$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa File: 41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa (raw, json) Hash identifier: GgXfXdwKET3vAwb5sbMtPa7mAyay5+P53SikaJ7/8Bo= Subject key identifier: 20:BF:FB:16:7D:44:34:6C:B6:9E:5E:40:C1:57:17:FE:06:F4:55:7E Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F498493EC1A070E7AAD3D0780 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:93:ec:1a:07:0e:7a:ad:3d:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ffece591-a045-409d-b3a7-4866d0e4aa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:5f:9b:4f:5a:1b:f5:8c:87:5a:e9:aa:77: 23:f3:68:76:54:20:b9:0e:06:3e:be:ff:44:82:e0: 6d:84:b0:56:16:d7:16:77:14:5d:df:c3:d1:bd:b0: b0:c3:de:d8:2a:3a:dc:6a:e3:78:b7:c1:50:d8:79: 2d:b6:29:42:41:e6:8a:e4:fc:19:93:a8:86:72:14: b7:46:e0:6e:08:b0:47:3a:8f:f4:9f:e3:7a:d2:c5: 3f:4c:b2:2e:73:30:00:7f:ec:0b:d6:07:f1:1e:b4: ea:48:a6:b2:14:68:ff:b0:b7:7e:ef:c8:3a:c3:9f: a3:97:86:f8:13:95:ca:5f:18:0f:34:af:df:06:cc: e0:9b:c2:b6:2e:8c:e9:08:a7:1f:ab:66:e8:d0:62: 03:2c:d7:78:1d:bb:68:13:8c:d8:9f:d8:89:b5:69: c2:53:48:2d:63:bf:58:9e:91:e6:04:5a:c1:57:fc: 5c:4e:a2:1f:1d:5d:9b:72:3a:d7:5e:ca:10:76:3a: a6:46:17:52:d4:18:72:e8:0c:1c:e4:27:6b:49:84: 68:de:31:06:a1:d1:06:80:f1:c0:eb:3e:e8:88:b2: a3:10:80:b5:42:6a:33:b3:0e:c7:25:3b:eb:40:5a: 83:37:a0:29:6f:40:34:b2:16:39:a0:3d:0b:e1:28: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BF:FB:16:7D:44:34:6C:B6:9E:5E:40:C1:57:17:FE:06:F4:55:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41cf0b67-570a-30d6-b8cc-e84fbdb161a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:82:43:7f:28:ac:81:ae:80:eb:b9:a6:55:41:e8:67:39:e5: 6f:7f:fe:fb:c1:c0:17:e0:6c:59:2e:14:5b:00:b5:56:3d:86: 62:a5:08:14:d0:88:6c:29:50:6b:01:3d:6f:df:c3:be:93:bb: c4:87:df:92:78:8e:f1:2c:cc:c3:fd:91:42:81:42:91:4c:9e: bd:05:8a:e5:5e:94:c4:2a:27:0c:b6:d2:35:06:c4:d7:65:30: 04:d8:51:02:ac:74:23:bb:1f:f3:cc:64:c6:84:8e:2a:58:d7: b2:79:c7:8a:44:ea:0c:8a:93:ea:f1:93:e6:d0:5e:12:09:10: 14:bd:d2:f5:d7:d2:02:15:5d:e0:92:58:a9:eb:95:00:3a:b0: d4:f9:98:a0:92:6e:9c:c0:f8:5a:d8:dc:3b:9c:21:30:c6:05: bf:f3:e6:64:b2:23:9a:d5:5f:89:65:0c:51:b0:a8:33:9d:34: be:80:33:78:e5:f4:0e:b0:e8:25:d3:2b:5c:96:67:2b:3d:d5: 50:b9:e2:ec:4d:b2:1f:7f:a6:44:a7:a4:47:92:ea:24:9f:bb: 04:07:4b:a2:fa:9c:11:21:63:6c:79:5f:46:b9:e9:08:81:ce: af:b0:cb:53:5d:56:01:a5:01:b0:16:48:82:38:5f:a9:0b:65: f0:89:7a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhJPsGgcOeq09B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmZlY2U1OTEtYTA0NS00MDlkLWIzYTctNDg2NmQwZTRhYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYtfm09aG/WMh1rpqncj82h2VCC5DgY+vv9E guBthLBWFtcWdxRd38PRvbCww97YKjrcauN4t8FQ2HkttilCQeaK5PwZk6iGchS3 RuBuCLBHOo/0n+N60sU/TLIuczAAf+wL1gfxHrTqSKayFGj/sLd+78g6w5+jl4b4 E5XKXxgPNK/fBszgm8K2LozpCKcfq2bo0GIDLNd4HbtoE4zYn9iJtWnCU0gtY79Y npHmBFrBV/xcTqIfHV2bcjrXXsoQdjqmRhdS1Bhy6Awc5CdrSYRo3jEGodEGgPHA 6z7oiLKjEIC1Qmozsw7HJTvrQFqDN6Apb0A0shY5oD0L4SgQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC/+xZ9RDRstp5eQMFXF/4G9FV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDFjZjBiNjctNTcwYS0z MGQ2LWI4Y2MtZTg0ZmJkYjE2MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiCQ38orIGugOu5plVB6Gc55W9//vvBwBfgbFkuFFsAtVY9hmKlCBTQ iGwpUGsBPW/fw76Tu8SH35J4jvEszMP9kUKBQpFMnr0FiuVelMQqJwy20jUGxNdl MATYUQKsdCO7H/PMZMaEjipY17J5x4pE6gyKk+rxk+bQXhIJEBS90vXX0gIVXeCS WKnrlQA6sNT5mKCSbpzA+FrY3DucITDGBb/z5mSyI5rVX4llDFGwqDOdNL6AM3jl 9A6w6CXTK1yWZys91VC54uxNsh9/pkSnpEeS6iSfuwQHS6L6nBEhY2x5X0a56QiB zq+wy1NdVgGlAbAWSII4X6kLZfCJet0= -----END CERTIFICATE-----Generated at Fri Oct 2 08:31:15 2026 by rpki-client