$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa File: 3579afbb-c9be-3aac-96b3-6f9060525a56.roa (raw, json) Hash identifier: w49dTVKQgiwD4sGNxJFAagJYShPOFayUp0QyAkSJ04M= Subject key identifier: 8C:5B:84:F2:14:1B:17:5E:A1:21:15:4B:E2:17:52:06:E5:F8:79:18 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C6E4BDECDC98088B9ED80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:6e:4b:de:cd:c9:80:88:b9:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d830e3d-36f2-4452-911d-7529dd9c80a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a3:61:db:84:3e:ab:c3:8c:e1:8c:e0:b6:12: ab:dc:2e:28:8b:21:7c:f3:18:4f:e2:82:9e:83:c7: 75:5c:12:c9:1b:37:24:0c:a3:dd:7d:ee:65:7b:5f: 86:46:c7:2b:3f:15:94:51:d1:ba:32:80:73:a0:08: fd:43:04:a6:f3:68:79:9a:54:21:3b:f9:99:e4:5d: 9e:d5:be:0f:94:e1:bd:14:d2:f4:bd:ed:3b:ac:ac: b3:65:ef:38:8f:61:0a:82:bb:d7:5c:fb:2f:24:25: f8:d2:60:8c:61:1e:2d:52:18:bb:2a:74:fa:87:c1: 63:de:73:57:50:3d:a6:a0:6e:cc:a5:ef:1f:27:bf: ca:ce:ec:b7:4d:ac:52:bd:a7:f0:b8:11:dc:b0:50: de:f6:eb:ae:b8:00:aa:1c:93:f7:25:e7:cc:5b:d9: da:5e:4f:5c:07:3a:b0:81:b9:e0:04:c2:64:a7:b3: 42:75:a4:3e:88:0a:22:fe:73:e1:ed:20:78:50:e7: 88:a5:31:be:76:bf:b6:71:df:65:70:f1:e7:e2:67: 1e:14:d6:30:28:1b:f5:c6:ee:fc:a3:8b:24:03:cd: 14:e9:7f:aa:77:42:15:68:61:a5:e9:fc:35:7d:e9: 52:79:12:4b:b9:72:9b:01:e8:fb:41:8c:27:22:70: 70:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5B:84:F2:14:1B:17:5E:A1:21:15:4B:E2:17:52:06:E5:F8:79:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3579afbb-c9be-3aac-96b3-6f9060525a56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:76:45:76:e2:d1:26:e9:b6:eb:a4:6d:c4:03:26:f4:be:e2: 16:a6:46:96:a5:04:32:fb:d7:bd:0f:03:a4:4e:5c:a4:92:c9: b1:36:04:24:c1:ca:17:c2:ce:45:64:49:43:8f:18:b8:0e:a4: c6:b2:59:47:4f:82:9d:e2:a4:75:d2:ed:e3:95:6d:12:90:62: 44:11:3a:97:1a:68:7b:20:67:8b:25:fc:9f:5a:90:fb:87:84: 9f:ae:23:bd:28:3b:68:23:f2:44:0e:22:e2:eb:60:b0:ba:7a: 87:c1:e9:dd:fd:93:87:19:a6:07:4c:e4:ee:9a:4e:6f:b7:1e: 9a:be:5c:3b:2a:18:5b:11:39:0b:b7:c9:25:f5:3e:f0:8c:aa: 12:e4:d6:8f:1e:e5:1d:9f:ec:49:22:48:8a:33:5d:d8:35:0a: aa:fe:64:a4:35:f8:a0:75:cd:7a:39:07:97:e7:db:39:fc:c3: fc:77:87:17:1a:3d:c3:65:b0:03:86:a5:15:8d:29:c5:77:f3: 09:a2:22:28:22:f4:98:50:17:0d:5a:87:75:49:e3:4d:ef:ee: 8c:3d:a8:a3:ba:a4:59:94:0d:94:70:24:91:a8:83:7a:f2:e6: 0f:6e:50:d0:77:df:69:d7:6e:bc:ec:d7:2e:1b:e6:cc:87:64: cc:ab:f8:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfG5L3s3JgIi57YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Q4MzBlM2QtMzZmMi00NDUyLTkxMWQtNzUyOWRkOWM4MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaNh24Q+q8OM4YzgthKr3C4oiyF88xhP4oKe g8d1XBLJGzckDKPdfe5le1+GRscrPxWUUdG6MoBzoAj9QwSm82h5mlQhO/mZ5F2e 1b4PlOG9FNL0ve07rKyzZe84j2EKgrvXXPsvJCX40mCMYR4tUhi7KnT6h8Fj3nNX UD2moG7Mpe8fJ7/Kzuy3TaxSvafwuBHcsFDe9uuuuACqHJP3JefMW9naXk9cBzqw gbngBMJkp7NCdaQ+iAoi/nPh7SB4UOeIpTG+dr+2cd9lcPHn4mceFNYwKBv1xu78 o4skA80U6X+qd0IVaGGl6fw1felSeRJLuXKbAej7QYwnInBwUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxbhPIUGxdeoSEVS+IXUgbl+HkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU3OWFmYmItYzliZS0z YWFjLTk2YjMtNmY5MDYwNTI1YTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh2RXbi0SbptuukbcQDJvS+4hamRpalBDL7170PA6ROXKSSybE2BCTB yhfCzkVkSUOPGLgOpMayWUdPgp3ipHXS7eOVbRKQYkQROpcaaHsgZ4sl/J9akPuH hJ+uI70oO2gj8kQOIuLrYLC6eofB6d39k4cZpgdM5O6aTm+3Hpq+XDsqGFsROQu3 ySX1PvCMqhLk1o8e5R2f7EkiSIozXdg1Cqr+ZKQ1+KB1zXo5B5fn2zn8w/x3hxca PcNlsAOGpRWNKcV38wmiIigi9JhQFw1ah3VJ403v7ow9qKO6pFmUDZRwJJGog3ry 5g9uUNB332nXbrzs1y4b5syHZMyr+CE= -----END CERTIFICATE-----Generated at Fri Sep 25 15:39:43 2026 by rpki-client