$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa File: cf005a1e-cc33-32b3-8191-49c75f69f07b.roa (raw, json) Hash identifier: u5rJIPP2MKXnpZXTTMQnc91tItuID1WnUCBVzP4hJ8U= Subject key identifier: 79:50:08:A3:9A:17:54:4E:34:9A:2D:29:EF:6B:28:B7:62:CC:26:5E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA79686A3D4FE81CD68FC5B80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:86:a3:d4:fe:81:cd:68:fc:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3b7b22c3-cb97-4ea2-80e3-d80f4b6b52e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:da:9b:7b:ef:5b:66:c2:50:80:f5:18:50: ed:8e:03:39:d2:52:55:4f:df:d9:ca:6d:a3:c3:de: b5:2e:71:b7:77:46:fb:8c:fc:6a:4c:12:1f:63:da: 6e:c9:53:bb:0e:35:85:83:4b:bd:53:ff:8e:df:28: 8b:9b:31:f4:d6:c8:95:92:40:17:8c:0f:c1:ba:94: e2:b2:79:07:89:e5:e2:15:ba:08:42:70:50:f9:85: 78:63:c9:97:57:6a:84:fa:73:c7:93:db:98:eb:e6: 43:51:b0:13:22:a2:1a:83:09:f8:43:d0:57:4f:5e: df:75:e9:78:9f:3e:10:48:be:1a:6c:59:18:a2:90: e7:aa:02:1f:80:42:d5:5c:26:5d:be:2d:ef:87:18: 3b:e8:4d:6f:86:cc:ea:62:4c:51:a3:c2:a5:1c:d5: 31:ea:3d:28:c0:a6:61:02:1c:63:3f:13:9b:c1:4a: 05:07:c8:9c:52:1d:19:76:85:01:c8:b6:ba:0d:38: c4:58:6e:37:55:2b:df:a0:7e:d8:c1:14:7c:5d:33: c2:cf:17:8c:9e:cc:5a:ef:c9:1e:64:6b:9e:c4:81: 76:9f:f9:7f:b4:21:63:1c:f0:17:36:00:9e:d2:64: 44:2e:0c:fa:6f:82:a3:84:f1:77:08:17:dd:47:43: be:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:50:08:A3:9A:17:54:4E:34:9A:2D:29:EF:6B:28:B7:62:CC:26:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cf005a1e-cc33-32b3-8191-49c75f69f07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2d:b2:a5:96:de:84:8d:6b:45:27:1f:65:ff:eb:20:15:6d: 00:8c:9c:9b:2b:82:17:5c:c0:7a:24:a0:a1:3e:b8:4f:1a:e5: 95:0a:ac:2a:f5:da:f9:8d:63:91:56:11:bd:2e:b6:17:45:30: 67:41:58:47:64:85:0f:94:81:37:58:91:99:7d:b5:66:1d:6b: 6b:d0:65:c0:62:65:eb:2e:a8:e5:88:b8:db:b4:e1:00:e0:78: bd:ae:ae:a8:96:83:ab:16:d1:51:56:6c:7d:c2:a1:60:81:87: a4:85:c8:1b:39:b7:3c:3e:7e:16:6f:28:a1:f9:e6:4d:21:a2: 01:e8:24:21:c3:01:db:95:06:06:4c:a0:30:33:be:b5:16:ed: 63:95:ae:3c:67:79:bb:2d:a9:5c:3d:f7:f6:80:03:3d:ab:ac: da:a0:e8:7b:a4:60:34:09:9d:b2:a3:94:32:bc:67:f3:c9:f9: 20:7d:ec:8f:0c:85:a2:ea:2b:01:da:70:08:ec:e0:b5:9b:53: 2f:4e:19:f4:fd:b9:36:ba:d2:a8:03:8e:4b:5e:69:dd:dc:89: c6:c4:e0:91:a6:cf:6b:21:f8:d8:e5:3f:cd:4d:4b:c8:fb:d2: 6d:76:94:6b:1d:12:c5:b3:c0:f9:dc:31:c9:4e:d7:01:fa:62: 13:fc:1c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nloaj1P6BzWj8W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2I3YjIyYzMtY2I5Ny00ZWEyLTgwZTMtZDgwZjRiNmI1MmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMram3vvW2bCUID1GFDtjgM50lJVT9/Zym2j w961LnG3d0b7jPxqTBIfY9puyVO7DjWFg0u9U/+O3yiLmzH01siVkkAXjA/BupTi snkHieXiFboIQnBQ+YV4Y8mXV2qE+nPHk9uY6+ZDUbATIqIagwn4Q9BXT17fdel4 nz4QSL4abFkYopDnqgIfgELVXCZdvi3vhxg76E1vhszqYkxRo8KlHNUx6j0owKZh AhxjPxObwUoFB8icUh0ZdoUByLa6DTjEWG43VSvfoH7YwRR8XTPCzxeMnsxa78ke ZGuexIF2n/l/tCFjHPAXNgCe0mRELgz6b4KjhPF3CBfdR0O+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlQCKOaF1RONJotKe9rKLdizCZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2YwMDVhMWUtY2MzMy0z MmIzLTgxOTEtNDljNzVmNjlmMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0tsqWW3oSNa0UnH2X/6yAVbQCMnJsrghdcwHokoKE+uE8a5ZUKrCr1 2vmNY5FWEb0uthdFMGdBWEdkhQ+UgTdYkZl9tWYda2vQZcBiZesuqOWIuNu04QDg eL2urqiWg6sW0VFWbH3CoWCBh6SFyBs5tzw+fhZvKKH55k0hogHoJCHDAduVBgZM oDAzvrUW7WOVrjxnebstqVw99/aAAz2rrNqg6HukYDQJnbKjlDK8Z/PJ+SB97I8M haLqKwHacAjs4LWbUy9OGfT9uTa60qgDjktead3cicbE4JGmz2sh+NjlP81NS8j7 0m12lGsdEsWzwPncMclO1wH6YhP8HCg= -----END CERTIFICATE-----Generated at Thu Sep 10 19:25:17 2026 by rpki-client