$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa File: 2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa (raw, json) Hash identifier: QxJ7zQ2HZP7uJeKMnD5wio38AR379vk+qafBvEmTbxk= Subject key identifier: F2:4B:92:F0:3F:8D:5A:A2:E0:29:9A:DC:A2:C8:5F:CE:02:F8:C3:B0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7968BBED22EED3412851E20 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:8b:be:d2:2e:ed:34:12:85:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1570299e-c66f-4173-a8f1-a3c9f220c9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:3b:c5:ca:73:c5:00:b1:af:37:40:a2:8f: 82:dc:82:7f:a0:f4:5f:82:ad:f7:1f:ae:0c:c5:da: 3f:1a:a0:f4:a7:7b:28:8c:1b:5b:29:ec:27:a2:e5: 70:27:14:3c:a0:24:23:25:ee:64:1d:d9:20:f7:2b: b7:08:8f:f6:7c:d5:60:d6:59:c8:04:ad:49:cf:45: 71:8a:20:a1:87:ed:69:01:d9:db:7e:1e:ea:d3:c5: d5:c2:ca:e6:11:45:b2:15:17:80:ba:a8:9d:f0:f9: d4:95:14:14:9a:0c:bd:37:dc:16:38:f4:5d:75:b1: 6d:dd:0c:79:42:f7:c7:da:22:15:96:42:79:c3:1f: a3:1d:67:a3:d3:69:b1:9b:67:c0:f1:d3:df:43:7b: 61:2a:49:f0:af:6c:a8:81:70:d9:4d:ab:f3:26:d4: ec:9a:bd:3f:d0:af:ce:bf:3c:2a:19:a0:70:ad:08: 58:b6:44:74:fe:36:bb:af:9e:91:69:49:12:2c:7c: e0:78:3f:6d:1e:7a:77:55:2f:fb:26:4e:c8:29:fb: 62:cc:e0:28:22:7e:38:72:d9:c4:98:db:f9:1a:61: 82:84:d9:88:9f:c7:08:96:93:62:be:55:db:38:01: 9e:e7:aa:bd:59:85:b1:79:ef:11:93:9e:ab:7f:cf: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4B:92:F0:3F:8D:5A:A2:E0:29:9A:DC:A2:C8:5F:CE:02:F8:C3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c4ea683-6575-3f5e-b72f-395ed3d6888e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4b:18:35:5d:ee:f1:df:d0:b5:c5:d7:32:6b:41:71:c4:24: 80:17:9e:5a:ea:19:3e:ef:48:b5:70:87:a6:82:6c:75:c9:a8: 62:8f:50:72:e2:4d:12:c7:53:13:15:35:64:b3:ae:3a:a4:53: 6e:f8:6b:b9:bd:d4:32:a4:bc:fb:60:e3:fa:1a:80:41:8e:5f: 60:08:42:16:05:b4:e4:b1:f4:7c:ef:c9:b7:0f:86:76:a7:bc: 0a:81:28:9a:a8:80:9c:54:04:c9:b3:f1:d2:bf:d9:4e:4a:67: d1:11:6e:33:57:fa:5d:a4:b0:5d:43:46:bd:a8:92:05:0f:20: 5a:a6:bd:1e:bc:3c:63:78:0a:b0:b3:de:a3:5a:c2:3f:99:4f: cd:af:2e:be:36:52:0a:3a:a2:af:7a:27:5c:a5:54:7d:9c:94: 94:43:9e:f2:bc:c2:d8:74:90:69:0f:30:7b:7d:24:74:3f:77: 65:7a:ac:da:10:ab:7c:17:cf:3f:38:47:79:7f:45:9d:3c:d9: b7:b3:8a:37:56:9b:88:f9:23:f3:6f:d7:65:c7:08:10:b0:4e: c5:49:91:12:9b:f2:82:b1:dd:d9:fe:3c:3c:32:00:be:d9:b5: 67:6b:0d:04:e8:91:ae:4a:09:19:d4:3f:dd:31:cc:d5:12:d5: 18:88:f6:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlou+0i7tNBKFHiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTU3MDI5OWUtYzY2Zi00MTczLWE4ZjEtYTNjOWYyMjBjOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNI7xcpzxQCxrzdAoo+C3IJ/oPRfgq33H64M xdo/GqD0p3sojBtbKewnouVwJxQ8oCQjJe5kHdkg9yu3CI/2fNVg1lnIBK1Jz0Vx iiChh+1pAdnbfh7q08XVwsrmEUWyFReAuqid8PnUlRQUmgy9N9wWOPRddbFt3Qx5 QvfH2iIVlkJ5wx+jHWej02mxm2fA8dPfQ3thKknwr2yogXDZTavzJtTsmr0/0K/O vzwqGaBwrQhYtkR0/ja7r56RaUkSLHzgeD9tHnp3VS/7Jk7IKftizOAoIn44ctnE mNv5GmGChNmIn8cIlpNivlXbOAGe56q9WYWxee8Rk56rf8+DPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJLkvA/jVqi4Cma3KLIX84C+MOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmM0ZWE2ODMtNjU3NS0z ZjVlLWI3MmYtMzk1ZWQzZDY4ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9LGDVd7vHf0LXF1zJrQXHEJIAXnlrqGT7vSLVwh6aCbHXJqGKPUHLi TRLHUxMVNWSzrjqkU274a7m91DKkvPtg4/oagEGOX2AIQhYFtOSx9HzvybcPhnan vAqBKJqogJxUBMmz8dK/2U5KZ9ERbjNX+l2ksF1DRr2okgUPIFqmvR68PGN4CrCz 3qNawj+ZT82vLr42Ugo6oq96J1ylVH2clJRDnvK8wth0kGkPMHt9JHQ/d2V6rNoQ q3wXzz84R3l/RZ082bezijdWm4j5I/Nv12XHCBCwTsVJkRKb8oKx3dn+PDwyAL7Z tWdrDQToka5KCRnUP90xzNUS1RiI9pY= -----END CERTIFICATE-----Generated at Fri Sep 11 02:08:23 2026 by rpki-client