$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa File: 227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa (raw, json) Hash identifier: vQ0hR1uhgb9PPxzTx6Bl1tf5RVfvWQxBMlvlahk45Vk= Subject key identifier: 30:28:68:4E:CF:E6:F0:95:E9:19:B2:28:10:89:4F:74:FD:77:A9:E3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49849FDE9E709A4B567DCE40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:9f:de:9e:70:9a:4b:56:7d:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ca5f2a9-9716-48bf-8a17-ef4e4d5826bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b4:64:65:81:54:e5:ba:a3:4b:f9:72:14:67: b7:d4:64:f3:57:c1:66:95:92:be:3d:dc:0b:2b:75: f9:1b:5f:da:a9:76:e4:b3:dd:95:c2:d0:a6:3b:fd: 38:22:ea:a7:bb:b4:2b:e1:be:ee:b6:f2:17:c4:3d: f6:6e:2c:db:40:f3:2d:6a:5a:5f:5b:79:76:9d:36: b5:d6:f4:50:1e:22:26:3d:5d:2d:be:d5:d6:be:34: b0:07:95:c0:1c:b0:62:1b:1c:a9:83:83:50:4b:71: a2:51:37:31:98:8f:78:6b:1e:c9:66:3c:72:09:e2: 1a:93:fe:b9:4b:e4:99:77:93:0d:97:34:d0:ef:6f: 49:a6:41:50:c9:77:5a:3d:0b:da:47:82:fa:b1:a9: ac:57:1b:60:4b:ea:d5:42:6c:fc:43:4a:3d:81:d0: 7b:2f:2a:dc:96:b7:cf:dc:c1:05:60:a1:8a:4e:e5: c8:9a:2c:32:4c:5d:1d:96:c7:51:0a:ba:3e:ee:33: b3:ed:11:cb:28:1d:d7:9f:e7:59:be:a4:c5:d1:a3: f7:8a:b9:b4:02:3a:ee:43:5d:86:12:b9:40:fc:7c: 4e:b3:ba:33:0f:74:e0:e3:11:1d:cf:6b:18:e4:e0: b7:85:ae:50:4c:6b:37:7d:aa:0a:a1:03:50:83:dc: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:28:68:4E:CF:E6:F0:95:E9:19:B2:28:10:89:4F:74:FD:77:A9:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/227af19e-4e10-3540-9e31-a29dd6cdfa7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:77:4b:33:52:33:56:69:22:ec:9f:80:ea:c7:ba:8e:53:8e: c5:f7:76:1d:82:b9:82:a0:74:98:f4:03:3f:34:e9:7a:65:3c: c8:5b:6e:e2:aa:a5:54:9e:39:13:a0:2d:69:53:36:53:9b:d3: e6:77:9a:61:f5:2f:b4:8f:ed:3e:6a:81:00:01:0e:e9:b9:39: 46:8c:b2:8c:3b:3b:21:70:45:23:3d:2e:9c:35:89:0b:19:5b: ff:54:82:8c:3a:8a:46:f8:23:21:b8:7b:e6:52:a4:61:aa:2b: 23:e3:2b:23:79:06:07:23:45:a8:6a:33:2f:60:27:41:b7:1a: 7c:61:04:c0:75:45:5c:79:8f:30:fb:28:cd:87:91:8b:42:fa: 35:f9:16:29:46:24:c2:b4:eb:7c:a0:e8:5f:85:85:f7:28:3a: 2b:dd:cd:08:e0:d5:f5:9b:66:19:27:f9:e9:43:4e:ae:4a:cd: 6d:9e:68:1c:9c:86:ac:c4:4f:4e:38:a5:d5:1f:ee:a4:b5:12: 2b:a1:f4:07:36:36:e5:06:51:35:fa:f2:63:e7:e7:ff:23:89: d0:9c:40:28:ff:b8:36:98:43:24:39:cf:6b:b2:30:d4:0d:df: 34:10:0b:bd:2c:24:25:b3:8c:93:0d:ca:30:87:1b:c6:06:e6: ce:c5:f8:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhJ/ennCaS1Z9zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2NhNWYyYTktOTcxNi00OGJmLThhMTctZWY0ZTRkNTgyNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrRkZYFU5bqjS/lyFGe31GTzV8FmlZK+PdwL K3X5G1/aqXbks92VwtCmO/04Iuqnu7Qr4b7utvIXxD32bizbQPMtalpfW3l2nTa1 1vRQHiImPV0tvtXWvjSwB5XAHLBiGxypg4NQS3GiUTcxmI94ax7JZjxyCeIak/65 S+SZd5MNlzTQ729JpkFQyXdaPQvaR4L6samsVxtgS+rVQmz8Q0o9gdB7LyrclrfP 3MEFYKGKTuXImiwyTF0dlsdRCro+7jOz7RHLKB3Xn+dZvqTF0aP3irm0AjruQ12G ErlA/HxOs7ozD3Tg4xEdz2sY5OC3ha5QTGs3faoKoQNQg9w1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAoaE7P5vCV6RmyKBCJT3T9d6njMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjI3YWYxOWUtNGUxMC0z NTQwLTllMzEtYTI5ZGQ2Y2RmYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJ3SzNSM1ZpIuyfgOrHuo5TjsX3dh2CuYKgdJj0Az806XplPMhbbuKq pVSeOROgLWlTNlOb0+Z3mmH1L7SP7T5qgQABDum5OUaMsow7OyFwRSM9Lpw1iQsZ W/9Ugow6ikb4IyG4e+ZSpGGqKyPjKyN5BgcjRahqMy9gJ0G3GnxhBMB1RVx5jzD7 KM2HkYtC+jX5FilGJMK063yg6F+FhfcoOivdzQjg1fWbZhkn+elDTq5KzW2eaByc hqzET044pdUf7qS1Eiuh9Ac2NuUGUTX68mPn5/8jidCcQCj/uDaYQyQ5z2uyMNQN 3zQQC70sJCWzjJMNyjCHG8YG5s7F+GQ= -----END CERTIFICATE-----Generated at Fri Sep 25 09:24:29 2026 by rpki-client