$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9c06414-36e8-3fb5-8aa9-2cf59b515993.roa File: a9c06414-36e8-3fb5-8aa9-2cf59b515993.roa (raw, json) Hash identifier: 4/xKLNnrZawt3lYRTAqcVhhEvlZdfEwo+bOVuCSecu8= Subject key identifier: BA:BE:BA:2C:13:FE:0C:60:A3:2D:67:87:33:07:56:8A:B8:C9:36:9C Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C5CABF3A8792305033E40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9c06414-36e8-3fb5-8aa9-2cf59b515993.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:5c:ab:f3:a8:79:23:05:03:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=01c83a06-e5c4-44e9-8fb5-e554c47abe6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:d0:69:e4:c7:83:17:4a:ac:f5:2c:46:37: 45:fe:a9:11:35:cc:d2:65:c2:48:5f:89:5a:d4:92: 1c:32:6b:18:79:8c:bf:e9:bd:8f:3e:ba:96:c0:29: cf:f3:ff:da:2e:9c:1d:66:b1:75:ce:6f:37:06:c8: f3:ca:a1:23:2d:0e:35:1e:88:6e:20:b7:fc:45:97: cd:de:17:cc:fa:c5:5a:07:7a:d6:90:67:d3:89:10: 79:e1:ef:7e:ea:14:78:ba:e6:11:ee:11:d0:6c:bb: 48:5a:af:04:eb:0b:6e:97:07:c8:f2:a0:a3:24:18: 98:7c:a0:04:b8:70:9a:e1:be:5f:5b:7d:8e:f9:03: 21:de:e1:32:1a:1a:fa:65:74:53:ac:e2:cb:e1:f8: 96:f4:d1:c9:58:de:9e:29:7c:28:dd:5b:b7:59:30: 1e:65:bb:48:bf:4a:88:7d:cf:51:ed:09:87:cd:e3: 5f:a2:a3:e6:e7:9d:26:27:a8:19:b6:0c:44:77:f5: 5a:be:8d:39:ac:6c:28:25:2d:3b:a1:78:6c:13:79: 11:d1:2a:a7:7c:d0:ce:73:a5:c3:b7:96:73:af:03: 18:66:ad:bf:28:56:47:66:cf:73:b6:71:0a:68:84: 3e:fb:33:23:14:ed:e2:6d:0b:38:4b:ae:57:ed:98: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BE:BA:2C:13:FE:0C:60:A3:2D:67:87:33:07:56:8A:B8:C9:36:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9c06414-36e8-3fb5-8aa9-2cf59b515993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:52:a9:16:39:f8:24:a8:86:be:c9:ce:23:47:20:93:f7:8a: 38:c3:84:85:bb:78:44:57:7d:cc:7d:e2:a4:6b:20:32:26:52: c7:cd:3c:f8:90:16:f6:9c:c2:1c:47:5a:c3:c0:82:3f:8d:64: 8f:3d:06:88:1f:9d:29:d6:44:c0:44:22:19:c7:cd:05:5e:9a: f7:fa:05:55:74:26:6c:61:fb:d4:1f:70:a9:d5:6d:10:a5:b2: 6d:84:de:6d:5e:8a:ba:1c:c4:56:a2:06:4d:1a:ee:2d:92:4d: fe:af:1b:8b:8f:8f:e2:ed:e5:a7:c3:4e:7a:20:0f:93:70:6e: 0e:f5:d2:df:bb:84:d3:b4:f6:e8:a9:7b:2c:ff:0b:2a:a2:3a: 2f:39:46:f8:1e:d2:fa:b3:ba:fa:13:fa:7b:a9:b2:57:3a:3c: 5b:7f:c8:e0:fe:9f:f3:62:90:a0:d6:26:79:aa:fe:31:56:b5: 88:2c:cb:c0:ff:4c:7f:df:5f:84:b5:a1:e6:7b:b7:88:67:ee: 5c:72:a8:39:27:91:3e:26:34:ef:22:4a:26:b3:25:bb:47:30: 62:95:7f:32:de:d3:da:8e:8a:5b:cf:76:36:2c:25:03:f4:fc: 2f:47:8b:72:35:66:43:7f:73:92:07:d1:2d:57:68:49:ed:68: 5f:b7:d4:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfFyr86h5IwUDPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDFjODNhMDYtZTVjNC00NGU5LThmYjUtZTU1NGM0N2FiZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjknQaeTHgxdKrPUsRjdF/qkRNczSZcJIX4la 1JIcMmsYeYy/6b2PPrqWwCnP8//aLpwdZrF1zm83BsjzyqEjLQ41HohuILf8RZfN 3hfM+sVaB3rWkGfTiRB54e9+6hR4uuYR7hHQbLtIWq8E6wtulwfI8qCjJBiYfKAE uHCa4b5fW32O+QMh3uEyGhr6ZXRTrOLL4fiW9NHJWN6eKXwo3Vu3WTAeZbtIv0qI fc9R7QmHzeNfoqPm550mJ6gZtgxEd/Vavo05rGwoJS07oXhsE3kR0SqnfNDOc6XD t5ZzrwMYZq2/KFZHZs9ztnEKaIQ++zMjFO3ibQs4S65X7Zj8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq+uiwT/gxgoy1nhzMHVoq4yTacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTljMDY0MTQtMzZlOC0z ZmI1LThhYTktMmNmNTliNTE1OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9SqRY5+CSohr7JziNHIJP3ijjDhIW7eERXfcx94qRrIDImUsfNPPiQ FvacwhxHWsPAgj+NZI89BogfnSnWRMBEIhnHzQVemvf6BVV0Jmxh+9QfcKnVbRCl sm2E3m1eirocxFaiBk0a7i2STf6vG4uPj+Lt5afDTnogD5Nwbg710t+7hNO09uip eyz/CyqiOi85Rvge0vqzuvoT+nupslc6PFt/yOD+n/NikKDWJnmq/jFWtYgsy8D/ TH/fX4S1oeZ7t4hn7lxyqDknkT4mNO8iSiazJbtHMGKVfzLe09qOilvPdjYsJQP0 /C9Hi3I1ZkN/c5IH0S1XaEntaF+31HA= -----END CERTIFICATE-----Generated at Tue Sep 29 17:27:43 2026 by rpki-client