$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa File: 2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa (raw, json) Hash identifier: mC0v/B3uThDmjLCWqcgBWZRuWWHtYt8FNCEGCb/MxPk= Subject key identifier: 35:24:F2:0D:DA:D6:0D:B4:B7:24:05:A8:62:EB:BB:AD:03:F3:32:BF Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984C871CDAAB215E8FC5FD0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:c8:71:cd:aa:b2:15:e8:fc:5f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a69c3c9d-96bb-42b8-a5e4-7cbcce593463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:e0:aa:c7:e8:68:18:e1:db:72:9a:23:bd: 8d:c3:e3:26:59:80:61:e3:0e:8e:43:ab:ee:99:59: 88:46:a3:bb:66:1b:f7:1b:a3:55:95:3b:e9:8b:35: 50:6d:9d:3c:39:92:53:a5:a4:4c:cd:0a:0f:64:37: 8c:19:81:6d:cf:6b:c0:4e:fa:9b:51:03:f7:71:78: 7f:5f:cf:aa:11:fa:2b:85:4a:89:6f:ae:98:92:85: a1:fe:b4:64:8d:83:7b:e3:6d:bd:0a:1e:52:c6:4f: 2c:67:a0:8c:0b:f5:da:f2:c0:54:09:23:ef:ec:74: 7c:5a:68:a4:f2:bd:43:5c:b6:b1:2f:96:78:fd:01: a7:49:32:cf:aa:f1:e3:f6:7e:1d:7a:f5:98:90:a4: d1:75:6e:92:83:c7:d3:9d:9d:ed:00:a0:22:69:7b: 68:37:89:1f:0d:29:29:c4:48:48:01:75:5f:45:e3: 09:a3:1c:4d:62:04:b5:57:a7:96:85:00:2f:e0:ee: 39:b5:bd:e7:98:a2:69:83:a0:b4:2a:97:ac:71:91: 6b:e5:a4:5e:38:7f:23:ea:b8:11:fc:0e:37:fb:60: d8:1f:ee:36:f2:e6:c8:ea:bb:c8:73:6e:79:a1:94: 48:e8:ae:17:ca:d4:23:ca:42:ff:59:48:e5:ce:8c: 76:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:24:F2:0D:DA:D6:0D:B4:B7:24:05:A8:62:EB:BB:AD:03:F3:32:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b21a8b1-16e9-3a84-95f0-8e6d47c1aa33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c8:88:e5:b8:b2:4c:b6:e5:d3:69:94:6c:ea:fb:24:2d:25: 51:cf:26:8e:f2:78:75:9e:c0:e8:17:96:f4:0c:3d:7b:b4:55: 6a:21:29:35:11:b8:b9:a8:37:ec:4d:4d:26:e0:3f:38:d9:80: 4b:d0:96:f4:6b:17:ea:14:89:3f:70:3d:9f:29:48:8f:89:ea: 4a:75:6c:6a:5f:37:4d:aa:ff:4f:f1:cc:e3:ea:3e:16:68:f3: d6:cf:61:f8:9b:b6:16:32:2c:fc:6f:7b:9d:73:5b:c9:e4:5e: 71:d4:c8:f2:8f:ff:72:89:9c:52:a3:2c:b7:26:d9:09:36:a5: a1:83:d0:fe:f1:c9:7f:fc:ea:62:66:11:21:60:a2:79:3b:c1: 08:a9:32:a0:7d:5b:b5:78:95:dc:61:66:30:7f:9a:3b:f7:9f: 73:65:cc:a5:9b:f3:9e:d9:37:21:69:91:46:c8:98:f1:22:af: 51:8d:49:1f:d8:e7:71:db:31:a1:a0:51:8f:90:85:aa:17:27: 16:15:6c:16:1a:fa:a7:13:e6:dd:70:dc:ad:ce:ce:a8:16:bd: 66:67:dd:3e:72:e7:4f:af:e8:51:df:eb:e0:a6:f1:61:0d:93: 7f:f4:f5:d7:39:1a:42:91:98:59:b4:a0:44:bf:eb:63:02:6d: 69:39:7c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMhxzaqyFej8X9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTY5YzNjOWQtOTZiYi00MmI4LWE1ZTQtN2NiY2NlNTkzNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/XgqsfoaBjh23KaI72Nw+MmWYBh4w6OQ6vu mVmIRqO7Zhv3G6NVlTvpizVQbZ08OZJTpaRMzQoPZDeMGYFtz2vATvqbUQP3cXh/ X8+qEforhUqJb66YkoWh/rRkjYN74229Ch5Sxk8sZ6CMC/Xa8sBUCSPv7HR8Wmik 8r1DXLaxL5Z4/QGnSTLPqvHj9n4devWYkKTRdW6Sg8fTnZ3tAKAiaXtoN4kfDSkp xEhIAXVfReMJoxxNYgS1V6eWhQAv4O45tb3nmKJpg6C0KpescZFr5aReOH8j6rgR /A43+2DYH+428ubI6rvIc255oZRI6K4XytQjykL/WUjlzox2VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUk8g3a1g20tyQFqGLru60D8zK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmIyMWE4YjEtMTZlOS0z YTg0LTk1ZjAtOGU2ZDQ3YzFhYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETIiOW4sky25dNplGzq+yQtJVHPJo7yeHWewOgXlvQMPXu0VWohKTUR uLmoN+xNTSbgPzjZgEvQlvRrF+oUiT9wPZ8pSI+J6kp1bGpfN02q/0/xzOPqPhZo 89bPYfibthYyLPxve51zW8nkXnHUyPKP/3KJnFKjLLcm2Qk2paGD0P7xyX/86mJm ESFgonk7wQipMqB9W7V4ldxhZjB/mjv3n3NlzKWb857ZNyFpkUbImPEir1GNSR/Y 53HbMaGgUY+QhaoXJxYVbBYa+qcT5t1w3K3OzqgWvWZn3T5y50+v6FHf6+Cm8WEN k3/09dc5GkKRmFm0oES/62MCbWk5fJk= -----END CERTIFICATE-----Generated at Fri Sep 25 16:14:39 2026 by rpki-client