$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa File: b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa (raw, json) Hash identifier: In9qxNGvvOarZCHAjw2emKug1n5dv/IV+uWWfJ+NPhA= Subject key identifier: D3:97:E1:D3:7B:7A:A8:35:1B:07:00:56:9A:D0:46:FB:07:C8:44:A3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C9A96F708DD11C5508D90 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:9a:96:f7:08:dd:11:c5:50:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9d3d68e-98a9-45ea-80f8-f439220e8a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:ff:0b:90:88:4b:a9:d7:76:ba:32:c9:e5: 24:1f:5c:39:ce:7a:22:c3:2e:55:f7:52:0f:0a:cb: 3a:e5:12:18:e1:8d:90:5a:c1:87:c0:22:55:ef:1e: e3:56:11:1b:fe:37:aa:69:e1:9d:99:38:63:70:67: 94:e0:bb:49:ae:bc:25:ed:c1:b6:c2:c2:62:da:79: 12:71:46:41:2f:df:dc:3e:e8:5f:a8:19:3f:44:fe: 64:ba:06:eb:1e:70:84:52:1d:1f:09:8d:91:6a:2d: a1:c6:5b:f9:1a:3d:7a:28:5a:fc:c7:17:2e:6d:ac: d4:62:58:10:60:01:dc:67:31:40:d1:72:ba:8d:f8: eb:f7:83:a8:78:2d:78:74:ec:f8:62:78:a9:9c:a6: 80:b4:9c:67:d2:44:29:79:a1:07:b4:78:64:09:b7: 63:43:de:61:2c:30:04:7b:b5:4e:8f:6e:70:82:1f: ac:3f:61:83:91:31:bd:db:1a:8e:47:2c:4e:04:fa: 14:f0:d1:f5:6f:c1:e7:0f:53:4c:73:a5:4e:7a:2a: d0:95:45:ba:cc:d8:02:2f:fb:cb:80:00:4d:2f:4f: e4:e7:15:05:39:54:67:78:14:80:f6:b2:ab:8b:e4: 09:61:b3:20:79:d7:2b:10:52:58:76:ef:91:12:26: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:97:E1:D3:7B:7A:A8:35:1B:07:00:56:9A:D0:46:FB:07:C8:44:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b400fe0c-460f-3718-8261-6e2c55f3eaf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:54:b8:be:3d:34:72:4b:c1:b9:13:4e:e8:d1:1d:d5:b6:ea: 09:63:94:fd:72:93:bb:b8:2c:2a:42:8d:94:6b:be:75:20:ba: a7:a3:9a:93:a2:1b:01:c9:27:49:c0:fc:19:1c:ff:e0:79:4b: 57:dd:9a:16:a0:bb:e7:52:89:fc:c3:bd:3b:06:56:b8:4c:08: a7:86:1e:07:f3:99:fd:20:86:c8:68:9e:65:53:2d:b3:7d:99: d2:53:60:e6:93:bc:8c:68:4d:2c:40:6b:ad:17:f4:6b:12:81: d3:1e:05:af:9f:a1:04:d7:ee:5a:66:f3:28:f7:9a:98:71:f0: d1:3a:2f:d1:b8:04:3b:85:92:df:20:43:89:45:e8:74:0c:0c: c7:3f:b3:2f:9a:f6:ea:4f:2e:ab:b2:11:f6:f0:e7:13:31:3c: 2f:2c:78:49:c0:d1:b0:2c:c0:ef:1e:a4:37:31:0b:2f:8e:22: c8:19:60:4b:bb:aa:bb:f7:99:3f:19:54:15:06:ac:a6:4a:74: fe:62:5f:fd:4e:3e:a4:1f:87:e3:47:16:1d:0d:db:8b:e9:52: f1:c9:91:a4:01:a0:9f:c6:22:f4:e5:b9:7b:55:e1:f3:eb:f8: ff:38:cc:aa:71:5a:f9:0c:f8:62:0e:1e:21:e1:cb:94:31:18: 47:1f:cf:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfJqW9wjdEcVQjZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzlkM2Q2OGUtOThhOS00NWVhLTgwZjgtZjQzOTIyMGU4YTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVb/C5CIS6nXdroyyeUkH1w5znoiwy5V91IP Css65RIY4Y2QWsGHwCJV7x7jVhEb/jeqaeGdmThjcGeU4LtJrrwl7cG2wsJi2nkS cUZBL9/cPuhfqBk/RP5kugbrHnCEUh0fCY2Rai2hxlv5Gj16KFr8xxcubazUYlgQ YAHcZzFA0XK6jfjr94OoeC14dOz4YnipnKaAtJxn0kQpeaEHtHhkCbdjQ95hLDAE e7VOj25wgh+sP2GDkTG92xqORyxOBPoU8NH1b8HnD1NMc6VOeirQlUW6zNgCL/vL gABNL0/k5xUFOVRneBSA9rKri+QJYbMgedcrEFJYdu+REiahBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOX4dN7eqg1GwcAVprQRvsHyESjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjQwMGZlMGMtNDYwZi0z NzE4LTgyNjEtNmUyYzU1ZjNlYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlUuL49NHJLwbkTTujRHdW26gljlP1yk7u4LCpCjZRrvnUguqejmpOi GwHJJ0nA/Bkc/+B5S1fdmhagu+dSifzDvTsGVrhMCKeGHgfzmf0ghshonmVTLbN9 mdJTYOaTvIxoTSxAa60X9GsSgdMeBa+foQTX7lpm8yj3mphx8NE6L9G4BDuFkt8g Q4lF6HQMDMc/sy+a9upPLquyEfbw5xMxPC8seEnA0bAswO8epDcxCy+OIsgZYEu7 qrv3mT8ZVBUGrKZKdP5iX/1OPqQfh+NHFh0N24vpUvHJkaQBoJ/GIvTluXtV4fPr +P84zKpxWvkM+GIOHiHhy5QxGEcfz08= -----END CERTIFICATE-----Generated at Fri Oct 30 06:46:39 2026 by rpki-client