$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28e909f8-532d-3ec0-b563-9a81d16d85fe.roa File: 28e909f8-532d-3ec0-b563-9a81d16d85fe.roa (raw, json) Hash identifier: 5i7ydBtdoqxcqb5jX7dWbDTzt5Hajsh52R6reUxVSeg= Subject key identifier: FC:72:4D:F4:1F:7D:80:21:02:D9:B5:BE:78:7C:97:B4:0D:32:94:F7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C5CC7995B108683D99880 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28e909f8-532d-3ec0-b563-9a81d16d85fe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:5c:c7:99:5b:10:86:83:d9:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a6088f9b-fd53-46cc-b6b3-6f98f51787bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:72:47:24:8e:ea:8e:9b:c5:c6:f9:c5:86: 64:18:05:8b:25:7a:93:a2:5a:ee:f1:a1:f6:33:2d: 92:33:1e:07:75:ef:e1:21:7e:c2:18:f5:95:c9:af: 21:18:05:5c:ec:bd:56:5c:d0:2e:88:9c:42:46:fb: d3:1c:5e:ab:2e:e1:68:25:62:21:07:2b:bc:1c:71: a0:d6:80:fc:3d:b7:b8:8d:aa:87:2c:31:8f:c7:fa: 24:66:7b:36:0e:e3:21:cf:2d:60:cf:c1:2e:12:30: d5:1d:46:19:6d:72:e0:4a:cb:c1:c4:70:cf:6c:71: 2b:c4:5f:c1:d0:73:28:44:a0:0d:ca:21:fe:1d:f7: b6:7b:9e:d2:fe:d6:f8:b2:97:91:a6:d7:6e:93:2c: 43:36:75:97:00:a6:c2:b6:5b:f0:11:de:34:d8:7d: b6:c5:be:86:7a:6d:bf:db:55:62:f7:49:5d:88:9c: 4e:47:b3:f1:10:9e:63:cc:66:3e:f7:cd:3f:ee:68: d3:96:20:94:6f:45:d5:b1:ae:24:ec:79:84:c1:24: b4:c8:4f:f0:a5:ea:d9:f6:a9:86:1c:81:b7:7d:84: 9b:c0:32:82:33:08:03:86:a1:ab:1a:aa:9b:d9:92: 23:87:5c:8e:cd:e3:f3:ec:36:d4:34:d8:23:92:6d: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:72:4D:F4:1F:7D:80:21:02:D9:B5:BE:78:7C:97:B4:0D:32:94:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28e909f8-532d-3ec0-b563-9a81d16d85fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2c:d2:d1:bb:71:e6:68:a7:77:76:a7:20:3b:e1:68:07:65: 18:27:04:c6:8d:78:08:f2:7d:86:d7:4e:f0:c5:5b:d2:86:c5: 6a:a7:51:2c:29:cc:03:90:09:7c:f3:69:4a:4a:27:e7:b1:4d: 22:41:9f:45:76:c4:72:89:8f:7a:e3:51:93:a8:e5:77:29:7a: 51:ef:96:1b:cd:74:90:ff:72:36:5b:c7:fc:3e:3f:2b:5a:9f: 82:06:ad:08:d6:bd:5e:94:db:e1:7c:1c:c9:68:be:07:77:a8: f5:81:e3:7a:1f:93:16:6d:f1:0c:a7:09:07:e3:d8:5a:47:64: 45:d8:0a:79:a5:a4:42:ec:45:e5:0e:f9:98:bf:bd:f9:59:2a: c2:16:ce:33:89:7d:20:40:51:7a:eb:40:50:d6:5f:59:09:ee: a1:26:be:f4:6d:26:c8:c9:43:b7:77:5a:fb:11:55:39:36:61: d7:e8:4b:50:cd:a8:b6:c2:f5:b1:0c:5d:11:ec:ca:7a:4b:a8: 73:a7:52:c2:c6:ce:de:4f:22:66:d2:a4:64:e3:34:b1:73:f9: 04:48:41:34:bb:3c:83:b5:dc:7d:00:b9:26:9e:1a:40:c0:2d: 09:cc:6b:a6:a0:eb:de:4d:13:2e:52:93:5b:62:d3:b4:2f:10: 72:b6:a2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfFzHmVsQhoPZmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTYwODhmOWItZmQ1My00NmNjLWI2YjMtNmY5OGY1MTc4N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5pyRySO6o6bxcb5xYZkGAWLJXqTolru8aH2 My2SMx4Hde/hIX7CGPWVya8hGAVc7L1WXNAuiJxCRvvTHF6rLuFoJWIhByu8HHGg 1oD8Pbe4jaqHLDGPx/okZns2DuMhzy1gz8EuEjDVHUYZbXLgSsvBxHDPbHErxF/B 0HMoRKANyiH+Hfe2e57S/tb4speRptdukyxDNnWXAKbCtlvwEd402H22xb6Gem2/ 21Vi90ldiJxOR7PxEJ5jzGY+980/7mjTliCUb0XVsa4k7HmEwSS0yE/wperZ9qmG HIG3fYSbwDKCMwgDhqGrGqqb2ZIjh1yOzePz7DbUNNgjkm3SIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxyTfQffYAhAtm1vnh8l7QNMpT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjhlOTA5ZjgtNTMyZC0z ZWMwLWI1NjMtOWE4MWQxNmQ4NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIR/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgs0tG7ceZop3d2pyA74WgHZRgnBMaNeAjyfYbXTvDFW9KGxWqnUSwp zAOQCXzzaUpKJ+exTSJBn0V2xHKJj3rjUZOo5XcpelHvlhvNdJD/cjZbx/w+Pyta n4IGrQjWvV6U2+F8HMlovgd3qPWB43ofkxZt8QynCQfj2FpHZEXYCnmlpELsReUO +Zi/vflZKsIWzjOJfSBAUXrrQFDWX1kJ7qEmvvRtJsjJQ7d3WvsRVTk2YdfoS1DN qLbC9bEMXRHsynpLqHOnUsLGzt5PImbSpGTjNLFz+QRIQTS7PIO13H0AuSaeGkDA LQnMa6ag695NEy5Sk1ti07QvEHK2otE= -----END CERTIFICATE-----Generated at Fri Sep 25 08:39:25 2026 by rpki-client