$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e2c4593-10bd-36d1-8c53-be0bf3241d16.roa File: 9e2c4593-10bd-36d1-8c53-be0bf3241d16.roa (raw, json) Hash identifier: 37MsCzL22CJ+G8Lphu4VbX0a1DhCl52HyA5IO/j/XKQ= Subject key identifier: 95:9D:CD:61:FD:69:55:30:74:A1:6E:F2:F9:25:6D:5C:F3:31:79:78 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984A48625E47DF38B54B860 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e2c4593-10bd-36d1-8c53-be0bf3241d16.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:a4:86:25:e4:7d:f3:8b:54:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=89ae145b-8894-4ea1-85d6-a5308ad760d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:df:54:39:c3:f8:ac:bc:94:f7:d7:2f:48: 87:ed:e5:b7:6b:a8:8e:6e:b1:76:86:8f:c6:3d:c8: 3e:bf:8a:9c:db:b6:56:c2:60:82:fa:45:9d:7b:ee: bb:b8:5c:1a:77:bd:69:38:19:cf:08:43:c3:16:2f: 46:59:43:a3:c9:d6:86:66:74:14:d8:fd:4e:80:01: 14:87:d8:d5:34:2d:88:df:54:86:84:a5:2a:fd:ff: 8a:af:b3:a4:fa:cc:ac:cc:72:3c:90:99:44:f3:60: 44:af:86:cf:a0:9f:60:fd:70:db:13:3f:c4:3c:a9: b9:c3:dc:44:4c:03:97:5f:c7:6b:a8:8f:c2:a6:0c: a1:a7:46:bf:e6:25:b9:cc:82:6f:66:3f:74:52:c2: a7:4e:af:80:73:d9:89:fe:0d:3d:c6:3a:7e:cd:f1: e0:5d:41:34:e8:3c:6b:92:d2:47:e9:10:12:a3:db: e5:bc:29:8c:d6:4d:b2:ae:82:cc:92:c4:9f:40:37: 34:ee:3b:21:e3:d4:3c:64:c9:d6:fc:30:c7:20:ab: 77:18:11:e0:d9:14:94:ab:d6:d6:8a:8b:22:16:22: 97:71:70:85:b7:af:9b:48:1f:5d:fc:b2:60:3c:b4: c8:c6:ba:ee:f6:82:08:61:23:7a:5b:0c:be:60:52: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:CD:61:FD:69:55:30:74:A1:6E:F2:F9:25:6D:5C:F3:31:79:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e2c4593-10bd-36d1-8c53-be0bf3241d16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5c:f9:27:43:b8:76:1c:ab:b0:c5:56:0c:b8:d4:f8:80:76: 88:c7:ca:0b:40:43:be:47:3c:e0:f9:69:5f:34:8c:68:62:f4: 5b:5e:e0:37:39:00:88:b6:ad:d0:17:4b:26:d7:2d:3f:9d:a6: a4:24:1f:a4:2a:9f:e8:e4:a9:c4:b5:c5:d4:f2:da:c5:d1:ec: 1e:f8:34:9f:ea:70:6f:90:5b:c9:df:bc:14:2b:bb:78:1f:6f: 98:04:18:3d:21:ad:b9:84:cc:d8:a7:9b:b6:e1:f7:3a:2f:c5: 7e:e5:d3:d7:3d:33:01:52:35:f1:49:66:51:b8:dd:ce:71:41: 09:ec:9d:7e:11:da:02:23:04:05:f4:93:ea:6c:08:d1:52:fa: 05:58:51:e7:fb:7f:00:76:6e:ae:26:f3:d5:51:63:55:71:01: 31:16:46:19:b3:0a:ac:11:b0:8e:e9:fc:d3:74:34:f0:02:f8: c8:3d:e7:2f:86:3f:ff:bf:8a:59:62:e4:07:21:de:8a:47:68: 38:de:4b:34:b4:34:91:81:24:b9:88:a4:ed:cb:25:8c:c6:69: 64:e4:6a:b9:87:6f:d0:9e:08:e8:8b:55:f8:5f:0a:e1:3f:68: 68:50:9f:8d:34:d5:35:4d:db:4d:66:ff:79:47:a4:a5:44:2d: c5:70:e6:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKSGJeR984tUuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODlhZTE0NWItODg5NC00ZWExLTg1ZDYtYTUzMDhhZDc2MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAjfVDnD+Ky8lPfXL0iH7eW3a6iObrF2ho/G Pcg+v4qc27ZWwmCC+kWde+67uFwad71pOBnPCEPDFi9GWUOjydaGZnQU2P1OgAEU h9jVNC2I31SGhKUq/f+Kr7Ok+syszHI8kJlE82BEr4bPoJ9g/XDbEz/EPKm5w9xE TAOXX8drqI/Cpgyhp0a/5iW5zIJvZj90UsKnTq+Ac9mJ/g09xjp+zfHgXUE06Dxr ktJH6RASo9vlvCmM1k2yroLMksSfQDc07jsh49Q8ZMnW/DDHIKt3GBHg2RSUq9bW iosiFiKXcXCFt6+bSB9d/LJgPLTIxrru9oIIYSN6Wwy+YFK+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWdzWH9aVUwdKFu8vklbVzzMXl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWUyYzQ1OTMtMTBiZC0z NmQxLThjNTMtYmUwYmYzMjQxZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtc+SdDuHYcq7DFVgy41PiAdojHygtAQ75HPOD5aV80jGhi9Fte4Dc5 AIi2rdAXSybXLT+dpqQkH6Qqn+jkqcS1xdTy2sXR7B74NJ/qcG+QW8nfvBQru3gf b5gEGD0hrbmEzNinm7bh9zovxX7l09c9MwFSNfFJZlG43c5xQQnsnX4R2gIjBAX0 k+psCNFS+gVYUef7fwB2bq4m89VRY1VxATEWRhmzCqwRsI7p/NN0NPAC+Mg95y+G P/+/illi5Ach3opHaDjeSzS0NJGBJLmIpO3LJYzGaWTkarmHb9CeCOiLVfhfCuE/ aGhQn4001TVN201m/3lHpKVELcVw5m8= -----END CERTIFICATE-----Generated at Sun Sep 27 12:26:56 2026 by rpki-client