$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e2fbd7b-aeb1-3819-9e17-fbe00df26006.roa File: 3e2fbd7b-aeb1-3819-9e17-fbe00df26006.roa (raw, json) Hash identifier: 2JPt7Wqi0yvqoCt6Nl7FgtVjr7FPqNusOnkjDqodzl4= Subject key identifier: 7F:24:76:80:E3:27:7B:79:0E:F7:48:86:02:7B:77:5E:20:8A:30:49 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA795610A0BDC047B125BC3A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e2fbd7b-aeb1-3819-9e17-fbe00df26006.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:61:0a:0b:dc:04:7b:12:5b:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bf944ff3-ce41-4259-a6b5-48eb6b36a895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:84:82:e9:1f:cd:a0:bf:d7:1f:41:0d:46: 24:e1:ef:12:8c:fc:60:dd:9f:82:f2:62:12:97:80: 8f:87:75:bf:33:6e:6f:e1:0e:c9:5b:f1:3f:7c:c0: 44:24:b1:e1:49:2d:4f:f1:fa:3c:01:d5:30:1b:79: d3:e1:28:72:cd:a5:42:95:d6:ba:4e:52:18:90:61: c2:58:a0:1f:94:e2:dd:05:21:cc:68:89:cc:db:1c: a1:02:a8:98:6c:89:8d:33:d8:cc:64:c9:18:a3:c6: 96:6a:55:fe:25:45:22:df:28:9d:3d:48:80:43:c3: 21:05:19:5e:fd:70:a2:d0:dd:72:78:fd:37:03:6d: f2:db:af:7a:19:2c:48:ce:6c:6d:e3:03:5d:a2:2a: 19:08:34:9e:f6:a0:69:ba:34:08:43:45:99:a1:7f: b6:2e:b5:f2:84:87:77:d3:05:29:6a:ed:e2:6f:09: 1b:87:ce:9e:d4:a9:af:9d:b8:5c:36:72:56:98:91: df:f0:20:52:5f:35:2a:c3:8d:22:b1:b0:05:b4:be: 0b:20:ab:0f:da:5f:b6:31:12:a9:7c:b7:ec:e5:c7: f2:85:ec:63:4e:fd:9f:47:35:2c:31:0b:b5:99:b6: e2:fe:fd:df:48:0a:57:4e:bc:8d:c0:57:e8:00:82: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:24:76:80:E3:27:7B:79:0E:F7:48:86:02:7B:77:5E:20:8A:30:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e2fbd7b-aeb1-3819-9e17-fbe00df26006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:2d:65:bb:d8:46:b5:8f:23:e2:20:51:a2:a2:e8:ef:13:0a: df:ae:ba:29:c5:7b:8f:21:fe:da:8f:c2:8b:c3:82:da:76:c6: 88:8c:40:9a:c0:bb:98:02:5c:88:cb:b4:8b:5a:ea:15:ca:a0: fb:a3:d5:4f:7b:76:fa:80:47:f5:bf:0e:74:23:8a:a3:58:7a: 34:c2:f2:0a:d5:16:a6:60:ab:45:fd:a4:b5:ff:53:08:35:19: 89:11:98:2e:23:54:66:30:ea:0f:46:43:47:6b:04:15:5d:57: 17:b9:3a:28:9e:39:ab:c9:32:df:74:90:02:06:3a:e1:bf:e4: fa:1b:c6:cf:d9:a5:34:34:99:b5:01:a7:01:5e:88:ab:c1:17: 66:b2:2c:62:01:7e:2e:d9:a8:fe:ae:17:54:d4:73:0f:62:81: 21:df:ab:1a:71:da:b2:d7:59:cd:61:a4:f1:19:6a:a7:6e:57: 7a:b6:0a:93:01:e0:97:ee:86:e3:d9:e7:67:97:80:a5:0a:ba: fc:0e:4e:c4:e0:a9:3d:6b:d8:0e:35:37:cd:9f:8c:57:d0:e4: f9:a7:9d:4c:65:1a:12:e2:60:fb:4e:1b:b9:c4:e7:81:22:46: f9:a8:50:cb:1a:c6:64:57:12:4f:4a:aa:86:8e:c9:e7:b3:c1: 64:c4:21:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlWEKC9wEexJbw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmY5NDRmZjMtY2U0MS00MjU5LWE2YjUtNDhlYjZiMzZhODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqiEgukfzaC/1x9BDUYk4e8SjPxg3Z+C8mIS l4CPh3W/M25v4Q7JW/E/fMBEJLHhSS1P8fo8AdUwG3nT4ShyzaVClda6TlIYkGHC WKAflOLdBSHMaInM2xyhAqiYbImNM9jMZMkYo8aWalX+JUUi3yidPUiAQ8MhBRle /XCi0N1yeP03A23y2696GSxIzmxt4wNdoioZCDSe9qBpujQIQ0WZoX+2LrXyhId3 0wUpau3ibwkbh86e1KmvnbhcNnJWmJHf8CBSXzUqw40isbAFtL4LIKsP2l+2MRKp fLfs5cfyhexjTv2fRzUsMQu1mbbi/v3fSApXTryNwFfoAIIO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8kdoDjJ3t5DvdIhgJ7d14gijBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2UyZmJkN2ItYWViMS0z ODE5LTllMTctZmJlMDBkZjI2MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJktZbvYRrWPI+IgUaKi6O8TCt+uuinFe48h/tqPwovDgtp2xoiMQJrA u5gCXIjLtIta6hXKoPuj1U97dvqAR/W/DnQjiqNYejTC8grVFqZgq0X9pLX/Uwg1 GYkRmC4jVGYw6g9GQ0drBBVdVxe5OiieOavJMt90kAIGOuG/5Pobxs/ZpTQ0mbUB pwFeiKvBF2ayLGIBfi7ZqP6uF1TUcw9igSHfqxpx2rLXWc1hpPEZaqduV3q2CpMB 4JfuhuPZ52eXgKUKuvwOTsTgqT1r2A41N82fjFfQ5PmnnUxlGhLiYPtOG7nE54Ei RvmoUMsaxmRXEk9KqoaOyeezwWTEIcI= -----END CERTIFICATE-----Generated at Thu Sep 10 23:38:55 2026 by rpki-client