$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa File: cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa (raw, json) Hash identifier: hh99Pwcn0yleI7ULLUBNPYhsBjJVd2B0w28LW3yy8sg= Subject key identifier: 75:A7:B6:0E:A8:51:D9:53:DA:49:5C:4F:58:D6:21:F3:02:B2:17:34 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA79583A7C9FCFFF492E721C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:83:a7:c9:fc:ff:f4:92:e7:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b4e51e2d-8fc0-4815-adfd-d1e76ef0e23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fd:d9:81:c7:73:c3:7f:f4:92:fc:e2:d9:0b: 88:86:c2:dd:a7:56:f9:98:cb:0c:7d:97:7c:0e:f2: 79:92:63:e8:d8:be:af:18:47:4c:53:ba:82:dc:91: 26:19:39:4e:43:7a:47:4e:f7:32:58:d6:05:e7:d2: 27:ad:29:34:d9:b2:8b:49:26:f6:75:f1:a4:83:5d: cb:81:09:7d:ce:50:9f:da:89:ab:14:ed:14:80:99: cb:86:52:bc:f5:b8:95:8e:10:52:b6:76:e7:76:b9: 23:01:f8:14:9b:2c:22:93:5b:2f:83:75:37:0e:64: 0e:99:4a:e9:c2:d3:01:25:65:7b:0f:69:8f:3f:f4: 62:b2:8c:16:5d:18:fe:48:b2:17:53:0c:3d:00:ad: c8:65:b1:65:86:df:ce:c8:42:67:6a:58:96:e9:58: 6c:4f:60:b3:11:32:f8:e0:a4:e6:93:12:7d:5c:68: 65:55:8b:af:15:3f:3d:c4:0e:21:9c:6b:97:69:d3: 6f:22:f2:59:63:0f:77:ca:48:dd:73:db:72:f6:c3: b0:a7:81:8c:c6:90:25:fa:c3:5a:88:78:39:88:78: 85:b0:ee:21:c2:63:ed:a7:6a:09:e7:b5:54:5b:1a: e0:c7:65:ed:e6:d4:55:d6:7f:5a:98:39:87:19:dc: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A7:B6:0E:A8:51:D9:53:DA:49:5C:4F:58:D6:21:F3:02:B2:17:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cafd1bc1-e69a-36fd-9f89-c83fa37d6a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c7:77:86:96:ba:74:b8:ab:5d:74:91:9e:e7:2a:b0:f8:43: 57:6d:4a:c8:89:5c:11:75:b2:0f:bb:84:a1:9e:69:53:07:17: 66:07:9d:e1:49:7c:37:bb:29:81:55:ea:6f:55:4c:ec:22:76: b2:f4:db:24:74:6c:4f:6c:3b:6c:cb:6f:e6:72:4c:5c:e1:97: 82:b7:20:b7:a3:24:b8:c5:e4:ac:a6:1b:e7:67:c2:af:79:34: 99:8e:bd:40:42:3f:ee:52:bc:4c:1a:53:df:9c:07:a5:97:4e: 1e:35:31:c0:d4:73:64:f3:75:28:90:e4:c2:9b:fd:72:d0:2d: 6e:a1:11:f3:c9:05:d3:f5:78:fd:3d:e4:04:c5:d5:21:8a:40: 22:2c:af:cc:ad:1b:d7:7a:e7:3f:c6:23:0a:00:aa:1d:57:97: 41:12:ba:87:1a:e4:96:87:07:cc:15:93:b2:34:f0:7e:6f:ae: b6:cf:20:9a:59:ad:ff:f1:8a:26:52:73:9a:e8:b8:9f:78:3e: c8:5d:64:b2:5c:d5:b0:6e:53:4c:f4:8b:57:07:85:84:ee:d4: e9:07:d1:b4:a5:3e:61:dd:97:ff:50:c1:f7:a9:95:ce:60:61: 51:d2:04:dc:1b:9b:b6:0f:29:21:2c:2c:9a:dc:e0:99:f8:37: f8:87:b2:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlYOnyfz/9JLnIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjRlNTFlMmQtOGZjMC00ODE1LWFkZmQtZDFlNzZlZjBlMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof3Zgcdzw3/0kvzi2QuIhsLdp1b5mMsMfZd8 DvJ5kmPo2L6vGEdMU7qC3JEmGTlOQ3pHTvcyWNYF59InrSk02bKLSSb2dfGkg13L gQl9zlCf2omrFO0UgJnLhlK89biVjhBStnbndrkjAfgUmywik1svg3U3DmQOmUrp wtMBJWV7D2mPP/RisowWXRj+SLIXUww9AK3IZbFlht/OyEJnaliW6VhsT2CzETL4 4KTmkxJ9XGhlVYuvFT89xA4hnGuXadNvIvJZYw93ykjdc9ty9sOwp4GMxpAl+sNa iHg5iHiFsO4hwmPtp2oJ57VUWxrgx2Xt5tRV1n9amDmHGdwKsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWntg6oUdlT2klcT1jWIfMCshc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2FmZDFiYzEtZTY5YS0z NmZkLTlmODktYzgzZmEzN2Q2YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHHd4aWunS4q110kZ7nKrD4Q1dtSsiJXBF1sg+7hKGeaVMHF2YHneFJ fDe7KYFV6m9VTOwidrL02yR0bE9sO2zLb+ZyTFzhl4K3ILejJLjF5KymG+dnwq95 NJmOvUBCP+5SvEwaU9+cB6WXTh41McDUc2TzdSiQ5MKb/XLQLW6hEfPJBdP1eP09 5ATF1SGKQCIsr8ytG9d65z/GIwoAqh1Xl0ESuoca5JaHB8wVk7I08H5vrrbPIJpZ rf/xiiZSc5rouJ94PshdZLJc1bBuU0z0i1cHhYTu1OkH0bSlPmHdl/9Qwfeplc5g YVHSBNwbm7YPKSEsLJrc4Jn4N/iHsqY= -----END CERTIFICATE-----Generated at Thu Sep 10 19:24:56 2026 by rpki-client