$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27163fdf-23cd-380f-8b48-bfad4e048d2b.roa File: 27163fdf-23cd-380f-8b48-bfad4e048d2b.roa (raw, json) Hash identifier: DTNslOfew9YZylLvc+baVmHUlQkrvMnMGVXtACO13Y8= Subject key identifier: 5A:E8:FA:26:A3:51:E1:15:E8:6D:B9:87:AD:82:3A:C5:54:E2:2D:15 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C5D5FEE621DE24517CE40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27163fdf-23cd-380f-8b48-bfad4e048d2b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:5d:5f:ee:62:1d:e2:45:17:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e31ab5a3-a807-463a-af6a-4c35c1c52cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3e:fe:1b:19:d5:4d:48:af:a8:1e:a7:16:14: 8c:01:eb:28:a8:20:d4:92:1d:4e:93:3a:5b:15:88: dc:1a:e6:02:89:20:4c:4a:5c:88:ba:4b:ae:70:80: f5:6a:72:63:bf:af:7b:4f:32:f2:11:f4:10:30:fe: 20:bf:7a:bd:a7:54:73:ed:d4:4d:a3:1b:84:12:be: f9:2e:ba:b0:5c:d1:d5:e8:c5:69:e2:17:00:2a:0a: 0f:9d:16:02:2b:71:db:b6:4c:66:b0:fc:ee:bd:e9: 26:04:6c:ea:45:81:ef:d4:3b:39:61:f3:1e:2a:5c: da:7c:d6:f7:83:2d:91:9d:67:05:93:36:eb:c4:4a: 90:21:f6:c8:84:eb:e2:c6:f2:74:96:56:be:e8:2b: 16:e5:04:07:25:e1:e4:f0:7b:d9:a7:fd:11:05:1b: 8e:f5:9d:8b:92:5e:96:b1:35:bf:42:0b:f9:69:2a: 46:6a:c8:ba:f3:f8:5b:d1:21:5b:4f:0e:bf:a0:9d: 7b:ca:73:a0:15:9c:e5:7a:1c:df:4c:c8:e1:2f:5c: e6:37:35:8d:d9:28:35:6e:de:f6:82:3e:69:9c:55: 52:19:dc:45:35:3d:8a:74:2d:64:f7:73:bb:2d:ec: 3a:2b:7f:4a:ac:8b:11:32:0c:c2:d4:d8:e1:21:a4: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:FA:26:A3:51:E1:15:E8:6D:B9:87:AD:82:3A:C5:54:E2:2D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/27163fdf-23cd-380f-8b48-bfad4e048d2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ca:12:63:62:08:53:79:34:f4:27:04:16:4a:4e:82:c7:c6: 2c:c8:b9:de:1f:85:b9:f7:98:86:ea:a7:e3:97:3c:80:05:78: 03:9e:72:c3:4b:1c:20:b5:9a:36:27:54:5a:77:6b:58:16:bc: ab:88:d1:46:f1:e0:56:ba:00:60:9c:20:e8:d8:9e:68:20:67: e1:23:f9:4e:0e:58:e6:09:21:1d:b5:bb:0d:1e:b4:a4:47:b4: 0b:0f:a9:8a:70:22:76:e0:1b:62:f8:6f:68:16:a0:e1:5a:50: 88:53:b1:10:eb:98:5f:61:00:06:90:ca:ab:cf:ee:f2:39:b4: 95:9f:a5:63:94:97:f9:0f:b8:56:ff:58:ba:1e:49:35:a2:d3: 8c:12:95:af:7b:8b:23:c2:e1:10:5f:89:eb:48:66:13:5d:41: a3:1d:c9:26:12:23:36:38:ed:e7:97:66:52:96:40:28:2f:52: 47:90:0a:91:55:db:14:31:1f:7c:63:91:d7:28:71:92:d6:30: 35:6f:76:8d:43:fd:a1:ef:60:90:1c:97:c7:ea:6f:ac:3f:d0: d0:2d:8b:91:67:fa:f6:12:43:87:15:52:43:69:84:6a:9d:02: 8b:5f:15:47:ff:25:3d:89:46:ed:5f:04:bf:2f:c4:50:cd:54: 0e:c0:10:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfF1f7mId4kUXzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTMxYWI1YTMtYTgwNy00NjNhLWFmNmEtNGMzNWMxYzUyY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j7+GxnVTUivqB6nFhSMAesoqCDUkh1Okzpb FYjcGuYCiSBMSlyIukuucID1anJjv697TzLyEfQQMP4gv3q9p1Rz7dRNoxuEEr75 LrqwXNHV6MVp4hcAKgoPnRYCK3HbtkxmsPzuvekmBGzqRYHv1Ds5YfMeKlzafNb3 gy2RnWcFkzbrxEqQIfbIhOvixvJ0lla+6CsW5QQHJeHk8HvZp/0RBRuO9Z2Lkl6W sTW/Qgv5aSpGasi68/hb0SFbTw6/oJ17ynOgFZzlehzfTMjhL1zmNzWN2Sg1bt72 gj5pnFVSGdxFNT2KdC1k93O7Lew6K39KrIsRMgzC1NjhIaQqAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFro+iajUeEV6G25h62COsVU4i0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjcxNjNmZGYtMjNjZC0z ODBmLThiNDgtYmZhZDRlMDQ4ZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDKEmNiCFN5NPQnBBZKToLHxizIud4fhbn3mIbqp+OXPIAFeAOecsNL HCC1mjYnVFp3a1gWvKuI0Ubx4Fa6AGCcIOjYnmggZ+Ej+U4OWOYJIR21uw0etKRH tAsPqYpwInbgG2L4b2gWoOFaUIhTsRDrmF9hAAaQyqvP7vI5tJWfpWOUl/kPuFb/ WLoeSTWi04wSla97iyPC4RBfietIZhNdQaMdySYSIzY47eeXZlKWQCgvUkeQCpFV 2xQxH3xjkdcocZLWMDVvdo1D/aHvYJAcl8fqb6w/0NAti5Fn+vYSQ4cVUkNphGqd AotfFUf/JT2JRu1fBL8vxFDNVA7AEMw= -----END CERTIFICATE-----Generated at Fri Sep 25 16:29:30 2026 by rpki-client