$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa File: d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa (raw, json) Hash identifier: eSLEAAYGE/di5ZfTMvyx94FQ9WKzLrwqEQYGbhqstHk= Subject key identifier: AF:47:CE:D1:F3:81:0F:D7:BD:E7:30:27:4A:E4:30:63:D0:82:3F:19 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA796B003F8F12A44457F2D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:b0:03:f8:f1:2a:44:45:7f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a6dfc7b5-64a8-40e6-a907-3a0a79c40005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5e:58:80:b7:31:9f:3a:c1:3b:08:85:b4:dc: cc:61:b7:ca:85:d3:f3:31:5a:aa:e6:96:60:f4:75: 98:0a:9c:6a:4f:cc:93:fd:69:bc:69:58:65:f7:6b: ae:cf:ed:67:70:f0:e1:8f:e8:d8:dd:0e:a6:ef:6a: 9c:c8:2d:8d:e5:42:84:11:df:e1:f5:bf:7a:20:b3: 02:4a:24:fd:cc:d1:89:27:78:00:66:e4:b8:13:23: e5:7c:9c:47:46:77:20:8d:33:54:a0:f4:4a:c6:f4: e0:d3:1d:ef:e5:55:0c:d6:3b:6c:a4:a2:ed:7c:06: f1:76:61:f4:58:2c:85:d8:a1:64:19:67:54:1d:e8: 1b:bd:63:69:01:43:49:6d:b2:a4:8d:bc:6a:f4:d9: 51:a3:71:55:32:1b:ce:2c:a7:83:7c:98:45:8c:03: 57:f5:2d:da:4b:18:7b:a3:e6:35:e7:c6:c1:37:c1: 9d:3c:26:26:24:7b:1e:9c:11:11:b0:98:bc:5b:c3: a4:a7:96:b7:7c:19:e3:c8:3a:53:83:db:f5:3b:0d: 4f:03:5f:d5:eb:93:bc:59:71:71:e3:5e:2a:a3:7f: d2:84:0e:2e:b3:3f:bc:e1:58:a5:7a:59:1e:ea:e1: 96:c2:53:bf:e0:c2:30:b7:84:0d:b2:76:dc:ba:7a: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:47:CE:D1:F3:81:0F:D7:BD:E7:30:27:4A:E4:30:63:D0:82:3F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d0d63abc-4cd5-3123-8681-3eb3b9f66151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:6b:9b:5f:15:06:52:45:0c:dc:8d:63:21:3f:c5:87:bf:db: 97:58:6b:a6:fc:f2:99:bc:20:76:fc:23:0e:3f:dd:b4:55:de: 2e:e2:90:3f:6b:43:5b:11:bb:a2:cc:25:70:90:37:c7:f3:da: f4:61:bc:43:b0:9a:f0:19:6e:ab:cb:30:4f:95:a5:15:43:6a: 9b:6b:0e:32:5a:ba:fd:06:3d:46:16:01:c0:a6:67:3b:0a:0f: 45:75:b1:8e:e6:75:ed:21:93:f2:56:04:25:05:04:d2:f2:96: 16:34:d1:32:42:38:16:38:fa:2b:f6:14:33:32:af:29:3c:19: d2:df:e7:ee:46:1c:31:bd:40:93:f1:9b:9f:8e:c7:58:f5:c0: 92:7f:ba:ee:d2:31:7a:b0:e0:5b:32:b9:a3:df:66:23:8a:10: 67:a8:e7:75:77:95:b6:3c:a1:53:a5:5f:b0:03:78:66:fe:54: 00:66:42:fd:fd:a2:56:93:79:eb:3d:79:5a:d5:a3:18:e7:41: 54:db:cb:3b:86:6e:36:39:47:7d:1d:76:0b:69:1a:77:de:c3: c3:4f:fc:8d:33:2a:cd:1c:c4:3d:f8:ca:86:c8:99:e4:e5:4a: 43:b8:a2:bc:f9:de:6a:b9:05:e2:9d:e2:d0:47:f1:61:12:9a: 3c:5e:15:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlrAD+PEqREV/LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTZkZmM3YjUtNjRhOC00MGU2LWE5MDctM2EwYTc5YzQwMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F5YgLcxnzrBOwiFtNzMYbfKhdPzMVqq5pZg 9HWYCpxqT8yT/Wm8aVhl92uuz+1ncPDhj+jY3Q6m72qcyC2N5UKEEd/h9b96ILMC SiT9zNGJJ3gAZuS4EyPlfJxHRncgjTNUoPRKxvTg0x3v5VUM1jtspKLtfAbxdmH0 WCyF2KFkGWdUHegbvWNpAUNJbbKkjbxq9NlRo3FVMhvOLKeDfJhFjANX9S3aSxh7 o+Y158bBN8GdPCYmJHsenBERsJi8W8Okp5a3fBnjyDpTg9v1Ow1PA1/V65O8WXFx 414qo3/ShA4usz+84Vilelke6uGWwlO/4MIwt4QNsnbcunqQNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9HztHzgQ/XvecwJ0rkMGPQgj8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDBkNjNhYmMtNGNkNS0z MTIzLTg2ODEtM2ViM2I5ZjY2MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtrm18VBlJFDNyNYyE/xYe/25dYa6b88pm8IHb8Iw4/3bRV3i7ikD9r Q1sRu6LMJXCQN8fz2vRhvEOwmvAZbqvLME+VpRVDaptrDjJauv0GPUYWAcCmZzsK D0V1sY7mde0hk/JWBCUFBNLylhY00TJCOBY4+iv2FDMyryk8GdLf5+5GHDG9QJPx m5+Ox1j1wJJ/uu7SMXqw4FsyuaPfZiOKEGeo53V3lbY8oVOlX7ADeGb+VABmQv39 olaTees9eVrVoxjnQVTbyzuGbjY5R30ddgtpGnfew8NP/I0zKs0cxD34yobImeTl SkO4orz53mq5BeKd4tBH8WESmjxeFcg= -----END CERTIFICATE-----Generated at Wed Jul 29 04:44:27 2026 by rpki-client