$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/354ce78a-fc7a-3ee3-a203-4f1da06da216.roa File: 354ce78a-fc7a-3ee3-a203-4f1da06da216.roa (raw, json) Hash identifier: t8oxY1hs3wMdOHvADFeLGK0SnbqbHnfNV7B34l0itxs= Subject key identifier: 55:01:00:DE:F0:AE:17:82:9D:76:76:60:BA:40:A8:2B:4E:0A:2A:88 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C97FA04EFECA3CF401FC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/354ce78a-fc7a-3ee3-a203-4f1da06da216.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:97:fa:04:ef:ec:a3:cf:40:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0bae3dff-6a71-421a-92ec-4356313f7048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:4e:26:eb:c3:e6:f9:62:3b:0a:40:62:d0: d5:29:fa:13:76:58:0b:2a:1c:ac:c6:37:eb:6a:61: 51:66:41:4e:a5:82:19:21:c6:51:34:dd:d6:17:56: 8b:63:b5:4a:82:ab:00:23:d8:49:58:91:bb:df:d7: 73:e2:9a:da:35:ba:52:10:5d:5c:dc:6c:05:3b:fa: 26:da:76:0c:46:78:00:29:11:df:ee:fb:dd:f6:96: 3b:d6:27:7c:21:36:86:80:21:0c:85:dc:eb:5c:d3: 33:58:1c:f1:62:cc:ff:8d:5c:59:aa:3f:eb:d9:0e: 9b:9e:dc:ff:0a:0d:19:c2:a9:d2:93:16:1e:e5:6e: d3:91:f3:b9:1d:87:1d:94:89:6c:3e:7a:5f:dc:e4: 80:86:33:3c:fc:1a:b2:3f:0c:58:d7:c7:7c:19:fa: 64:a4:12:9e:b3:71:68:5c:b3:37:85:e1:7d:6e:fb: 54:6a:c1:01:91:ea:8c:1b:f7:73:aa:9f:06:ed:a3: eb:35:f2:27:18:1f:29:54:9e:e8:ba:b7:51:5f:81: 24:2a:45:c0:d2:d0:0c:6a:9d:15:54:ce:32:d5:60: 8d:d2:18:24:f1:e6:3a:34:76:ec:0d:72:c4:13:ab: 67:78:18:b4:32:33:8b:db:94:6f:43:52:dc:1e:5c: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:01:00:DE:F0:AE:17:82:9D:76:76:60:BA:40:A8:2B:4E:0A:2A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/354ce78a-fc7a-3ee3-a203-4f1da06da216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:54:1a:c3:03:d5:6e:8e:f2:03:f3:83:13:32:67:f1:7d:d3: 1f:42:b7:a9:69:2f:c4:7f:db:e5:dd:11:47:97:ed:4c:3a:a4: 25:3f:8f:0e:96:57:08:ea:76:f7:5f:d7:0e:f5:c7:20:e8:b0: f0:4f:18:7e:36:b6:6f:2c:36:10:65:5d:d3:d3:a9:9d:d7:d4: 3a:3a:8a:d6:d1:2e:4e:38:4a:74:e3:36:c5:a4:2d:49:6f:76: 58:33:4a:4d:31:36:6a:ac:f4:0a:f6:4a:c5:3d:f3:3e:6d:0a: ba:69:42:9c:2b:54:e3:9e:16:7e:bd:68:f6:9d:18:8f:39:21: e6:74:e0:2e:ab:1d:74:da:20:ca:6a:ba:c1:92:60:46:2b:36: b0:cd:df:ab:69:22:34:03:ff:8f:75:42:3f:08:dc:02:b0:44: 15:5c:e6:4b:28:9d:44:5f:89:fc:2e:8c:1c:4c:80:5d:d9:b6: df:25:24:b0:2a:ee:a8:a7:d6:f0:0a:fe:4e:eb:c6:fb:fb:b9: 60:59:22:6d:cf:35:ce:d4:18:ef:b5:78:6b:34:65:05:d0:a5: 28:df:05:29:95:06:ca:42:5e:70:21:9d:2b:94:2d:23:61:1f: 2a:7f:90:39:6c:22:26:c5:ec:ac:26:5d:51:d3:12:e2:c7:d6: 29:1e:09:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfJf6BO/so89AH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGJhZTNkZmYtNmE3MS00MjFhLTkyZWMtNDM1NjMxM2Y3MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLZOJuvD5vliOwpAYtDVKfoTdlgLKhysxjfr amFRZkFOpYIZIcZRNN3WF1aLY7VKgqsAI9hJWJG739dz4praNbpSEF1c3GwFO/om 2nYMRngAKRHf7vvd9pY71id8ITaGgCEMhdzrXNMzWBzxYsz/jVxZqj/r2Q6bntz/ Cg0ZwqnSkxYe5W7TkfO5HYcdlIlsPnpf3OSAhjM8/BqyPwxY18d8GfpkpBKes3Fo XLM3heF9bvtUasEBkeqMG/dzqp8G7aPrNfInGB8pVJ7ourdRX4EkKkXA0tAMap0V VM4y1WCN0hgk8eY6NHbsDXLEE6tneBi0MjOL25RvQ1LcHlyvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUBAN7wrheCnXZ2YLpAqCtOCiqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzU0Y2U3OGEtZmM3YS0z ZWUzLWEyMDMtNGYxZGEwNmRhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFUGsMD1W6O8gPzgxMyZ/F90x9Ct6lpL8R/2+XdEUeX7Uw6pCU/jw6W Vwjqdvdf1w71xyDosPBPGH42tm8sNhBlXdPTqZ3X1Do6itbRLk44SnTjNsWkLUlv dlgzSk0xNmqs9Ar2SsU98z5tCrppQpwrVOOeFn69aPadGI85IeZ04C6rHXTaIMpq usGSYEYrNrDN36tpIjQD/491Qj8I3AKwRBVc5ksonURfifwujBxMgF3Ztt8lJLAq 7qin1vAK/k7rxvv7uWBZIm3PNc7UGO+1eGs0ZQXQpSjfBSmVBspCXnAhnSuULSNh Hyp/kDlsIibF7KwmXVHTEuLH1ikeCTA= -----END CERTIFICATE-----Generated at Sun Oct 11 20:21:05 2026 by rpki-client