$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa File: 04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa (raw, json) Hash identifier: KN7lFs9m1Bm0eBnnv1K/a3VmylSVIaAcrDaasxX+2Es= Subject key identifier: 8A:F8:B7:2B:91:E1:F6:31:D6:83:BE:C3:5D:7D:28:C0:85:AE:ED:2B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984A601A47A8347EEA42400 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:a6:01:a4:7a:83:47:ee:a4:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a333bb6c-b417-4a42-9ef9-514c4236b6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:bb:8c:a5:ae:82:01:4f:a0:56:4b:99:a7: 27:a6:68:38:4b:87:cc:38:cf:54:b0:f7:a9:a7:17: f5:55:88:98:23:53:6c:ac:bb:5b:68:04:88:57:e1: a7:b9:10:84:be:e4:13:8a:5f:39:c7:39:ad:e3:35: 02:d5:04:85:a5:fc:c7:fe:f2:93:ab:b3:85:27:02: cc:a9:a9:d5:61:ad:ed:03:a2:20:f9:fe:8c:7a:62: c6:d5:5f:a7:41:fe:96:06:f2:b4:06:82:c0:e2:58: 6e:e0:00:cf:e9:2c:cf:56:71:a6:2e:fe:b1:cd:4a: ff:67:4e:a9:de:33:db:e4:2d:74:f9:c9:1c:61:da: f6:98:47:86:04:08:71:2d:36:51:66:87:26:f3:61: 12:7f:d9:80:f0:8d:ec:76:86:c0:69:a2:ec:7b:80: 72:35:62:f3:51:07:7c:b4:e0:e8:a1:3d:5b:ed:12: ae:fa:5e:a7:c6:78:bb:dc:52:2e:5a:18:43:8b:7c: 6c:b0:3a:6d:df:56:07:7e:29:d9:71:42:84:37:5a: 4e:81:93:7e:61:0c:c5:1b:a9:2a:01:69:40:12:b8: 02:e3:d7:ad:cb:dd:dd:71:9d:3f:23:81:b2:66:12: 31:f0:0b:f5:14:11:b9:52:fc:8c:10:b7:41:33:3e: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F8:B7:2B:91:E1:F6:31:D6:83:BE:C3:5D:7D:28:C0:85:AE:ED:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04e5a5db-3a19-3161-b187-7ad4cd8080fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6a:6c:6f:d3:2d:f3:9d:4a:78:15:c8:38:b7:b9:73:54:eb: 41:4f:79:0f:62:23:81:15:d0:93:11:5c:88:27:6c:85:77:77: 48:3a:75:df:1e:24:74:89:fe:61:ad:42:55:40:00:6b:38:a7: ad:4c:8e:f6:60:97:37:04:ba:0a:42:98:bb:6d:31:af:36:23: 2e:07:31:44:59:97:c7:7c:c4:32:fa:ee:e5:65:7c:9e:04:94: 31:21:24:2f:8a:a5:e3:c8:c0:fb:df:12:c0:54:a3:49:99:ab: ce:48:44:b8:db:80:da:fe:a1:32:32:fe:3b:74:fc:a6:d2:a0: 9d:10:77:6b:8d:7f:eb:de:c2:84:29:cc:72:9c:4d:27:aa:e2: 63:2f:34:76:80:1f:7f:e5:cc:ee:c2:7f:a7:88:cb:81:5d:4d: bb:f4:0c:2f:73:50:98:70:5b:22:fe:b0:3b:ab:53:12:06:5d: f4:0a:e8:d8:40:7f:5b:da:be:5b:f2:f2:52:06:5f:9c:9e:8f: 73:c2:8b:f5:6f:f8:b9:c6:76:5b:db:c3:37:83:96:29:5b:c1: 13:37:8b:ab:a8:30:d0:13:8f:ae:6b:1d:46:2c:4b:94:8f:b6: c0:46:31:eb:3b:30:c2:8c:38:f6:0f:3e:0b:7a:a2:60:82:40: 8b:09:da:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKYBpHqDR+6kJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTMzM2JiNmMtYjQxNy00YTQyLTllZjktNTE0YzQyMzZiNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuO7jKWuggFPoFZLmacnpmg4S4fMOM9UsPep pxf1VYiYI1NsrLtbaASIV+GnuRCEvuQTil85xzmt4zUC1QSFpfzH/vKTq7OFJwLM qanVYa3tA6Ig+f6MemLG1V+nQf6WBvK0BoLA4lhu4ADP6SzPVnGmLv6xzUr/Z06p 3jPb5C10+ckcYdr2mEeGBAhxLTZRZocm82ESf9mA8I3sdobAaaLse4ByNWLzUQd8 tODooT1b7RKu+l6nxni73FIuWhhDi3xssDpt31YHfinZcUKEN1pOgZN+YQzFG6kq AWlAErgC49ety93dcZ0/I4GyZhIx8Av1FBG5UvyMELdBMz4YwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr4tyuR4fYx1oO+w119KMCFru0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDRlNWE1ZGItM2ExOS0z MTYxLWIxODctN2FkNGNkODA4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZqbG/TLfOdSngVyDi3uXNU60FPeQ9iI4EV0JMRXIgnbIV3d0g6dd8e JHSJ/mGtQlVAAGs4p61MjvZglzcEugpCmLttMa82Iy4HMURZl8d8xDL67uVlfJ4E lDEhJC+KpePIwPvfEsBUo0mZq85IRLjbgNr+oTIy/jt0/KbSoJ0Qd2uNf+vewoQp zHKcTSeq4mMvNHaAH3/lzO7Cf6eIy4FdTbv0DC9zUJhwWyL+sDurUxIGXfQK6NhA f1vavlvy8lIGX5yej3PCi/Vv+LnGdlvbwzeDlilbwRM3i6uoMNATj65rHUYsS5SP tsBGMes7MMKMOPYPPgt6omCCQIsJ2pU= -----END CERTIFICATE-----Generated at Fri Oct 30 20:25:05 2026 by rpki-client