$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa File: b7dceef0-fb5b-30fc-b174-4960a9daa448.roa (raw, json) Hash identifier: 1+JSGNdB5cyr6dp+gkGIZUYA9umCNTTGAIpDe7qzdyM= Subject key identifier: D6:39:3F:71:4B:E5:CF:6E:58:69:2C:92:46:43:F0:87:6D:F8:94:49 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7969330DA0301840F4A20C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:93:30:da:03:01:84:0f:4a:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d297a333-5a5c-49bd-833e-6981586e61c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:0d:a2:09:b2:7d:6f:d8:4d:ea:cd:fd:99: a4:23:bb:24:29:86:33:b5:f4:58:36:37:7d:3f:bd: 7c:19:23:0e:83:5b:dd:30:2c:4a:26:ee:c5:30:9c: cd:4b:43:76:88:b8:9d:16:5d:26:0b:6c:77:74:70: b5:84:2c:65:55:7f:0e:ae:ff:c4:8a:fe:72:6b:48: 47:f2:65:ab:00:b8:fd:92:89:7d:89:78:9c:7a:15: 82:cc:35:f0:07:76:7d:19:83:05:ca:1c:07:84:be: 44:37:f2:5c:76:8b:8a:0b:d0:db:b3:f1:aa:08:ff: 15:7d:bc:57:55:a6:f2:33:54:55:cb:0d:d6:32:f5: ad:4e:13:3d:73:1b:74:6b:0b:5e:3c:d6:1c:9d:11: d3:d2:40:3f:67:9f:f7:68:ba:ab:08:15:85:28:37: 55:7e:e4:b0:ce:f6:74:1a:a3:56:0f:59:28:8e:4c: ce:3d:5d:7b:dc:46:70:63:0c:c8:a6:f7:cf:7b:66: b7:7b:38:95:26:98:f7:ad:3d:95:a4:9e:08:83:c0: 53:51:72:95:be:99:2a:bb:a1:65:cd:14:9c:b8:a5: 28:0d:92:8e:66:4a:be:6d:87:41:bb:ee:9f:68:77: 72:c8:c1:ef:c6:8f:ca:21:d2:9b:b4:7d:37:a6:38: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:39:3F:71:4B:E5:CF:6E:58:69:2C:92:46:43:F0:87:6D:F8:94:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b7dceef0-fb5b-30fc-b174-4960a9daa448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:52:c1:ee:30:61:ee:74:dd:32:5f:31:cb:26:d4:3f:13:c7: 0a:a5:ce:b7:5d:99:98:dd:bc:73:c7:a3:59:a3:8d:7f:26:31: 02:d8:63:68:da:fa:6b:a8:0d:9c:3c:52:e6:1a:6d:1b:61:01: d9:68:f3:9b:5e:cf:6d:8f:bf:ce:7f:4e:22:f9:7a:33:1d:0c: e7:94:ac:a5:02:1a:80:f5:13:11:d1:6b:1d:fb:19:b5:12:0d: f6:6e:c5:6a:f3:a5:4b:ff:15:10:fa:a4:e5:63:85:d7:ab:0e: 73:4e:29:bb:fb:a0:2e:81:1c:93:95:45:aa:39:d1:2e:fe:21: 00:f0:c3:11:70:73:05:c9:42:4f:e2:c8:88:76:4b:bf:b0:83: f0:8e:26:bb:a7:ba:17:d4:84:f5:d9:4d:86:b2:ec:a8:75:38: 68:b6:56:02:04:07:69:0c:17:73:6c:1c:9e:35:87:33:77:42: be:f1:e0:33:f9:15:31:3a:e7:cd:24:b6:c6:37:04:8a:41:21: 41:e4:ee:5d:fa:35:76:4b:ed:8a:69:e1:8b:10:16:ba:ad:d4: ac:51:8f:ee:2c:e8:ec:72:bd:d7:e6:ee:0c:4b:1e:78:25:bd: 54:8a:a9:9a:c8:b4:8d:d5:c3:c3:17:c1:66:2b:c8:0e:58:8c: 65:f2:72:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlpMw2gMBhA9KIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDI5N2EzMzMtNWE1Yy00OWJkLTgzM2UtNjk4MTU4NmU2MWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz0NogmyfW/YTerN/ZmkI7skKYYztfRYNjd9 P718GSMOg1vdMCxKJu7FMJzNS0N2iLidFl0mC2x3dHC1hCxlVX8Orv/Eiv5ya0hH 8mWrALj9kol9iXicehWCzDXwB3Z9GYMFyhwHhL5EN/JcdouKC9Dbs/GqCP8VfbxX VabyM1RVyw3WMvWtThM9cxt0awtePNYcnRHT0kA/Z5/3aLqrCBWFKDdVfuSwzvZ0 GqNWD1kojkzOPV173EZwYwzIpvfPe2a3eziVJpj3rT2VpJ4Ig8BTUXKVvpkqu6Fl zRScuKUoDZKOZkq+bYdBu+6faHdyyMHvxo/KIdKbtH03pjgJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY5P3FL5c9uWGkskkZD8Idt+JRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjdkY2VlZjAtZmI1Yi0z MGZjLWIxNzQtNDk2MGE5ZGFhNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlSwe4wYe503TJfMcsm1D8TxwqlzrddmZjdvHPHo1mjjX8mMQLYY2ja +muoDZw8UuYabRthAdlo85tez22Pv85/TiL5ejMdDOeUrKUCGoD1ExHRax37GbUS DfZuxWrzpUv/FRD6pOVjhderDnNOKbv7oC6BHJOVRao50S7+IQDwwxFwcwXJQk/i yIh2S7+wg/COJrunuhfUhPXZTYay7Kh1OGi2VgIEB2kMF3NsHJ41hzN3Qr7x4DP5 FTE6580ktsY3BIpBIUHk7l36NXZL7Ypp4YsQFrqt1KxRj+4s6Oxyvdfm7gxLHngl vVSKqZrItI3Vw8MXwWYryA5YjGXycgo= -----END CERTIFICATE-----Generated at Thu Sep 10 19:25:09 2026 by rpki-client