$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa File: b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa (raw, json) Hash identifier: yYwGNNDXOUgW1MSkRHu82Fy+SWCSbbLtmARyvpXRn3s= Subject key identifier: 35:81:E1:9F:89:CF:9F:B1:06:54:52:20:2E:02:82:F7:FA:FB:44:5D Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7967E0D0FCCC3605E5D6720 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:7e:0d:0f:cc:c3:60:5e:5d:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=94f974e4-d3fa-41ca-a678-076caab23c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:00:44:a7:36:18:20:f9:62:6a:52:bb:d7: 63:08:d8:b6:47:8a:fe:b9:15:c0:e3:a7:64:3c:57: 39:74:b3:de:0c:93:9f:46:ae:81:8b:1c:8d:18:63: 1f:17:80:d5:ad:ac:2a:a8:cd:88:91:bc:e5:72:a4: 25:60:65:bc:af:86:10:e3:ee:b4:25:22:1e:4b:90: 48:5a:12:1a:63:79:1a:32:88:a6:89:6b:6a:2f:62: 68:4c:05:2b:64:79:2c:a4:94:f7:e7:b7:6e:bc:6d: 03:96:47:84:3f:7d:5f:26:e0:c1:00:a0:4b:01:b5: b7:6b:b9:c9:8b:69:fb:31:43:4c:cf:b5:aa:58:c3: 6a:ca:11:4e:2e:a2:b1:12:b1:c8:c7:5c:a7:65:ad: 85:61:17:9a:1a:b3:77:bc:2b:bd:ed:99:ed:75:c3: 8f:79:c6:ad:49:32:f1:6e:62:cd:a2:40:92:4e:7c: 6c:cb:14:15:80:55:4b:86:a9:c4:ce:dd:e2:05:9c: c4:e4:33:8f:7e:2c:93:f6:b2:46:87:b3:f0:1e:59: e0:9c:d3:aa:31:93:a1:4f:ec:cc:5a:a2:ee:60:34: 93:10:51:8e:a8:5e:96:b6:3a:70:79:0d:9e:bb:de: ca:5c:08:d0:79:ba:0f:ce:ef:83:df:22:3b:b2:b4: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:81:E1:9F:89:CF:9F:B1:06:54:52:20:2E:02:82:F7:FA:FB:44:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b8594a1d-88e8-3e24-9b09-64e0cbe25293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:22:c3:b8:5e:6f:c0:8f:23:34:d1:fe:c3:ca:9c:4b:6f:d1: 80:89:bf:99:19:8f:1b:15:4e:91:ed:95:5f:aa:e1:c4:3c:9a: e3:a3:74:bf:5c:cb:bd:49:59:2c:10:27:fd:1d:ea:d1:10:c8: ad:10:c6:dc:c0:13:43:fd:b1:af:ff:60:d7:57:a1:c3:39:54: 3a:19:fa:df:fc:c5:50:30:fa:55:e5:9d:8f:ba:0e:ec:8b:c4: 59:ca:96:67:00:9f:27:1b:f2:2c:0d:98:1a:d6:12:25:0c:da: 0b:fb:3f:79:61:64:62:1e:49:42:0c:7f:b1:8b:48:8e:8f:4d: 0d:2f:ed:37:79:53:6d:a2:23:88:cd:9f:b5:cf:f7:6d:7d:7f: aa:3b:3e:fa:a8:5e:11:94:ec:88:ab:0e:1e:d7:7b:e3:6c:5d: 68:b0:23:ae:3a:de:fd:02:f0:43:79:b4:2e:1c:74:6f:9c:b8: 61:9f:96:fd:0f:39:ce:ec:3a:cd:07:6e:19:d8:97:c3:ae:52: 94:97:f6:e7:4d:8c:13:ad:45:f6:67:b6:cf:d7:4d:51:a2:32: c4:ef:c4:92:0e:98:0f:01:1e:46:03:0b:74:90:f1:b2:f9:67: ed:2c:a4:1e:48:59:b2:5e:33:69:7b:b3:4b:84:03:3b:d6:c3: aa:d2:54:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nln4ND8zDYF5dZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTRmOTc0ZTQtZDNmYS00MWNhLWE2NzgtMDc2Y2FhYjIzYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvcARKc2GCD5YmpSu9djCNi2R4r+uRXA46dk PFc5dLPeDJOfRq6BixyNGGMfF4DVrawqqM2IkbzlcqQlYGW8r4YQ4+60JSIeS5BI WhIaY3kaMoimiWtqL2JoTAUrZHkspJT357duvG0DlkeEP31fJuDBAKBLAbW3a7nJ i2n7MUNMz7WqWMNqyhFOLqKxErHIx1ynZa2FYReaGrN3vCu97ZntdcOPecatSTLx bmLNokCSTnxsyxQVgFVLhqnEzt3iBZzE5DOPfiyT9rJGh7PwHlngnNOqMZOhT+zM WqLuYDSTEFGOqF6WtjpweQ2eu97KXAjQeboPzu+D3yI7srSduQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWB4Z+Jz5+xBlRSIC4Cgvf6+0RdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjg1OTRhMWQtODhlOC0z ZTI0LTliMDktNjRlMGNiZTI1MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUiw7heb8CPIzTR/sPKnEtv0YCJv5kZjxsVTpHtlV+q4cQ8muOjdL9c y71JWSwQJ/0d6tEQyK0QxtzAE0P9sa//YNdXocM5VDoZ+t/8xVAw+lXlnY+6DuyL xFnKlmcAnycb8iwNmBrWEiUM2gv7P3lhZGIeSUIMf7GLSI6PTQ0v7Td5U22iI4jN n7XP9219f6o7PvqoXhGU7IirDh7Xe+NsXWiwI6463v0C8EN5tC4cdG+cuGGflv0P Oc7sOs0HbhnYl8OuUpSX9udNjBOtRfZnts/XTVGiMsTvxJIOmA8BHkYDC3SQ8bL5 Z+0spB5IWbJeM2l7s0uEAzvWw6rSVH8= -----END CERTIFICATE-----Generated at Fri Sep 11 01:19:04 2026 by rpki-client