$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3234eb58-e0c0-30db-81f0-56bc9a67ac88.roa File: 3234eb58-e0c0-30db-81f0-56bc9a67ac88.roa (raw, json) Hash identifier: X/OFkvw4MUiUoPZzC92unRdXpJFzIZXavEHYCJZs9Ik= Subject key identifier: 08:3F:A7:FE:DB:95:C8:64:C8:2C:CE:35:33:EB:7E:80:58:B9:34:9C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984CADC6087732247F55C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3234eb58-e0c0-30db-81f0-56bc9a67ac88.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ca:dc:60:87:73:22:47:f5:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=462438ec-f3fd-42e8-bb40-e1bb3b7df51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:87:3e:a0:07:fe:31:bf:2d:8c:2a:60:7b: e9:53:3a:5f:bf:18:45:3d:71:68:02:ab:67:cc:1c: 4c:f8:66:87:a4:2a:a2:af:cc:13:7a:db:c9:b3:09: d5:b6:1f:e2:0f:ba:e7:01:73:87:bb:dd:55:92:fd: cd:15:52:1b:f3:5d:bb:a7:1f:03:c3:56:09:20:93: 86:7c:a3:6a:5d:0d:fa:6c:48:43:ba:81:9d:d4:8f: 5b:ae:8a:ae:59:b7:c9:83:71:0d:f6:79:df:0d:7c: 03:e8:2f:c0:3b:70:10:5d:3b:f0:9f:69:3d:e9:3b: 42:37:f1:36:71:e7:37:32:92:a6:6b:de:1d:ba:2d: e8:aa:27:94:16:21:74:8f:6a:58:5d:2e:16:d6:91: f2:1a:11:9a:a4:18:95:51:5e:d7:2b:f1:f6:42:45: 38:99:8d:91:eb:86:7d:c2:63:55:02:b0:2f:9e:ec: e9:6e:c0:01:8d:8e:7b:07:25:5c:8c:20:7d:86:1a: e8:bc:2c:59:7e:7c:69:77:45:86:31:b1:ff:5a:7b: 5e:55:2b:c5:3a:ab:e5:fc:e9:c2:8c:eb:07:62:85: 89:8e:35:61:0e:f2:65:d5:c7:ce:77:03:ef:5d:5f: 28:e4:c0:0c:fc:81:5b:f6:ea:b5:6e:d5:86:53:c5: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3F:A7:FE:DB:95:C8:64:C8:2C:CE:35:33:EB:7E:80:58:B9:34:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3234eb58-e0c0-30db-81f0-56bc9a67ac88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5f:22:49:2c:35:99:9a:a8:0e:c0:5c:b6:a7:4f:bf:b4:e3: 02:3e:1a:6e:95:d9:1a:b7:e1:d2:ff:aa:9b:7e:54:a1:25:51: d8:23:bd:7a:0c:c8:65:01:52:08:4a:f3:4d:dd:a8:96:50:cb: c6:55:81:4f:a8:9c:b8:12:a3:b7:58:3a:d2:79:db:ec:44:4c: 3b:67:26:88:e7:db:c8:72:aa:bc:a7:b9:1e:69:23:36:6f:47: 64:5a:49:06:7b:d7:c9:5e:d6:3f:73:5d:58:73:a2:31:c6:a1: ea:63:c4:0a:9b:45:0f:ae:ef:a2:bb:43:b7:c0:26:fa:a2:77: 86:26:55:dd:33:93:82:38:a6:f6:b3:c9:20:e9:7c:19:85:03: e1:4e:23:e4:56:83:5a:ce:a3:bb:f9:49:52:b9:9f:c5:8d:d6: cc:3a:b5:0d:ac:a6:66:5f:25:82:62:8d:77:fb:7e:82:b2:7f: ec:21:fb:df:47:1d:c9:34:1b:7b:68:26:26:00:36:d4:55:b5: 53:20:b7:10:9f:0f:b1:27:73:ee:84:e2:b7:9a:4c:13:b5:70: e8:84:0e:0e:08:96:b8:16:31:03:aa:36:7f:7a:5b:cc:29:2e: db:79:2e:53:f5:8d:dd:71:5b:7e:93:c7:fa:1c:37:ac:93:2a: 53:22:9e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMrcYIdzIkf1XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDYyNDM4ZWMtZjNmZC00MmU4LWJiNDAtZTFiYjNiN2RmNTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTaHPqAH/jG/LYwqYHvpUzpfvxhFPXFoAqtn zBxM+GaHpCqir8wTetvJswnVth/iD7rnAXOHu91Vkv3NFVIb8127px8Dw1YJIJOG fKNqXQ36bEhDuoGd1I9broquWbfJg3EN9nnfDXwD6C/AO3AQXTvwn2k96TtCN/E2 cec3MpKma94dui3oqieUFiF0j2pYXS4W1pHyGhGapBiVUV7XK/H2QkU4mY2R64Z9 wmNVArAvnuzpbsABjY57ByVcjCB9hhrovCxZfnxpd0WGMbH/WnteVSvFOqvl/OnC jOsHYoWJjjVhDvJl1cfOdwPvXV8o5MAM/IFb9uq1btWGU8WlRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg/p/7blchkyCzONTPrfoBYuTScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzIzNGViNTgtZTBjMC0z MGRiLTgxZjAtNTZiYzlhNjdhYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZfIkksNZmaqA7AXLanT7+04wI+Gm6V2Rq34dL/qpt+VKElUdgjvXoM yGUBUghK803dqJZQy8ZVgU+onLgSo7dYOtJ52+xETDtnJojn28hyqrynuR5pIzZv R2RaSQZ718le1j9zXVhzojHGoepjxAqbRQ+u76K7Q7fAJvqid4YmVd0zk4I4pvaz ySDpfBmFA+FOI+RWg1rOo7v5SVK5n8WN1sw6tQ2spmZfJYJijXf7foKyf+wh+99H Hck0G3toJiYANtRVtVMgtxCfD7Enc+6E4reaTBO1cOiEDg4IlrgWMQOqNn96W8wp Ltt5LlP1jd1xW36Tx/ocN6yTKlMinhk= -----END CERTIFICATE-----Generated at Fri Sep 25 22:17:22 2026 by rpki-client