$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa File: 377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa (raw, json) Hash identifier: LxBhEUbcjDqa/v5MprIk0IomWgiO8XrXbaLEEA3ZNaI= Subject key identifier: 12:AC:D3:78:20:23:63:45:5D:05:33:DF:1A:0C:EE:BB:DF:16:E5:F7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984C6DC5D1F261E030DD680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:c6:dc:5d:1f:26:1e:03:0d:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c08a1e44-5371-42bf-a066-6e542af13ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:03:06:cd:64:62:0e:5c:b2:6a:93:7c:d5: 23:9b:07:26:12:39:46:ce:49:39:53:91:48:f1:b9: 16:0c:73:17:16:18:45:6e:dd:e5:40:b3:43:d4:6d: 0d:2d:56:5a:89:2c:f0:20:a0:48:58:25:74:a0:79: 7d:66:f8:86:a8:fd:4b:af:01:3d:05:18:b9:69:19: 57:34:75:25:83:1f:ab:d3:aa:a9:45:53:fb:92:aa: 64:40:88:92:e4:3d:0d:c8:5f:eb:74:2b:0d:96:60: 2e:4f:5c:a7:68:28:e7:5c:64:fc:7c:18:3f:94:26: 28:81:cb:84:53:3a:d3:d3:98:e9:21:8f:c3:fc:17: 93:a4:04:97:32:37:d0:c9:6a:ae:f7:19:0b:e7:cc: 47:c7:e0:74:23:ee:a3:38:79:25:b9:27:2a:b2:80: 3c:ff:96:90:66:62:5f:02:2e:29:b8:1c:08:02:23: b9:80:33:d9:92:2c:0e:0f:8b:1b:b1:41:f4:25:f4: 50:85:9d:93:79:b2:c7:d2:fa:d9:a1:7c:5b:1f:04: 5f:72:b9:99:1e:84:fd:31:c6:32:68:ec:9f:21:4f: 49:e2:57:c6:18:aa:05:3d:77:80:cd:e9:57:ce:86: 03:f7:55:6b:27:15:3d:5c:c9:d0:f9:9a:ee:04:40: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AC:D3:78:20:23:63:45:5D:05:33:DF:1A:0C:EE:BB:DF:16:E5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ed:13:f5:38:30:2c:0e:31:0c:d4:35:ee:5f:d5:bb:8c:6f: 69:53:93:92:f5:10:16:ff:0e:8c:15:52:da:9c:9d:73:e7:b7: 28:8a:0f:fe:84:c4:b4:c6:7f:83:c3:a9:ab:33:d6:89:0d:73: b2:ee:00:83:99:59:bb:c9:73:ab:5e:45:4c:28:d8:f4:a6:f3: f2:26:0d:fc:cb:53:f3:a0:3e:bb:8e:c2:96:d2:06:d9:e8:eb: 95:6c:50:90:32:cb:fe:d5:60:d9:a4:02:1b:de:6e:7b:71:a5: a9:66:b4:4d:ea:fa:15:02:47:ea:2a:c2:05:ff:3e:c3:ea:12: fe:45:f7:c9:a6:2a:12:12:00:8c:b2:73:c9:10:ff:1c:2d:55: aa:2d:06:d7:d5:0f:09:4c:72:6b:0f:52:5e:9d:c5:55:c1:74: 81:64:a9:2f:e3:8b:ab:96:86:aa:c6:d5:e2:8c:00:8c:fc:96: 28:ed:ef:c8:55:c2:89:e1:44:d8:3c:13:71:49:6e:33:c0:0d: 94:78:9c:3d:76:3c:f6:e2:03:23:4b:4c:0f:19:8d:b8:a9:f6: 0b:47:6b:cb:40:1a:6a:b3:0f:c9:c6:57:68:69:ef:c9:ef:c5: 95:af:23:ad:5d:d4:94:2d:ec:e1:b7:94:cb:e1:14:68:da:60: bf:8d:21:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMbcXR8mHgMN1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzA4YTFlNDQtNTM3MS00MmJmLWEwNjYtNmU1NDJhZjEzY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW0DBs1kYg5csmqTfNUjmwcmEjlGzkk5U5FI 8bkWDHMXFhhFbt3lQLND1G0NLVZaiSzwIKBIWCV0oHl9ZviGqP1LrwE9BRi5aRlX NHUlgx+r06qpRVP7kqpkQIiS5D0NyF/rdCsNlmAuT1ynaCjnXGT8fBg/lCYogcuE UzrT05jpIY/D/BeTpASXMjfQyWqu9xkL58xHx+B0I+6jOHkluScqsoA8/5aQZmJf Ai4puBwIAiO5gDPZkiwOD4sbsUH0JfRQhZ2TebLH0vrZoXxbHwRfcrmZHoT9McYy aOyfIU9J4lfGGKoFPXeAzelXzoYD91VrJxU9XMnQ+ZruBEA+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKs03ggI2NFXQUz3xoM7rvfFuX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzc3YzY3Y2YtMGE0MC0z YTEzLWEwY2QtNGMzMzUxMmRlNWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7tE/U4MCwOMQzUNe5f1buMb2lTk5L1EBb/DowVUtqcnXPntyiKD/6E xLTGf4PDqasz1okNc7LuAIOZWbvJc6teRUwo2PSm8/ImDfzLU/OgPruOwpbSBtno 65VsUJAyy/7VYNmkAhvebntxpalmtE3q+hUCR+oqwgX/PsPqEv5F98mmKhISAIyy c8kQ/xwtVaotBtfVDwlMcmsPUl6dxVXBdIFkqS/ji6uWhqrG1eKMAIz8lijt78hV wonhRNg8E3FJbjPADZR4nD12PPbiAyNLTA8Zjbip9gtHa8tAGmqzD8nGV2hp78nv xZWvI61d1JQt7OG3lMvhFGjaYL+NIbc= -----END CERTIFICATE-----Generated at Fri Sep 25 22:19:37 2026 by rpki-client