$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa File: 6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa (raw, json) Hash identifier: NVMj23aSuhYP0bQlDqd1kGpWOpcJze2V5tsxSOlwV7k= Subject key identifier: A7:2F:38:83:A1:DC:AC:7A:B6:59:A6:E8:4E:A8:57:E1:1D:B5:FC:06 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49848AEA026DD0FBAD9A5200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:8a:ea:02:6d:d0:fb:ad:9a:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=092ed5f6-7964-410d-8360-0c57e7a25ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:e4:fa:20:13:f1:48:2d:b3:83:b8:72:e4: 88:ee:e3:14:fc:72:35:bf:8c:d6:ea:8a:64:70:1d: 3f:22:ad:89:4b:0f:7f:f6:2c:59:ea:bb:72:2f:89: 4f:0d:8e:18:89:6e:3d:0b:77:dc:32:66:54:8e:4f: 43:b7:90:81:ea:9f:bc:9b:22:59:d7:d3:fd:e8:d2: 5c:56:f7:be:79:2a:26:b3:a7:1a:e0:bc:9e:51:6c: fb:8c:aa:45:87:5e:80:d5:d1:66:e8:6c:f7:ed:70: 36:f0:a5:54:c0:15:11:6a:30:dc:7a:ed:7e:68:fa: 39:f0:65:e2:ef:7e:b4:3e:67:b2:b8:72:72:aa:68: bf:ad:68:84:29:58:58:c8:44:98:b7:df:8e:a3:c9: 14:9b:cd:c1:a4:31:2b:a0:5e:d8:3e:29:6d:35:3c: 28:f2:54:17:80:bc:02:4c:27:3a:ab:ac:69:d1:db: 91:97:7c:d0:62:8d:60:75:44:38:40:38:78:46:73: 5c:22:f0:46:c2:d4:9c:2e:82:1f:ea:dd:dc:6a:c6: fb:ba:bb:9b:97:c1:53:04:0c:3b:74:a1:1f:9d:3d: 7e:c9:7e:1a:19:a3:b5:c3:e7:78:9c:be:83:5e:16: 1c:08:b9:e3:89:a7:c3:9a:a1:27:18:e3:79:8e:71: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2F:38:83:A1:DC:AC:7A:B6:59:A6:E8:4E:A8:57:E1:1D:B5:FC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6cbc72a5-bec5-34fc-b1ee-32ff16506185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:04:ef:45:4c:a5:2e:80:fe:22:15:c7:e5:68:e6:a1:61:20: 8c:cd:b2:a6:62:1b:13:0a:b7:cf:57:9e:d9:92:c7:2c:2e:b4: fb:ce:7a:91:d4:b2:2c:33:38:25:ec:ab:68:af:9e:06:3b:7c: e1:06:fa:bb:66:0f:2e:72:7c:c9:d2:8b:c6:f6:ed:ee:af:fc: 93:e7:49:92:fc:3a:12:8b:5a:a6:b6:fd:a5:df:77:a5:2d:d3: 20:22:06:32:25:22:c6:40:c7:fa:6d:fc:b8:9a:05:01:fd:d6: cc:e1:57:8b:20:c2:16:47:33:28:2b:dc:2e:e2:75:37:84:bf: 4d:8e:ee:1c:41:f6:07:98:68:8f:e0:30:f1:51:13:4c:c1:b9: 62:56:94:ca:06:1d:ef:17:09:c9:42:27:ef:73:db:bd:84:59: 27:7b:5a:f3:35:29:a3:89:b8:0b:e5:99:7f:df:cf:65:11:cd: 26:f7:eb:89:24:65:25:6b:8c:ba:8a:5d:d0:51:69:63:22:30: 75:df:6b:7d:ff:99:29:99:16:d4:b8:30:dc:33:d7:8f:06:01: 9f:0d:2e:32:3e:99:f3:82:8c:d8:ed:97:70:f0:d9:79:cd:cd: 7d:6d:61:8b:08:b8:59:96:ce:84:b5:bb:b8:24:61:fd:34:75: f2:2e:c6:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhIrqAm3Q+62aUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDkyZWQ1ZjYtNzk2NC00MTBkLTgzNjAtMGM1N2U3YTI1ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomfk+iAT8Ugts4O4cuSI7uMU/HI1v4zW6opk cB0/Iq2JSw9/9ixZ6rtyL4lPDY4YiW49C3fcMmZUjk9Dt5CB6p+8myJZ19P96NJc Vve+eSoms6ca4LyeUWz7jKpFh16A1dFm6Gz37XA28KVUwBURajDceu1+aPo58GXi 7360PmeyuHJyqmi/rWiEKVhYyESYt9+Oo8kUm83BpDEroF7YPiltNTwo8lQXgLwC TCc6q6xp0duRl3zQYo1gdUQ4QDh4RnNcIvBGwtScLoIf6t3casb7urubl8FTBAw7 dKEfnT1+yX4aGaO1w+d4nL6DXhYcCLnjiafDmqEnGON5jnHYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcvOIOh3Kx6tlmm6E6oV+EdtfwGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmNiYzcyYTUtYmVjNS0z NGZjLWIxZWUtMzJmZjE2NTA2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAE70VMpS6A/iIVx+Vo5qFhIIzNsqZiGxMKt89XntmSxywutPvOepHU siwzOCXsq2ivngY7fOEG+rtmDy5yfMnSi8b27e6v/JPnSZL8OhKLWqa2/aXfd6Ut 0yAiBjIlIsZAx/pt/LiaBQH91szhV4sgwhZHMygr3C7idTeEv02O7hxB9geYaI/g MPFRE0zBuWJWlMoGHe8XCclCJ+9z272EWSd7WvM1KaOJuAvlmX/fz2URzSb364kk ZSVrjLqKXdBRaWMiMHXfa33/mSmZFtS4MNwz148GAZ8NLjI+mfOCjNjtl3Dw2XnN zX1tYYsIuFmWzoS1u7gkYf00dfIuxmQ= -----END CERTIFICATE-----Generated at Fri Sep 25 21:39:40 2026 by rpki-client