$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa File: 5cb1ed81-7286-331b-baf6-f8df13e27704.roa (raw, json) Hash identifier: tsumlY0L/AVU1wn6Djhp8KG3cCt1SQF1Nhf/zAlBkAE= Subject key identifier: 36:5C:5D:09:4E:1D:A8:03:C8:F6:51:C9:8D:DB:95:91:3B:93:8A:B9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F498488E786DDC991524711E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:88:e7:86:dd:c9:91:52:47:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9cd57b54-d32c-4e9b-8b50-447c6e3b5241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:16:ab:5f:fe:96:4c:2d:1e:de:31:df:31: e1:1d:d0:5d:b2:23:00:6c:27:1b:e4:db:4f:83:86: 5c:c3:0b:f4:e6:0d:dd:27:fc:1d:93:b9:3c:0c:7d: 03:ad:79:26:3e:40:2d:11:3f:78:51:f6:82:62:09: 69:71:56:36:0b:97:2a:7e:a0:ce:ef:f0:c9:bd:fa: 14:c4:68:71:bc:a9:31:40:ff:58:bc:4d:d0:05:cf: 58:e8:ed:1e:76:0e:a3:df:3b:fc:c5:ad:0c:21:9c: e8:79:6d:fe:1f:7e:32:cf:a8:f3:37:4f:fd:1b:88: 9d:e0:8c:94:3c:60:b0:64:29:ef:ae:b1:4d:ba:53: 78:d1:57:39:8c:39:ea:d0:fd:f5:df:d4:16:38:74: 29:a8:a4:59:71:19:be:aa:f5:63:5d:53:a8:3b:78: 5c:29:44:4a:8b:9d:7c:56:36:e2:89:04:66:6f:ed: c3:09:dd:21:b4:ef:03:32:d5:d5:df:83:98:7a:d5: 0f:bf:90:fb:13:8d:51:a2:84:16:5c:22:ec:bd:10: 01:8a:23:b4:ba:c6:5c:dc:d0:ab:bc:d9:2a:18:0d: 65:78:b8:fa:51:34:32:68:51:d7:b5:25:95:17:7d: d9:b4:a7:e2:f3:de:6d:21:b8:b4:e6:aa:98:2d:a0: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5C:5D:09:4E:1D:A8:03:C8:F6:51:C9:8D:DB:95:91:3B:93:8A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:71:9d:63:b3:78:5b:cd:1a:70:43:4a:24:d1:fb:6e:61:82: 30:8e:df:67:05:a9:ce:40:b3:63:fa:e5:55:b5:0e:8c:b2:80: a7:07:df:05:a0:33:eb:84:27:51:5b:a5:ef:d4:dc:d3:95:d7: 08:68:8e:94:27:99:73:62:27:c6:0a:b8:76:e0:1d:5f:25:17: 8e:7d:ce:ff:14:ed:19:ae:43:5e:b6:e2:08:04:35:d4:bb:89: 93:b2:f4:6d:de:c5:c6:39:62:5b:36:d3:98:9d:b4:bc:8f:d3: 44:9e:3b:3f:00:f6:50:04:a2:6d:a5:1a:0f:57:79:41:3a:ce: 20:80:49:b6:e5:e9:b7:a0:f6:a6:c8:38:78:cf:42:6f:0c:ea: 0b:2d:bb:30:8c:e9:02:f8:c4:d9:fd:55:04:5f:fc:6a:30:7a: 8d:8d:e9:d0:50:67:8d:49:6d:1b:ba:85:a4:3a:b8:a9:b9:0e: a4:d5:bc:61:ce:dd:16:aa:07:03:2a:8f:17:88:20:60:7d:fb: 2b:e9:c1:12:b4:45:77:10:e3:51:14:2b:08:b6:9d:25:41:dd: b5:5d:68:55:fb:07:5c:65:98:30:3d:fb:46:c7:5d:f7:0d:ee: 12:7f:51:2b:59:c7:24:3f:72:53:44:8f:3e:0e:4a:43:e2:cb: cf:97:82:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhIjnht3JkVJHEeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWNkNTdiNTQtZDMyYy00ZTliLThiNTAtNDQ3YzZlM2I1MjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXIWq1/+lkwtHt4x3zHhHdBdsiMAbCcb5NtP g4Zcwwv05g3dJ/wdk7k8DH0DrXkmPkAtET94UfaCYglpcVY2C5cqfqDO7/DJvfoU xGhxvKkxQP9YvE3QBc9Y6O0edg6j3zv8xa0MIZzoeW3+H34yz6jzN0/9G4id4IyU PGCwZCnvrrFNulN40Vc5jDnq0P3139QWOHQpqKRZcRm+qvVjXVOoO3hcKURKi518 VjbiiQRmb+3DCd0htO8DMtXV34OYetUPv5D7E41RooQWXCLsvRABiiO0usZc3NCr vNkqGA1leLj6UTQyaFHXtSWVF33ZtKfi895tIbi05qqYLaB00wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZcXQlOHagDyPZRyY3blZE7k4q5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWNiMWVkODEtNzI4Ni0z MzFiLWJhZjYtZjhkZjEzZTI3NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItxnWOzeFvNGnBDSiTR+25hgjCO32cFqc5As2P65VW1DoyygKcH3wWg M+uEJ1Fbpe/U3NOV1whojpQnmXNiJ8YKuHbgHV8lF459zv8U7RmuQ1624ggENdS7 iZOy9G3excY5Yls205idtLyP00SeOz8A9lAEom2lGg9XeUE6ziCASbbl6beg9qbI OHjPQm8M6gstuzCM6QL4xNn9VQRf/Goweo2N6dBQZ41JbRu6haQ6uKm5DqTVvGHO 3RaqBwMqjxeIIGB9+yvpwRK0RXcQ41EUKwi2nSVB3bVdaFX7B1xlmDA9+0bHXfcN 7hJ/UStZxyQ/clNEjz4OSkPiy8+Xgsw= -----END CERTIFICATE-----Generated at Sat Sep 26 06:46:21 2026 by rpki-client