$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa File: 33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa (raw, json) Hash identifier: cWBcTQ1NSAUoP6xmdefZFvCqSJWaAZYHK3+2CFvtUQI= Subject key identifier: 2F:53:11:AF:2E:60:E7:41:79:F6:0D:DC:65:3C:D2:DF:AC:CF:2D:AC Certificate issuer: /CN=146a096d-134a-4c52-9243-da3981810107 Certificate serial: 010D0C9F4328584F3CE2AF174575F688CF1FFB60 Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 26658 IP address blocks: 104.243.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:af:17:45:75:f6:88:cf:1f:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146a096d-134a-4c52-9243-da3981810107 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=3020b1da-eef2-496a-bf60-552f20caac83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:fd:66:f2:4b:77:be:b1:ee:be:97:a4:14: 14:51:7e:7c:15:66:18:24:4a:7d:f0:38:aa:bf:2c: da:3b:43:04:4a:5f:a0:81:68:b5:34:25:91:1f:54: 43:1d:b7:ce:ec:39:db:a1:a1:99:68:b6:f8:e5:b1: bf:aa:1a:c8:d0:d0:23:f9:87:09:cc:c5:bd:f8:1a: 70:07:4a:a8:a7:ae:04:f8:7f:ba:16:51:47:38:70: 47:1d:d2:9c:bc:9a:74:c1:da:5c:74:d0:b8:0e:12: d3:f0:59:09:7e:e4:df:05:6c:56:6b:33:40:3c:61: e5:a0:1c:e7:5f:c7:cd:21:6c:f6:7d:35:00:93:2c: 8c:f7:60:c9:15:15:c2:2a:76:25:36:f2:f9:00:d2: 61:25:37:46:6b:6b:c5:f8:fa:53:a3:60:c7:5c:c3: 51:53:39:62:17:90:17:36:e7:0d:00:8e:7d:d9:aa: 39:48:6d:fa:f3:5d:37:31:58:5c:75:57:0d:92:05: 69:11:4b:af:5f:8a:3a:0f:9c:76:e5:8a:0b:9d:0e: b8:b9:f7:8b:d8:8e:05:e6:58:99:74:18:2f:b3:55: 26:4c:03:c8:a9:21:36:e8:9c:10:40:78:5a:3c:0c: 7a:9a:91:7d:ff:52:57:34:e7:23:21:5d:d5:67:db: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:11:AF:2E:60:E7:41:79:F6:0D:DC:65:3C:D2:DF:AC:CF:2D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/33337fb2-686e-3e09-9d00-5dfb4bdee7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl X509v3 Authority Key Identifier: keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer sbgp-ipAddrBlock: critical IPv4: 104.243.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:61:56:49:ca:63:5d:d8:e6:6c:d7:7b:20:ad:ca:22:8e:d0: 40:3c:57:b1:c4:3f:65:a7:2e:b9:00:24:2d:03:3c:81:2d:53: 9f:7e:a1:f2:6c:e9:60:2a:e7:b8:ab:8a:83:91:52:bc:1e:a2: c9:a2:2c:13:8e:63:31:2d:80:fb:9c:f2:e7:8e:b3:32:23:ac: bb:4d:48:a1:b8:6d:51:7f:f2:25:78:9b:0b:26:dd:49:fc:ec: 73:02:26:f6:ba:12:b2:1e:db:76:9f:cc:83:fb:4f:e4:60:08: 39:23:c6:b6:77:48:17:1b:04:70:14:37:e2:0c:54:e0:d3:2a: c9:47:e5:31:c9:fa:9d:98:5b:6c:73:ac:fe:53:01:80:02:48: 45:0e:40:38:d7:49:69:57:b1:28:2f:54:9f:80:df:12:94:0c: 52:ee:af:54:ae:ad:73:8c:28:f0:82:62:38:be:54:cd:dd:cc: 0c:85:1f:c7:4d:03:4c:a3:30:5a:dd:a8:a2:d5:da:f9:3d:18: 8f:7a:bf:f0:7b:a9:ca:b7:f2:00:e9:c4:43:c9:bd:ca:65:18: f3:cb:55:66:da:90:15:96:bf:90:58:3b:1b:93:07:37:2a:30: d4:e9:46:eb:d2:8a:bf:4b:91:a3:6a:48:76:9f:59:c0:c7:8e: e9:1f:e1:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884q8XRXX2iM8f+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw MTA3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MzAyMGIxZGEtZWVmMi00OTZhLWJmNjAtNTUyZjIwY2FhYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyP9ZvJLd76x7r6XpBQUUX58FWYYJEp98Diq vyzaO0MESl+ggWi1NCWRH1RDHbfO7DnboaGZaLb45bG/qhrI0NAj+YcJzMW9+Bpw B0qop64E+H+6FlFHOHBHHdKcvJp0wdpcdNC4DhLT8FkJfuTfBWxWazNAPGHloBzn X8fNIWz2fTUAkyyM92DJFRXCKnYlNvL5ANJhJTdGa2vF+PpTo2DHXMNRUzliF5AX NucNAI592ao5SG368103MVhcdVcNkgVpEUuvX4o6D5x25YoLnQ64ufeL2I4F5liZ dBgvs1UmTAPIqSE26JwQQHhaPAx6mpF9/1JXNOcjIV3VZ9tbhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9TEa8uYOdBefYN3GU80t+szy2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvMzMzMzdmYjItNjg2ZS0z ZTA5LTlkMDAtNWRmYjRiZGVlN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5 ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJthVknKY13Y5mzXeyCtyiKO0EA8V7HEP2WnLrkAJC0DPIEtU59+ofJs 6WAq57irioORUrweosmiLBOOYzEtgPuc8ueOszIjrLtNSKG4bVF/8iV4mwsm3Un8 7HMCJva6ErIe23afzIP7T+RgCDkjxrZ3SBcbBHAUN+IMVODTKslH5THJ+p2YW2xz rP5TAYACSEUOQDjXSWlXsSgvVJ+A3xKUDFLur1SurXOMKPCCYji+VM3dzAyFH8dN A0yjMFrdqKLV2vk9GI96v/B7qcq38gDpxEPJvcplGPPLVWbakBWWv5BYOxuTBzcq MNTpRuvSir9LkaNqSHafWcDHjukf4Ww= -----END CERTIFICATE-----Generated at Sat Sep 26 05:32:07 2026 by rpki-client