$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa File: d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa (raw, json) Hash identifier: WsJGdTSp/vh+bf4j2SSsApwDpk/+hEtciuPB/e7W6S4= Subject key identifier: E9:5B:18:74:C4:F0:48:F4:62:C3:80:D3:33:F3:99:80:6F:4A:3D:7B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7968B9B14C4931AD5A4C000 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:8b:9b:14:c4:93:1a:d5:a4:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f75a717d-e907-4c3f-a710-267dd2b066ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:81:fb:c3:de:81:a9:79:07:41:72:77:ad:50: 45:ac:e1:c6:46:fc:79:66:61:96:39:a3:14:e1:15: dc:22:fe:89:de:c9:2c:fc:7c:c4:bd:b7:db:6e:47: 8b:45:b1:91:31:6a:94:55:9b:40:d4:7a:58:2a:3a: 8e:75:55:8f:ba:ce:f2:ab:84:2b:2c:1a:42:56:d7: 30:0b:2b:50:5c:b8:7d:ea:c1:08:c3:df:39:d2:0b: c9:7b:5b:78:af:9f:17:e4:67:56:23:cf:af:0a:a7: 53:69:25:39:04:4d:e3:c2:46:2c:72:20:48:76:76: 8b:66:32:75:6e:fe:44:53:11:29:01:01:af:6f:12: cf:94:a3:59:a2:21:fa:45:68:49:34:c0:72:e2:40: c3:ae:2a:7f:07:5a:69:f1:41:f8:98:c6:2a:5e:e4: 02:a8:65:b0:25:1c:82:ee:c3:c0:91:c0:df:57:a1: 1e:08:5a:5e:b3:9f:22:0d:b8:20:b6:e3:32:9b:36: 5a:0a:8c:72:82:2f:a5:82:96:2c:71:33:2d:74:c6: 2a:34:9d:2f:18:3b:cb:4e:cf:5c:7a:45:02:3b:8c: f5:84:67:29:24:f7:55:6b:80:ff:48:68:13:5b:d9: 3d:69:97:1b:65:d9:a9:67:04:87:3c:21:46:c5:61: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5B:18:74:C4:F0:48:F4:62:C3:80:D3:33:F3:99:80:6F:4A:3D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d48ed872-d6a4-3f3f-bcc3-4de4d2e714c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0c:88:83:7c:51:ed:b1:b3:b4:30:20:99:67:04:72:c4:2b: 5b:35:c4:5f:20:35:eb:7b:b4:99:b7:3c:ac:c0:1e:66:7a:c8: fe:e7:73:a1:50:5f:d7:fc:88:4c:98:84:8c:a7:fc:bb:2b:db: ed:d4:70:11:74:c9:67:49:6c:8c:9b:96:89:4a:b7:ea:74:2e: 1a:17:76:13:16:d3:bb:61:cc:0e:6e:ab:3c:6e:9c:55:36:ca: 38:66:53:11:3f:96:c9:db:e8:16:48:72:99:3a:82:cf:f9:52: 3d:b3:41:81:5b:03:17:3d:f0:1a:81:98:82:e9:a5:07:30:77: 3d:99:05:2a:3a:5a:f2:e4:a4:ad:0d:c4:22:59:ac:91:c0:f5: d3:b2:ca:88:b3:09:c4:1a:6c:77:34:ae:51:18:81:76:97:04: 64:d5:40:ed:c4:57:3c:3a:95:de:70:e4:a8:78:1d:31:8b:27: bb:f7:46:d4:d1:39:0a:99:c0:33:d0:51:56:65:4a:09:63:1f: 78:5c:57:71:90:0a:5e:3d:43:1f:28:c5:0e:a0:5a:db:00:52: a3:a3:40:a6:b0:e2:74:d5:ea:38:48:42:80:66:4b:c8:e4:a4: 9a:c8:4e:05:54:1a:a2:fc:3b:fa:f8:59:a7:fb:c8:3d:55:a9: dd:a7:38:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nloubFMSTGtWkwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Zjc1YTcxN2QtZTkwNy00YzNmLWE3MTAtMjY3ZGQyYjA2NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4H7w96BqXkHQXJ3rVBFrOHGRvx5ZmGWOaMU 4RXcIv6J3sks/HzEvbfbbkeLRbGRMWqUVZtA1HpYKjqOdVWPus7yq4QrLBpCVtcw CytQXLh96sEIw9850gvJe1t4r58X5GdWI8+vCqdTaSU5BE3jwkYsciBIdnaLZjJ1 bv5EUxEpAQGvbxLPlKNZoiH6RWhJNMBy4kDDrip/B1pp8UH4mMYqXuQCqGWwJRyC 7sPAkcDfV6EeCFpes58iDbggtuMymzZaCoxygi+lgpYscTMtdMYqNJ0vGDvLTs9c ekUCO4z1hGcpJPdVa4D/SGgTW9k9aZcbZdmpZwSHPCFGxWG14wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlbGHTE8Ej0YsOA0zPzmYBvSj17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDQ4ZWQ4NzItZDZhNC0z ZjNmLWJjYzMtNGRlNGQyZTcxNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8MiIN8Ue2xs7QwIJlnBHLEK1s1xF8gNet7tJm3PKzAHmZ6yP7nc6FQ X9f8iEyYhIyn/Lsr2+3UcBF0yWdJbIyblolKt+p0LhoXdhMW07thzA5uqzxunFU2 yjhmUxE/lsnb6BZIcpk6gs/5Uj2zQYFbAxc98BqBmILppQcwdz2ZBSo6WvLkpK0N xCJZrJHA9dOyyoizCcQabHc0rlEYgXaXBGTVQO3EVzw6ld5w5Kh4HTGLJ7v3RtTR OQqZwDPQUVZlSgljH3hcV3GQCl49Qx8oxQ6gWtsAUqOjQKaw4nTV6jhIQoBmS8jk pJrITgVUGqL8O/r4Waf7yD1Vqd2nOIg= -----END CERTIFICATE-----Generated at Thu Sep 10 21:59:10 2026 by rpki-client