$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa File: 41ac104c-8079-32fa-8679-7da33c6a1341.roa (raw, json) Hash identifier: 9mcigeEt7Y03xnBggwbwZxgQNPHUaeXsZPbgnGxWcGE= Subject key identifier: ED:8C:A4:8A:BC:FE:C9:17:DF:B3:E0:2C:4C:4D:C1:94:57:26:29:81 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984CBFE5E916B947687B9F0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395973 IP address blocks: 104.134.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:cb:fe:5e:91:6b:94:76:87:b9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=223b039b-6d6a-4c04-a2a3-048182f40341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:57:45:73:d9:8f:5b:d5:3d:f0:3d:84:00: f5:cf:fa:1b:72:08:1b:4c:a7:71:4f:5f:9e:08:3f: 81:25:58:75:a3:e2:f1:d1:00:7e:d3:ad:1e:35:f9: 8b:4f:cc:9d:7a:62:39:b6:1f:f8:6b:55:7b:ee:72: 92:51:37:ca:aa:4a:64:5e:da:3a:21:6b:56:cd:89: 41:f9:84:cd:bd:25:73:0e:c3:ef:9e:6f:2f:d4:5a: 46:b1:43:08:99:ee:dd:c1:31:4c:7f:60:8f:08:a5: ee:3f:11:61:40:ca:61:c1:64:41:85:56:27:32:fb: 8a:bc:48:43:05:99:a6:29:0d:63:80:0e:8c:5c:71: 12:f4:b2:dc:79:98:c4:e4:4a:de:2d:fd:09:bf:bf: 3f:ff:51:a7:a2:a2:53:e3:ef:36:6b:a3:75:6d:44: 82:00:7e:7e:19:18:a4:af:0b:86:a2:5a:5b:47:42: 05:d9:9e:05:ce:3e:fb:9f:29:eb:88:d3:65:ad:74: d4:ae:61:5d:3b:f1:45:bf:fd:bf:98:86:ed:5d:88: b5:1a:61:47:ff:b9:a5:36:eb:35:18:95:aa:e1:48: ee:57:18:6f:3b:86:fd:bb:69:2b:c3:67:65:81:d1: c2:0f:7c:ae:69:72:05:ee:27:8d:ac:d2:09:7b:14: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8C:A4:8A:BC:FE:C9:17:DF:B3:E0:2C:4C:4D:C1:94:57:26:29:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41ac104c-8079-32fa-8679-7da33c6a1341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a8:39:96:a1:cf:d0:f4:be:4d:5d:89:cc:01:67:83:2a:ba: c1:fa:92:30:78:f4:6d:4b:d8:1c:7d:fa:a4:52:bb:26:5f:99: 5f:1f:a6:7b:72:d2:5c:23:66:85:e0:b3:da:5d:82:c4:66:da: 32:58:bb:d8:a0:71:64:55:f2:61:80:c1:b7:c4:aa:21:c3:3c: 33:20:ce:91:8e:c7:88:39:60:60:00:16:b5:e5:6f:73:bd:3c: 42:54:b1:66:af:bf:21:4a:89:cf:4a:db:ee:cf:85:38:b8:a7: ba:f3:62:52:d0:8d:b2:87:66:79:06:a3:22:7a:75:21:d9:93: 11:ef:4e:33:42:ea:b3:16:cc:f1:36:3e:45:27:b0:71:e0:bc: 11:79:be:4d:a6:67:d4:37:96:35:e1:88:f8:aa:e8:50:ec:aa: cb:8e:5d:c6:b4:50:57:15:1a:4a:02:e4:62:62:5d:fe:26:36: ba:b5:83:e9:dc:76:ee:e1:11:b0:b2:1f:9c:ec:14:3c:91:d9: 9e:57:33:95:d0:9b:88:d0:c4:f0:c9:9c:06:c6:fe:fb:62:82: 8c:66:50:9e:4a:dd:b5:bd:ee:20:d0:ba:cb:f6:59:7a:62:fe: de:61:19:cf:ac:88:2e:f0:2e:d7:16:0f:e5:de:3a:b7:c4:b8: ff:d0:5c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMv+XpFrlHaHufAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjIzYjAzOWItNmQ2YS00YzA0LWEyYTMtMDQ4MTgyZjQwMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluFXRXPZj1vVPfA9hAD1z/obcggbTKdxT1+e CD+BJVh1o+Lx0QB+060eNfmLT8ydemI5th/4a1V77nKSUTfKqkpkXto6IWtWzYlB +YTNvSVzDsPvnm8v1FpGsUMIme7dwTFMf2CPCKXuPxFhQMphwWRBhVYnMvuKvEhD BZmmKQ1jgA6MXHES9LLceZjE5EreLf0Jv78//1GnoqJT4+82a6N1bUSCAH5+GRik rwuGolpbR0IF2Z4Fzj77nynriNNlrXTUrmFdO/FFv/2/mIbtXYi1GmFH/7mlNus1 GJWq4UjuVxhvO4b9u2krw2dlgdHCD3yuaXIF7ieNrNIJexSQkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2MpIq8/skX37PgLExNwZRXJimBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFhYzEwNGMtODA3OS0z MmZhLTg2NzktN2RhMzNjNmExMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyoOZahz9D0vk1dicwBZ4MqusH6kjB49G1L2Bx9+qRSuyZfmV8fpnty 0lwjZoXgs9pdgsRm2jJYu9igcWRV8mGAwbfEqiHDPDMgzpGOx4g5YGAAFrXlb3O9 PEJUsWavvyFKic9K2+7PhTi4p7rzYlLQjbKHZnkGoyJ6dSHZkxHvTjNC6rMWzPE2 PkUnsHHgvBF5vk2mZ9Q3ljXhiPiq6FDsqsuOXca0UFcVGkoC5GJiXf4mNrq1g+nc du7hEbCyH5zsFDyR2Z5XM5XQm4jQxPDJnAbG/vtigoxmUJ5K3bW97iDQusv2WXpi /t5hGc+siC7wLtcWD+XeOrfEuP/QXP8= -----END CERTIFICATE-----Generated at Sun Sep 27 16:14:42 2026 by rpki-client