9:ca:0b:b2:60:f7: 58:d3:5c:c4:48:3a:d4:3f:1e:3e:ea:eb:ea:09:67: 76:94:61:5c:51:fa:fa:2d:0f:6f:d2:e8:7c:63:a2: c1:8f:9a:12:85:55:ce:a0:69:73:34:e6:0e:a9:b3: 66:19:83:19:78:fe:b9:3f:7f:99:9e:5a:e5:ce:77: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:4C:17:44:81:7E:B0:F4:93:8D:37:6B:91:93:00:7B:B7:AF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:25:22:2b:8c:62:df:44:38:c7:7f:ea:94:a2:92:11:d0:e0: 6d:37:be:1b:bc:b4:ed:ef:b5:9b:f0:42:4c:57:d2:9b:1b:4a: db:86:5f:28:99:7f:92:a3:f8:ce:b0:00:30:7b:d1:ad:f0:87: 70:4d:28:7b:fc:94:a7:a0:8b:43:90:29:a9:fc:26:41:01:34: ab:39:03:ff:a6:d9:d9:e2:72:77:47:78:8a:c3:91:8e:fe:2f: 28:01:2e:5f:6f:ab:a4:07:0e:99:55:07:d8:ba:64:65:5a:d4: ac:d9:69:13:54:e1:23:c0:03:79:84:0c:91:7f:56:c5:d4:48: 65:83:a2:fa:1d:d8:9a:0b:20:47:20:c3:0b:ad:bd:e6:b3:68: 25:69:c5:ee:f2:4e:6d:a0:39:37:41:55:dc:50:b7:44:40:b5: e0:32:1a:b9:ad:af:ae:43:20:03:71:f0:f5:1c:46:2d:fe:9e: be:84:2d:25:45:c0:dc:b2:42:55:d3:28:19:85:92:80:3f:c0: 7a:3c:b4:50:99:fb:be:d2:28:b1:7c:26:3d:19:ef:f5:8e:39: 8e:f0:ca:f0:b3:de:07:9f:42:df:66:30:8b:3d:b2:ea:88:c8: e7:7f:35:ea:fd:b1:01:32:7c:e6:46:c2:d1:f0:e9:b0:17:65: b0:3a:f4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfIUAyNEkcAXC9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU3YWE1MjQtZTJiOC00NmE2LTk1NDEtYTcwNjNkNjcxMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSIWelM2mK65gJajRErOUm6hcUEQISIhiywO DgRDjF37/bQghVwxDOObXwCM7Qbh3A7iRS2gMvWTOIzMo6+eImWR2he3UIGq87zH QsK/Ydt9FBZEHEECaFV5PcsUHVVe6BE/J4Qik2rPBZ8XBq9NLdmCCj003sy+EGRH Or3g867azwFtPZgNwisfnz3ZvkI2YFvakjsSKMg1VG3jqrZ40m4WRVGrNq/BZtei 7t449Bituhq1a+cMAdJ5TAjJyguyYPdY01zESDrUPx4+6uvqCWd2lGFcUfr6LQ9v 0uh8Y6LBj5oShVXOoGlzNOYOqbNmGYMZeP65P3+ZnlrlzncacwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWHTBdEgX6w9JONN2uRkwB7t68gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZmYzZGJmYzItMjFkNy0z OTFlLTg1YTMtNDlmZTc5NDNmYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFolIiuMYt9EOMd/6pSikhHQ4G03vhu8tO3vtZvwQkxX0psbStuGXyiZ f5Kj+M6wADB70a3wh3BNKHv8lKegi0OQKan8JkEBNKs5A/+m2dnicndHeIrDkY7+ LygBLl9vq6QHDplVB9i6ZGVa1KzZaRNU4SPAA3mEDJF/VsXUSGWDovod2JoLIEcg wwutveazaCVpxe7yTm2gOTdBVdxQt0RAteAyGrmtr65DIANx8PUcRi3+nr6ELSVF wNyyQlXTKBmFkoA/wHo8tFCZ+77SKLF8Jj0Z7/WOOY7wyvCz3gefQt9mMIs9suqI yOd/Ner9sQEyfOZGwtHw6bAXZbA69F0= -----END CERTIFICATE-----Generated at Sat Sep 26 06:21:12 2026 by rpki-client