$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db1ad954-9fb6-3d36-859e-49db91e69215.roa File: db1ad954-9fb6-3d36-859e-49db91e69215.roa (raw, json) Hash identifier: T+4q4WuPjc9PQrpUXhjEhihF9XmTaXgD3+oju+ZKbUg= Subject key identifier: D8:C1:B0:48:C1:E2:B1:20:BB:FD:77:B9:53:FD:97:D6:47:7F:AA:D3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C966DC1AFC550E44A0F40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db1ad954-9fb6-3d36-859e-49db91e69215.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:96:6d:c1:af:c5:50:e4:4a:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=20e2c88c-b71a-49f3-85e1-726c514dbe73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f2:58:1d:7a:80:e7:2c:aa:b3:d0:24:c6:ad: dd:08:fb:4b:8c:64:ba:9e:f2:16:84:66:20:39:a3: a5:94:78:76:42:96:52:69:b6:59:d8:56:57:e6:69: 52:cc:2a:70:c3:22:9f:56:51:04:bb:d5:6f:2a:00: 2c:be:1f:f6:cd:7d:a3:ca:49:b4:78:f6:99:57:c7: 01:93:0c:8d:38:54:97:59:4a:30:67:87:49:f8:8a: 26:ba:b2:5c:47:5c:cb:ae:02:60:af:22:68:18:d1: 49:9a:00:53:2c:a9:01:0a:44:38:4c:ef:3e:d2:db: 7b:bc:93:30:ed:22:26:c3:5d:4c:61:c1:40:9c:ad: f0:29:3a:5b:79:68:c1:31:fb:41:06:4c:ba:e6:ff: 65:28:dc:fe:08:e2:80:cd:fb:b1:44:21:50:57:90: 3b:6d:db:d3:9b:2c:1a:23:4a:e8:a4:46:0b:65:c0: 0f:82:91:f2:b4:ff:e2:47:c3:b8:99:2d:34:f5:0c: ee:0e:2b:53:1a:9b:43:a0:0a:55:8b:97:a7:cd:40: 60:b9:a4:85:78:6f:c0:05:a8:f7:05:28:07:2d:eb: 80:1f:b9:5b:40:63:59:0f:95:3b:b9:1b:87:88:95: 85:6b:a4:eb:4a:e8:f5:0e:b4:72:37:2f:f4:cf:96: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C1:B0:48:C1:E2:B1:20:BB:FD:77:B9:53:FD:97:D6:47:7F:AA:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db1ad954-9fb6-3d36-859e-49db91e69215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:1d:d6:52:00:d5:ea:89:8b:2a:72:4b:65:19:b5:87:84:53: 85:70:82:a9:a3:46:8b:d6:a6:ae:3b:b7:2b:b2:4a:1f:8f:60: eb:29:47:22:c4:1c:02:ec:e0:f1:1d:f1:72:99:5a:fd:92:c9: 02:a7:60:25:da:68:2b:4c:f8:14:22:b0:73:ac:55:e7:5c:de: 0e:8a:75:8e:cf:18:73:c7:0e:fe:78:88:1e:ab:6e:1b:d3:26: 07:b6:23:7e:f2:c6:4e:eb:5b:58:08:12:8f:a4:e9:1b:03:80: ea:32:60:61:2e:00:68:15:49:e0:76:8c:26:42:59:86:9a:6e: 79:c0:ee:a2:65:d9:64:fa:ef:40:25:78:b8:e4:cb:9d:33:22: 8f:2a:53:0c:65:4f:70:c3:14:08:52:8c:2a:ff:64:af:04:1f: a3:15:dc:43:9e:3c:23:5e:85:fc:8d:bb:82:00:c1:63:df:ef: e2:1f:a2:c6:28:ac:30:d2:2b:d0:9b:8f:f2:e8:12:8b:6e:19: 85:42:8f:52:8c:f0:61:18:b0:e4:9c:e9:4a:b2:e2:bd:18:e6: 0f:9e:00:89:1f:43:9f:9e:f6:8f:3a:7b:f1:4d:85:ef:01:d4: 51:65:8a:9d:3f:0a:38:85:ba:97:31:0a:6a:dd:6c:f4:45:25: ad:96:20:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfJZtwa/FUORKD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjBlMmM4OGMtYjcxYS00OWYzLTg1ZTEtNzI2YzUxNGRiZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/JYHXqA5yyqs9Akxq3dCPtLjGS6nvIWhGYg OaOllHh2QpZSabZZ2FZX5mlSzCpwwyKfVlEEu9VvKgAsvh/2zX2jykm0ePaZV8cB kwyNOFSXWUowZ4dJ+IomurJcR1zLrgJgryJoGNFJmgBTLKkBCkQ4TO8+0tt7vJMw 7SImw11MYcFAnK3wKTpbeWjBMftBBky65v9lKNz+COKAzfuxRCFQV5A7bdvTmywa I0ropEYLZcAPgpHytP/iR8O4mS009QzuDitTGptDoApVi5enzUBguaSFeG/ABaj3 BSgHLeuAH7lbQGNZD5U7uRuHiJWFa6TrSuj1DrRyNy/0z5ZuPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjBsEjB4rEgu/13uVP9l9ZHf6rTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGIxYWQ5NTQtOWZiNi0z ZDM2LTg1OWUtNDlkYjkxZTY5MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgd1lIA1eqJiypyS2UZtYeEU4VwgqmjRovWpq47tyuySh+PYOspRyLE HALs4PEd8XKZWv2SyQKnYCXaaCtM+BQisHOsVedc3g6KdY7PGHPHDv54iB6rbhvT Jge2I37yxk7rW1gIEo+k6RsDgOoyYGEuAGgVSeB2jCZCWYaabnnA7qJl2WT670Al eLjky50zIo8qUwxlT3DDFAhSjCr/ZK8EH6MV3EOePCNehfyNu4IAwWPf7+IfosYo rDDSK9Cbj/LoEotuGYVCj1KM8GEYsOSc6Uqy4r0Y5g+eAIkfQ5+e9o86e/FNhe8B 1FFlip0/CjiFupcxCmrdbPRFJa2WICQ= -----END CERTIFICATE-----Generated at Sat Sep 26 21:35:44 2026 by rpki-client