$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20b67ed7-f893-3d7b-8696-1561df6e22f1.roa File: 20b67ed7-f893-3d7b-8696-1561df6e22f1.roa (raw, json) Hash identifier: djO9j4zU8Aka7PVnLNO+JWOcKuVxyY3Se0vZLhJCj+Q= Subject key identifier: 8C:82:C4:0D:C6:37:43:53:3E:1D:99:63:70:2B:7E:54:0F:5B:02:43 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F3CE2A713F810C5F581BA21C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20b67ed7-f893-3d7b-8696-1561df6e22f1.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 395973 IP address blocks: 104.134.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a7:13:f8:10:c5:f5:81:ba:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=efe993aa-1e61-4ed2-9f89-8822725386ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d8:e2:3f:b7:86:48:6d:d5:38:30:aa:2c:b4: c8:c1:20:c6:66:c7:d9:59:cb:1a:d3:fb:b4:f5:b1: a7:31:9a:39:98:03:59:4b:18:53:fd:7d:b6:c2:fd: 8b:44:d9:ba:e1:c3:f5:f0:e0:06:18:42:44:95:9e: 48:c9:7a:c8:c2:71:df:ea:c4:93:3a:77:38:be:0b: 4b:09:22:0e:ff:e4:e7:f8:9f:c6:ed:a6:da:46:52: 4a:cd:46:18:7e:67:f1:cd:76:2d:96:91:ac:fd:2c: ae:ac:0f:48:86:9a:c6:83:55:ce:09:f0:93:68:09: 63:c7:27:2e:31:ba:10:ed:12:22:b5:e7:77:73:7c: 14:e8:82:66:73:c6:97:18:92:83:1f:f5:21:ce:30: e8:ec:46:3d:91:e1:69:3f:9e:a2:89:ea:ca:14:1d: 6f:21:be:e6:6f:54:7c:46:db:8d:4c:1c:61:0d:45: eb:95:d4:a1:35:eb:f9:c7:68:bf:81:a6:5a:3b:41: 2f:5f:ae:e6:9e:c5:6e:2f:fd:b8:2b:32:ce:d6:7e: d6:46:b7:6d:26:a7:ca:b6:e5:74:a7:e2:b4:19:f5: 36:1f:7e:ef:32:9b:bb:ed:a9:fe:64:bf:1a:9e:c0: 2b:8c:51:ce:1f:30:c4:62:1c:d7:6b:7b:c8:a0:c5: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:82:C4:0D:C6:37:43:53:3E:1D:99:63:70:2B:7E:54:0F:5B:02:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20b67ed7-f893-3d7b-8696-1561df6e22f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:ca:db:7b:da:06:34:46:2e:1f:bb:ba:b4:fa:aa:1b:df:69: 1a:e8:c2:f0:76:6b:a8:7e:35:17:08:f6:73:44:7c:08:47:25: 6e:bb:75:2f:25:ca:97:6b:35:41:d1:80:66:2b:08:a7:60:63: 5a:fe:dc:c4:0d:a4:d9:6a:20:b9:51:4e:b7:83:cd:31:a0:74: 7b:f3:bf:f3:3b:6f:8f:e1:bd:77:39:7a:56:1c:67:01:8a:f2: 9a:ed:12:90:fe:63:3a:a3:a0:2f:5e:96:6b:d2:4d:72:4d:26: 70:8c:8b:af:5e:05:89:12:be:cc:a9:89:d0:ee:bf:d3:e4:ea: cd:f6:ad:26:50:06:9b:a5:a4:d8:35:da:44:7e:49:dd:0a:e6: 7b:5a:89:b0:71:5e:77:c2:f4:13:eb:ca:b9:8f:76:d7:f7:c9: b0:0a:22:31:d2:cb:e6:f2:81:49:38:bd:14:ac:aa:0c:86:f0: 44:06:99:83:e1:a6:d9:2a:e8:3c:df:26:c6:8e:6f:23:df:bd: 18:e9:ef:52:32:ff:7a:e3:bb:91:4f:9f:ce:36:d6:33:77:d8: 09:34:a9:ee:b5:23:be:87:1c:ba:04:f0:cf:95:b8:6a:11:2d: 75:77:dd:ca:bf:65:58:cc:47:a1:55:d4:66:19:98:93:19:c3: fd:c8:95:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qcT+BDF9YG6IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZWZlOTkzYWEtMWU2MS00ZWQyLTlmODktODgyMjcyNTM4NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitjiP7eGSG3VODCqLLTIwSDGZsfZWcsa0/u0 9bGnMZo5mANZSxhT/X22wv2LRNm64cP18OAGGEJElZ5IyXrIwnHf6sSTOnc4vgtL CSIO/+Tn+J/G7abaRlJKzUYYfmfxzXYtlpGs/SyurA9IhprGg1XOCfCTaAljxycu MboQ7RIited3c3wU6IJmc8aXGJKDH/UhzjDo7EY9keFpP56iierKFB1vIb7mb1R8 RtuNTBxhDUXrldShNev5x2i/gaZaO0EvX67mnsVuL/24KzLO1n7WRrdtJqfKtuV0 p+K0GfU2H37vMpu77an+ZL8ansArjFHOHzDEYhzXa3vIoMU9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyCxA3GN0NTPh2ZY3ArflQPWwJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjBiNjdlZDctZjg5My0z ZDdiLTg2OTYtMTU2MWRmNmUyMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDK23vaBjRGLh+7urT6qhvfaRrowvB2a6h+NRcI9nNEfAhHJW67dS8l ypdrNUHRgGYrCKdgY1r+3MQNpNlqILlRTreDzTGgdHvzv/M7b4/hvXc5elYcZwGK 8prtEpD+YzqjoC9elmvSTXJNJnCMi69eBYkSvsypidDuv9Pk6s32rSZQBpulpNg1 2kR+Sd0K5ntaibBxXnfC9BPryrmPdtf3ybAKIjHSy+bygUk4vRSsqgyG8EQGmYPh ptkq6DzfJsaObyPfvRjp71Iy/3rju5FPn8421jN32Ak0qe61I76HHLoE8M+VuGoR LXV33cq/ZVjMR6FV1GYZmJMZw/3Ila0= -----END CERTIFICATE-----Generated at Sun Oct 4 00:26:55 2026 by rpki-client