$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa File: c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa (raw, json) Hash identifier: IcEZGpxcCDJ7QQ2D/rpydQ1sD1Kbg7i3oE6ld1bhOM0= Subject key identifier: 4A:53:70:3A:B4:F3:79:95:A8:C8:5E:FE:8E:D3:2C:D3:97:F7:8A:3C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984AB9AEE445688FFC0F558 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ab:9a:ee:44:56:88:ff:c0:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=435bf0e0-fa0e-40b1-9d83-bb7d1f3fc7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:85:69:b1:fd:9f:c5:32:50:2f:4d:81:d7:d3: 59:b0:8c:ff:40:00:23:45:f3:60:19:77:97:48:29: e0:5c:06:8a:47:8c:47:9e:5f:1d:52:6e:11:26:e5: 8f:f7:df:43:7e:78:ff:e1:da:15:31:8e:7c:2b:8e: 31:c5:f4:64:e7:ea:f6:6c:39:49:59:5e:96:96:28: b7:fe:e6:41:e9:75:35:91:13:51:0d:29:7d:ae:36: 81:54:b1:1f:03:40:ad:62:ec:68:50:f1:46:55:46: 09:bb:e0:85:df:cf:eb:90:5b:f0:19:84:1a:3a:e4: 2c:05:d6:70:5f:35:e3:61:93:5b:eb:cd:b1:99:9f: 79:1c:59:d7:2e:ab:50:b9:52:ef:ac:84:bd:1b:8b: 2e:62:5f:6e:31:e1:6d:16:a5:d7:02:55:26:c9:f1: 92:6d:a5:60:fb:ae:24:16:81:6c:44:4b:5e:68:51: d0:c7:8d:6b:86:e2:af:77:6e:7a:47:15:b4:97:9a: c2:a7:48:a3:21:42:dc:b2:ab:b1:25:e7:5e:36:f6: 88:e8:2d:42:70:8a:cb:49:94:26:6f:3b:5f:02:b7: 43:ef:2f:dc:77:38:be:5c:ad:f6:2f:e1:b1:5c:fe: c2:a4:52:29:82:5f:79:e9:6e:d8:e4:ca:56:53:94: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:53:70:3A:B4:F3:79:95:A8:C8:5E:FE:8E:D3:2C:D3:97:F7:8A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1a327bc-4be2-3ae2-a669-1009e0c6489b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c2:4f:ad:80:c0:d8:26:c2:08:07:41:07:cc:65:a9:49:7c: 46:ef:8c:08:6e:25:d6:f4:f6:a5:77:19:d6:d5:7f:e0:6e:25: 05:3e:84:cb:8a:35:ce:d8:d6:f9:5f:54:ae:6b:93:a1:f1:ed: a5:7e:87:fc:49:e1:32:b4:fb:95:79:28:67:f5:f0:c4:14:7a: 44:84:72:07:1e:b5:8f:87:66:40:9b:0f:ee:14:c4:bc:47:0a: 24:ff:b1:48:a4:67:02:82:d1:7e:f7:65:66:45:17:7e:93:b1: 09:14:64:38:c3:6f:59:fa:c3:97:6f:e0:7f:70:c7:46:9b:03: f0:c2:48:bf:e8:f8:9a:68:27:8b:9d:0a:91:7b:5c:30:58:e3: 9f:1b:1e:87:23:eb:fe:32:34:5d:05:d2:90:c7:88:14:ed:2e: af:81:d3:1c:80:83:e6:1d:21:f3:13:b8:95:28:6e:fd:02:5a: a1:e2:c9:39:4d:0f:55:20:66:4f:78:c1:d1:69:36:b4:fb:b2: a5:63:58:7a:e0:08:79:ac:b2:5d:c9:57:3b:a0:91:78:37:b5: 5a:02:92:38:ee:c4:e3:3e:08:35:36:4a:80:62:ac:5d:fc:9d: 3b:7c:fc:ad:8b:80:d7:aa:07:6b:6f:a4:51:52:b3:32:fb:70: 78:b2:d5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKua7kRWiP/A9VgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDM1YmYwZTAtZmEwZS00MGIxLTlkODMtYmI3ZDFmM2ZjN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoVpsf2fxTJQL02B19NZsIz/QAAjRfNgGXeX SCngXAaKR4xHnl8dUm4RJuWP999Dfnj/4doVMY58K44xxfRk5+r2bDlJWV6Wlii3 /uZB6XU1kRNRDSl9rjaBVLEfA0CtYuxoUPFGVUYJu+CF38/rkFvwGYQaOuQsBdZw XzXjYZNb682xmZ95HFnXLqtQuVLvrIS9G4suYl9uMeFtFqXXAlUmyfGSbaVg+64k FoFsREteaFHQx41rhuKvd256RxW0l5rCp0ijIULcsquxJedeNvaI6C1CcIrLSZQm bztfArdD7y/cdzi+XK32L+GxXP7CpFIpgl956W7Y5MpWU5QODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpTcDq083mVqMhe/o7TLNOX94o8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzFhMzI3YmMtNGJlMi0z YWUyLWE2NjktMTAwOWUwYzY0ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXCT62AwNgmwggHQQfMZalJfEbvjAhuJdb09qV3GdbVf+BuJQU+hMuK Nc7Y1vlfVK5rk6Hx7aV+h/xJ4TK0+5V5KGf18MQUekSEcgcetY+HZkCbD+4UxLxH CiT/sUikZwKC0X73ZWZFF36TsQkUZDjDb1n6w5dv4H9wx0abA/DCSL/o+JpoJ4ud CpF7XDBY458bHocj6/4yNF0F0pDHiBTtLq+B0xyAg+YdIfMTuJUobv0CWqHiyTlN D1UgZk94wdFpNrT7sqVjWHrgCHmssl3JVzugkXg3tVoCkjjuxOM+CDU2SoBirF38 nTt8/K2LgNeqB2tvpFFSszL7cHiy1Ss= -----END CERTIFICATE-----Generated at Fri Oct 30 13:51:36 2026 by rpki-client