$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa File: a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa (raw, json) Hash identifier: vT+4nsSLvto8o3VEgMUNmwfW65A+bAGMarlnRAxFkzw= Subject key identifier: E2:BF:5B:C1:2B:CD:E6:A5:11:8D:3E:62:33:3B:AD:AC:4D:CD:96:AE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4973927B67B3692C72EFCBC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:92:7b:67:b3:69:2c:72:ef:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a971fc50-c8dd-4614-a451-c7b0ded76f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:87:37:b7:4c:d8:bf:6e:e6:00:5c:85:4b: 63:f9:03:f8:46:d6:52:4d:0b:a2:97:2c:f3:7c:37: 49:51:1a:32:b8:fa:09:26:27:9c:8e:b5:bb:7e:5b: 6f:d2:1e:5b:02:d4:d3:6c:5e:9b:bd:7f:1b:5e:35: db:1e:d3:1d:0c:cf:4b:5c:5c:3d:7c:3f:5b:09:b6: af:c2:14:cd:dc:24:f2:41:39:32:6d:d5:ed:7e:4f: 40:1f:30:f9:f0:4e:2b:67:48:1a:77:9a:4e:79:f5: 05:96:e6:35:c7:13:00:1c:0c:bc:7c:70:72:46:cb: da:be:48:67:81:6f:c1:1a:00:49:05:f8:b7:c2:dd: ed:7c:fe:26:1d:9d:59:5a:5e:5c:1c:2e:92:f8:ff: 1c:9f:60:17:84:43:f4:7b:e8:70:bc:30:f5:18:83: 0d:78:c3:59:92:b2:c4:ad:a6:0f:ed:3b:b1:23:c4: 4a:91:84:c0:b4:94:6c:85:28:e3:57:92:6c:2c:25: eb:e8:21:2c:5c:b1:15:1e:56:f7:cc:af:6c:3d:b4: 47:42:1c:02:16:ce:3b:e2:73:ba:58:28:4e:45:44: 04:de:9b:f0:1e:b1:41:9f:c5:a8:2c:d9:db:46:61: f4:7c:e8:40:42:04:ae:f8:da:ce:5a:40:bd:87:f8: e0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:5B:C1:2B:CD:E6:A5:11:8D:3E:62:33:3B:AD:AC:4D:CD:96:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b3:f2:e1:08:7c:b1:25:5d:63:14:3f:12:66:fa:2b:0b:38: 85:37:ef:07:17:28:86:86:73:b0:db:de:e5:9c:9c:f1:cf:b2: 6a:aa:a7:3e:68:6e:91:18:d5:95:89:28:2b:ff:c1:0d:6f:1a: 9d:50:28:2c:e4:e7:8d:35:15:3e:36:14:e6:d8:b3:7a:f5:1b: 0d:a7:f3:aa:ec:ee:4c:bc:8e:ae:3d:98:87:ff:4b:ff:5f:28: 43:92:80:58:5e:c8:a4:b7:01:25:fc:51:cc:6d:30:bb:db:dd: fd:cc:fc:e4:a4:48:ce:04:73:56:d1:ca:1b:2e:2e:cf:55:9a: f3:d4:98:87:5e:fc:aa:66:f8:be:99:a1:13:aa:05:11:55:bc: 3a:33:14:27:2a:da:9d:87:e6:f4:fa:0f:16:7a:b5:7e:5d:51: 8c:a5:52:b7:6a:f7:e8:50:f5:ed:f7:cb:38:ec:1d:65:fe:72: 24:0b:6e:1a:8c:c4:6b:b6:4f:61:7f:8a:9c:50:ca:aa:fd:d9: 42:ba:01:2d:b7:97:30:b3:bb:a9:01:44:7e:25:7d:52:29:b4: 80:c3:dd:e9:5a:30:cd:67:24:d2:3c:10:1d:bb:98:cb:25:cb: e7:67:6a:9e:5f:48:94:58:3d:65:1a:13:ec:f2:fa:df:d5:df: 43:e4:3a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5J7Z7NpLHLvy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTk3MWZjNTAtYzhkZC00NjE0LWE0NTEtYzdiMGRlZDc2ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdWHN7dM2L9u5gBchUtj+QP4RtZSTQuilyzz fDdJURoyuPoJJiecjrW7fltv0h5bAtTTbF6bvX8bXjXbHtMdDM9LXFw9fD9bCbav whTN3CTyQTkybdXtfk9AHzD58E4rZ0gad5pOefUFluY1xxMAHAy8fHByRsvavkhn gW/BGgBJBfi3wt3tfP4mHZ1ZWl5cHC6S+P8cn2AXhEP0e+hwvDD1GIMNeMNZkrLE raYP7TuxI8RKkYTAtJRshSjjV5JsLCXr6CEsXLEVHlb3zK9sPbRHQhwCFs474nO6 WChORUQE3pvwHrFBn8WoLNnbRmH0fOhAQgSu+NrOWkC9h/jgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK/W8ErzealEY0+YjM7raxNzZauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTVhYjcxMjMtMWQxYS0z ZWQ5LWI3Y2MtOWQzN2MwMDg5YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaz8uEIfLElXWMUPxJm+isLOIU37wcXKIaGc7Db3uWcnPHPsmqqpz5o bpEY1ZWJKCv/wQ1vGp1QKCzk5401FT42FObYs3r1Gw2n86rs7ky8jq49mIf/S/9f KEOSgFheyKS3ASX8UcxtMLvb3f3M/OSkSM4Ec1bRyhsuLs9VmvPUmIde/Kpm+L6Z oROqBRFVvDozFCcq2p2H5vT6DxZ6tX5dUYylUrdq9+hQ9e33yzjsHWX+ciQLbhqM xGu2T2F/ipxQyqr92UK6AS23lzCzu6kBRH4lfVIptIDD3elaMM1nJNI8EB27mMsl y+dnap5fSJRYPWUaE+zy+t/V30PkOnI= -----END CERTIFICATE-----Generated at Sat Oct 31 08:18:43 2026 by rpki-client