$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa File: 16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa (raw, json) Hash identifier: WcxhKbwQ8NcK1uxuVkGoHwr7BlyyMv7cUlOZE9s7wG4= Subject key identifier: 6B:9C:0C:84:C3:5C:C8:52:30:B0:01:AA:B5:4F:0B:55:C7:6B:43:A7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA79677B095C5BFBEA6B3AE60 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:77:b0:95:c5:bf:be:a6:b3:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d4b1875d-8041-4424-aa1c-5cff865c666b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:4e:9b:e1:6f:da:f1:37:df:70:e2:1b:e3: c4:cd:fe:94:0c:1f:4b:2e:00:a2:bf:e0:0c:f0:f8: 54:67:2a:50:c2:37:53:a7:b1:d4:8d:58:8e:62:8c: 11:5f:1c:ac:90:7d:fa:ca:d2:33:df:cd:fc:3a:ce: 2f:a0:95:a9:55:a3:a7:e5:ae:da:67:d4:8d:2f:80: fd:c7:09:38:eb:86:be:70:50:eb:9b:33:8e:b0:8a: a1:36:00:21:74:fe:bf:6e:60:5d:24:9e:48:19:a6: f0:4d:9c:57:73:ee:09:2c:20:58:c8:a1:69:ef:dd: 3f:15:2e:6a:ae:5b:89:25:da:81:1a:be:84:b3:d7: f7:a5:df:11:bc:db:50:fc:98:bb:ba:8b:03:da:5b: 1f:a1:19:a6:02:65:e6:ba:3b:84:36:c3:95:68:25: 8e:d6:b1:89:de:a9:0c:05:f9:56:a6:7f:f2:9d:78: ce:57:11:41:2d:f3:67:6c:43:30:02:7d:d1:bc:95: 90:69:79:04:d2:d3:6c:41:22:74:c8:72:c7:43:88: d6:e2:6a:bf:20:e3:77:13:a1:b9:e4:37:d8:8b:50: 14:d8:70:e0:65:a9:83:e7:05:57:d0:9d:cf:f8:69: e8:1c:ee:68:82:74:00:42:c4:3e:20:d6:e1:2b:9a: f1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9C:0C:84:C3:5C:C8:52:30:B0:01:AA:B5:4F:0B:55:C7:6B:43:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:66:65:5b:89:d5:d6:75:1e:56:d0:a4:4b:50:ca:f2:21:1b: 75:6e:24:7b:3e:b9:e9:e1:0d:c7:2c:ef:9a:5d:f7:a9:85:8c: f9:36:5d:f5:80:36:c5:a1:a0:41:22:e8:20:0f:d0:06:a5:65: e6:f2:f3:36:99:4f:f5:c0:3e:3e:c9:7b:a3:7e:01:d7:7a:58: 4c:15:09:19:d1:5c:d4:b0:1b:48:e0:3d:ac:93:2b:69:3f:79: b1:91:84:a2:4a:f5:f9:84:34:44:d8:d9:70:11:fe:6e:cc:a3: c7:32:00:f7:2f:89:e9:22:45:cd:18:22:f3:51:61:af:40:cd: 52:f4:9c:d0:c6:1a:ad:3f:11:c5:fa:4f:ef:c3:5d:98:03:24: b1:0d:43:92:fa:f8:8a:6e:bf:74:c6:9f:7a:03:e6:3d:9c:b9: 34:cb:86:bc:35:e8:d3:6e:4e:aa:12:2b:81:f9:30:cd:e9:4b: d3:b8:8c:5a:e9:a0:92:de:05:3f:fe:e2:77:da:e0:ca:64:f8: db:7e:ad:be:62:f9:89:05:3a:76:1d:be:56:19:9b:10:54:46: b5:be:d5:89:4b:5b:b9:5b:18:64:ab:4a:9e:ed:6a:fc:3f:7d: e4:f1:45:13:d4:25:a6:18:ac:48:c2:0a:92:92:2e:c1:fb:3c: 3b:e7:66:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlnewlcW/vqazrmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDRiMTg3NWQtODA0MS00NDI0LWFhMWMtNWNmZjg2NWM2NjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA1Om+Fv2vE333DiG+PEzf6UDB9LLgCiv+AM 8PhUZypQwjdTp7HUjViOYowRXxyskH36ytIz3838Os4voJWpVaOn5a7aZ9SNL4D9 xwk464a+cFDrmzOOsIqhNgAhdP6/bmBdJJ5IGabwTZxXc+4JLCBYyKFp790/FS5q rluJJdqBGr6Es9f3pd8RvNtQ/Ji7uosD2lsfoRmmAmXmujuENsOVaCWO1rGJ3qkM BflWpn/ynXjOVxFBLfNnbEMwAn3RvJWQaXkE0tNsQSJ0yHLHQ4jW4mq/ION3E6G5 5DfYi1AU2HDgZamD5wVX0J3P+GnoHO5ognQAQsQ+INbhK5rxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGucDITDXMhSMLABqrVPC1XHa0OnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTZjZTgyZDQtYjY4Zi0z YmEzLTlmYTUtNGVmODAyN2FjODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1mZVuJ1dZ1HlbQpEtQyvIhG3VuJHs+uenhDccs75pd96mFjPk2XfWA NsWhoEEi6CAP0AalZeby8zaZT/XAPj7Je6N+Add6WEwVCRnRXNSwG0jgPayTK2k/ ebGRhKJK9fmENETY2XAR/m7Mo8cyAPcviekiRc0YIvNRYa9AzVL0nNDGGq0/EcX6 T+/DXZgDJLENQ5L6+Ipuv3TGn3oD5j2cuTTLhrw16NNuTqoSK4H5MM3pS9O4jFrp oJLeBT/+4nfa4Mpk+Nt+rb5i+YkFOnYdvlYZmxBURrW+1YlLW7lbGGSrSp7tavw/ feTxRRPUJaYYrEjCCpKSLsH7PDvnZtE= -----END CERTIFICATE-----Generated at Fri Sep 11 00:23:46 2026 by rpki-client