$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa File: 1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa (raw, json) Hash identifier: ekRa2x8oxx0f0UlljLukaUUHfYpEPI0lsTmk9qOqALY= Subject key identifier: 77:6F:F4:A8:64:66:FF:FF:6F:9B:8B:7E:9A:B3:87:9B:9F:6E:7F:52 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C87B964F85A054983DBA0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:87:b9:64:f8:5a:05:49:83:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0adadd08-fd0b-4a93-8991-d8b483dcaf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:8e:5a:be:d4:f8:05:8a:7d:e1:77:1e:2f: d0:57:06:10:53:9d:3b:77:59:b7:b2:90:59:3e:c6: 3a:e6:ab:5b:29:08:9e:6e:39:09:20:92:44:37:be: d0:8c:35:ea:0c:43:5e:6e:82:48:ee:65:4e:93:e3: 29:dd:d9:af:19:8c:14:5e:25:ce:46:b9:a9:2e:19: 11:66:91:94:4c:82:e0:52:31:8f:a3:27:09:ea:09: ee:42:28:a8:5b:24:78:74:e9:04:01:fc:2a:31:d9: 78:fa:4f:43:4e:54:00:1f:ac:67:61:45:c4:16:73: dd:15:87:1d:02:0e:7d:1c:ed:eb:47:19:bc:09:6f: 0d:17:06:0b:32:5a:e1:4e:4a:b7:ff:d5:d2:23:ce: 47:74:ad:4a:89:60:07:64:81:30:e0:d0:93:09:8b: 95:fb:14:63:98:9c:e0:d7:4e:e1:3a:4f:5e:d1:be: 62:2f:07:9c:e7:f9:c7:bc:41:a3:ec:e2:ba:6e:d2: 79:de:e6:c3:6e:da:a6:98:c9:6e:31:21:65:40:2e: a3:16:00:26:fe:b3:9e:80:76:0f:3b:41:bf:52:b0: d1:76:18:8d:e8:9c:0e:d8:81:06:16:02:59:58:3f: e3:f7:41:64:d9:a6:88:64:a1:df:13:9d:20:c9:8f: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6F:F4:A8:64:66:FF:FF:6F:9B:8B:7E:9A:B3:87:9B:9F:6E:7F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:fb:b6:37:73:0c:40:7e:04:a2:e8:0b:1f:8a:25:d4:e8:90: 07:2e:9c:8b:bb:40:de:72:a7:4b:19:ae:09:2b:96:ed:9f:5b: 26:44:e7:10:64:e7:7e:18:07:87:64:bb:0f:10:59:bc:f8:ef: 77:89:76:09:6c:2f:1f:d9:bc:32:e6:ae:c8:02:c3:a5:be:37: ad:77:81:6c:b0:91:44:37:e6:de:92:a4:ae:d2:0b:a1:4e:89: 5b:b0:c8:e9:22:ca:1e:2c:72:14:26:b9:94:2d:7e:0e:f9:2d: dd:04:5a:3e:c3:0e:c8:43:be:c4:cb:04:66:e7:80:b7:e2:c6: d3:7d:33:47:52:d2:ae:51:dd:d4:51:d6:c8:91:50:fe:d5:11: 61:f7:22:48:45:b9:2f:80:c4:7c:d3:5f:05:63:98:92:f2:b6: 74:cb:67:ca:2d:43:cb:43:4b:6a:1b:9e:39:c0:eb:d0:9e:a0: aa:e3:bb:4f:57:67:0e:e1:87:3b:ac:c5:7e:b2:8c:75:ba:77: 85:c2:92:40:16:aa:db:ad:09:bf:bb:05:41:44:b2:f3:d6:91: 5c:13:80:f6:b1:20:14:d4:2e:bc:6b:b3:33:21:66:3a:6d:41: 73:c9:fd:12:78:86:ad:e5:2c:a0:b9:3a:56:1a:c8:66:c3:4c: 9f:ec:c5:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfIe5ZPhaBUmD26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFkYWRkMDgtZmQwYi00YTkzLTg5OTEtZDhiNDgzZGNhZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig+OWr7U+AWKfeF3Hi/QVwYQU507d1m3spBZ PsY65qtbKQiebjkJIJJEN77QjDXqDENeboJI7mVOk+Mp3dmvGYwUXiXORrmpLhkR ZpGUTILgUjGPoycJ6gnuQiioWyR4dOkEAfwqMdl4+k9DTlQAH6xnYUXEFnPdFYcd Ag59HO3rRxm8CW8NFwYLMlrhTkq3/9XSI85HdK1KiWAHZIEw4NCTCYuV+xRjmJzg 107hOk9e0b5iLwec5/nHvEGj7OK6btJ53ubDbtqmmMluMSFlQC6jFgAm/rOegHYP O0G/UrDRdhiN6JwO2IEGFgJZWD/j90Fk2aaIZKHfE50gyY/RFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdv9KhkZv//b5uLfpqzh5ufbn9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWRjYjJkZWItMDIzMS0z ZDUxLWE5OWUtMzI0MGQ2ZGRmMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/7tjdzDEB+BKLoCx+KJdTokAcunIu7QN5yp0sZrgkrlu2fWyZE5xBk 534YB4dkuw8QWbz473eJdglsLx/ZvDLmrsgCw6W+N613gWywkUQ35t6SpK7SC6FO iVuwyOkiyh4schQmuZQtfg75Ld0EWj7DDshDvsTLBGbngLfixtN9M0dS0q5R3dRR 1siRUP7VEWH3IkhFuS+AxHzTXwVjmJLytnTLZ8otQ8tDS2obnjnA69CeoKrju09X Zw7hhzusxX6yjHW6d4XCkkAWqtutCb+7BUFEsvPWkVwTgPaxIBTULrxrszMhZjpt QXPJ/RJ4hq3lLKC5OlYayGbDTJ/sxTc= -----END CERTIFICATE-----Generated at Sun Sep 27 08:22:10 2026 by rpki-client