$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa File: 4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa (raw, json) Hash identifier: e8JY4UROHnVHX4vpXXQNYqJ/8fH9botquXEcWDJeisc= Subject key identifier: A8:00:85:79:54:27:1C:5C:4A:7F:8D:3C:44:5E:9A:05:25:BA:9B:8E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C85FAB629A83518F5E000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:85:fa:b6:29:a8:35:18:f5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dca4301f-7f27-4503-a508-4d157e956fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b5:a8:9a:1e:48:e4:56:95:e0:c5:5c:6b:cc: 1f:37:6e:e2:2f:e9:3d:f7:60:7f:48:bd:89:76:78: b5:9c:5e:6d:5a:ce:1e:e1:17:a7:0f:08:55:11:58: 68:67:3e:40:a1:7e:3f:1c:40:d8:f1:63:7d:88:9c: af:76:6e:14:1b:01:00:d0:d9:78:c7:ed:8f:a2:8a: 2b:2a:5a:30:50:1a:65:d6:e9:78:9a:7e:ba:c9:52: 7b:1b:e7:1b:76:fb:f6:41:d0:0c:b7:55:9c:e3:c0: 24:8a:35:1f:be:de:56:53:09:f6:9c:7a:36:42:98: 3a:2b:a9:16:e7:94:a9:05:b1:47:13:f6:a1:fe:5a: f7:5f:c5:fb:89:4b:d7:ea:84:f9:1b:2a:3d:27:f9: f3:f6:b6:4e:ed:f9:35:ee:62:1b:f4:a6:d8:30:31: dc:0c:de:78:6f:1f:f9:9a:a7:53:b2:ca:7f:aa:24: 4c:e5:12:10:4f:ca:b5:3a:e9:6a:0a:6c:40:fb:ed: 86:c3:3d:36:62:af:aa:21:7f:f5:d6:a3:7d:75:19: 33:14:73:e9:39:a9:42:9d:aa:15:36:4f:32:2b:85: 1d:6c:88:b8:68:fb:6a:c5:f6:4e:a7:aa:89:23:06: e6:5b:0b:72:19:c8:c5:99:f8:28:dd:c6:9d:98:28: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:00:85:79:54:27:1C:5C:4A:7F:8D:3C:44:5E:9A:05:25:BA:9B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4daf70eb-d550-30cc-a75a-1e1db0bcf9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7a:7e:58:f7:92:98:7a:b7:2f:6b:54:7f:d3:27:0d:8a:10: 74:26:84:89:59:2c:ea:81:c9:b0:21:39:43:3a:dc:58:ec:a6: 8a:91:83:8b:95:44:b4:0f:6c:bb:d4:24:23:35:d7:c4:87:5f: 32:f8:57:77:60:a5:59:81:af:b7:34:a4:f2:02:06:6e:c9:90: 63:81:6c:e2:a1:ac:9c:81:89:fb:2a:00:72:9b:cb:9c:8c:e7: b8:c5:90:a2:24:90:be:a9:47:db:ed:23:de:1e:59:83:99:07: bd:7a:b3:b2:6a:cb:58:59:c8:9c:8f:69:9e:de:eb:b7:ac:34: 06:4e:76:30:15:bd:78:9e:08:b9:a5:1b:89:a8:42:9a:01:c4: 87:92:f5:db:10:8a:91:61:ed:c3:9b:02:db:d8:92:a4:87:e4: 33:4d:e4:87:c5:0c:c0:42:ca:15:2a:a4:2e:2f:01:3a:b4:d6: e7:ef:fb:4c:85:03:a9:16:0c:d1:84:ca:e7:09:9a:7b:67:c5: ff:00:4b:62:79:5b:fc:ad:bc:ec:7b:e6:6a:bc:86:48:ac:9a: d0:b4:1c:0c:31:fb:0c:3b:62:7a:a4:3e:2b:e1:7a:8a:a2:d1: d0:a9:6c:c3:f1:84:5f:99:1c:d8:db:fd:3d:85:66:6a:c5:46: 16:6d:6d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfIX6timoNRj14AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGNhNDMwMWYtN2YyNy00NTAzLWE1MDgtNGQxNTdlOTU2ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LWomh5I5FaV4MVca8wfN27iL+k992B/SL2J dni1nF5tWs4e4RenDwhVEVhoZz5AoX4/HEDY8WN9iJyvdm4UGwEA0Nl4x+2Pooor KlowUBpl1ul4mn66yVJ7G+cbdvv2QdAMt1Wc48AkijUfvt5WUwn2nHo2Qpg6K6kW 55SpBbFHE/ah/lr3X8X7iUvX6oT5Gyo9J/nz9rZO7fk17mIb9KbYMDHcDN54bx/5 mqdTssp/qiRM5RIQT8q1OulqCmxA++2Gwz02Yq+qIX/11qN9dRkzFHPpOalCnaoV Nk8yK4UdbIi4aPtqxfZOp6qJIwbmWwtyGcjFmfgo3cadmCiLSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgAhXlUJxxcSn+NPERemgUlupuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGRhZjcwZWItZDU1MC0z MGNjLWE3NWEtMWUxZGIwYmNmOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp6flj3kph6ty9rVH/TJw2KEHQmhIlZLOqBybAhOUM63FjspoqRg4uV RLQPbLvUJCM118SHXzL4V3dgpVmBr7c0pPICBm7JkGOBbOKhrJyBifsqAHKby5yM 57jFkKIkkL6pR9vtI94eWYOZB716s7Jqy1hZyJyPaZ7e67esNAZOdjAVvXieCLml G4moQpoBxIeS9dsQipFh7cObAtvYkqSH5DNN5IfFDMBCyhUqpC4vATq01ufv+0yF A6kWDNGEyucJmntnxf8AS2J5W/ytvOx75mq8hkismtC0HAwx+ww7YnqkPivheoqi 0dCpbMPxhF+ZHNjb/T2FZmrFRhZtbe4= -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:46 2026 by rpki-client