$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa File: 348bd322-b2ad-3bdd-8570-245f1a6574e0.roa (raw, json) Hash identifier: kA2TQC0nqxC5wKFstmpf+bw6BmcHGteGSERr3PDHT+0= Subject key identifier: D7:9E:7F:09:48:D0:47:20:32:4F:1F:21:1D:14:60:79:08:9F:4A:7B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C5CD26F8AF9B2C641D080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:5c:d2:6f:8a:f9:b2:c6:41:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49242aa2-5f52-4fb7-947a-1ce663b2a99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:a2:e0:7c:81:d3:79:f3:b2:ae:95:2e:4d: aa:71:e3:a3:77:b4:b0:87:44:38:f3:89:03:c9:2c: 6e:71:38:e4:7a:df:23:34:82:da:af:f7:2d:1d:bc: e1:a8:ca:97:35:fe:47:7c:03:48:8f:c3:d3:d2:de: e4:32:fa:1a:f2:a7:2f:2b:c9:c2:8e:af:1f:83:d4: a4:64:6f:89:10:76:a0:e7:fe:92:14:b4:b3:79:f2: ab:e5:67:54:5a:5c:a2:d8:b8:47:db:86:11:84:78: 10:d8:ea:e9:03:88:23:c9:5d:ad:b0:ec:68:ec:6c: 13:96:cd:f3:b4:d3:81:a1:85:ea:de:fb:7c:e4:f0: 04:ae:8b:f9:a1:61:76:45:f5:6e:14:08:49:44:2d: 5d:49:ca:cc:0e:aa:6b:9a:f7:de:23:4c:38:96:da: a3:29:c6:13:92:8a:1e:8c:4d:6f:1f:f8:15:e4:c3: a8:18:27:9d:86:56:c8:c7:64:54:5b:6d:06:6d:d9: ed:a2:89:9b:f4:b0:3c:a5:6f:74:5e:65:a6:0f:f9: dc:cb:2d:81:42:82:f0:e7:ac:56:7c:ea:fb:c7:6d: c7:41:b4:0e:aa:d8:9e:25:66:7c:cc:18:d5:d5:f5: f8:ba:2f:73:03:4c:d5:96:80:5f:da:ff:50:2a:a2: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9E:7F:09:48:D0:47:20:32:4F:1F:21:1D:14:60:79:08:9F:4A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/348bd322-b2ad-3bdd-8570-245f1a6574e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:08:3e:af:5f:fb:55:7d:31:62:3b:0f:ba:03:b2:3b:5d:02: 7e:7c:a5:2a:31:e9:6f:c6:f4:ca:9b:e0:e8:ba:73:ee:89:d7: ad:1a:81:bc:62:2d:11:45:28:7d:27:e7:61:f3:f9:59:45:84: 6c:da:f6:0f:37:72:0f:99:53:0d:58:8d:c2:15:6c:a4:5d:e8: 6e:5f:d3:fa:c7:c1:4e:bf:23:93:f1:39:4b:70:40:c9:b8:5e: 51:70:58:b0:b7:5e:83:b0:5c:a5:df:98:ac:00:8d:93:4d:d2: 7c:22:18:ff:e0:21:24:c2:d3:82:81:38:75:ce:89:10:94:d6: 3c:c9:20:bf:08:1e:db:32:2f:a6:32:96:f5:4a:14:46:fb:02: e9:4c:2c:35:c7:79:69:35:78:cd:a6:85:b7:61:d6:c4:21:6c: a5:c7:87:68:3f:23:2e:e2:50:7a:ad:e0:03:a1:e9:e4:c8:5d: 28:76:b9:4b:1e:91:34:04:95:48:7a:6b:06:27:f4:c4:df:91: 3c:47:be:c9:d2:d3:fb:7e:89:6f:1a:d2:b7:91:f0:79:7b:69: 46:ce:43:06:6b:fe:ee:ec:6a:1a:19:47:72:93:f5:4e:83:4f: 5b:47:98:13:09:a9:ae:93:0c:64:ac:22:55:c0:17:4b:ac:50: f9:8d:31:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfFzSb4r5ssZB0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDkyNDJhYTItNWY1Mi00ZmI3LTk0N2EtMWNlNjYzYjJhOTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbKi4HyB03nzsq6VLk2qceOjd7Swh0Q484kD ySxucTjket8jNILar/ctHbzhqMqXNf5HfANIj8PT0t7kMvoa8qcvK8nCjq8fg9Sk ZG+JEHag5/6SFLSzefKr5WdUWlyi2LhH24YRhHgQ2OrpA4gjyV2tsOxo7GwTls3z tNOBoYXq3vt85PAErov5oWF2RfVuFAhJRC1dScrMDqprmvfeI0w4ltqjKcYTkooe jE1vH/gV5MOoGCedhlbIx2RUW20Gbdntoomb9LA8pW90XmWmD/ncyy2BQoLw56xW fOr7x23HQbQOqtieJWZ8zBjV1fX4ui9zA0zVloBf2v9QKqLeIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeefwlI0EcgMk8fIR0UYHkIn0p7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzQ4YmQzMjItYjJhZC0z YmRkLTg1NzAtMjQ1ZjFhNjU3NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkIPq9f+1V9MWI7D7oDsjtdAn58pSox6W/G9Mqb4Oi6c+6J160agbxi LRFFKH0n52Hz+VlFhGza9g83cg+ZUw1YjcIVbKRd6G5f0/rHwU6/I5PxOUtwQMm4 XlFwWLC3XoOwXKXfmKwAjZNN0nwiGP/gISTC04KBOHXOiRCU1jzJIL8IHtsyL6Yy lvVKFEb7AulMLDXHeWk1eM2mhbdh1sQhbKXHh2g/Iy7iUHqt4AOh6eTIXSh2uUse kTQElUh6awYn9MTfkTxHvsnS0/t+iW8a0reR8Hl7aUbOQwZr/u7sahoZR3KT9U6D T1tHmBMJqa6TDGSsIlXAF0usUPmNMV8= -----END CERTIFICATE-----Generated at Fri Sep 25 23:14:42 2026 by rpki-client