$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa File: aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa (raw, json) Hash identifier: 9WeAsQ8h+1j2IewptUlKI/KUrsjPX7m7QYNoLzG333k= Subject key identifier: B9:45:EF:FC:29:C6:EC:31:D1:16:DE:ED:83:D2:0F:13:22:D9:F2:E9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C5C8EAD91EF746AE43040 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:5c:8e:ad:91:ef:74:6a:e4:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f5e3cfd1-7882-424a-8c21-7fe42164ff28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:96:3a:a7:a4:ac:cc:c8:0c:0b:50:36:b0: 2e:db:14:9f:f4:b7:37:4c:77:3b:f5:03:a4:84:7e: b5:8c:e5:a7:e0:99:c5:ff:e1:38:07:c1:02:02:00: f3:ee:89:65:ef:6b:ec:7e:6e:54:aa:a1:e3:51:41: b4:4e:a0:68:19:d1:a0:26:2e:70:45:7a:03:38:26: 2b:80:0c:31:b6:e5:02:ad:eb:95:fd:16:01:50:a6: 5d:3a:10:c6:82:17:1b:c7:21:e8:ac:2e:15:2d:82: 28:07:b6:9d:ac:9c:f9:29:94:f6:90:9c:94:68:e0: 04:8a:e4:ec:01:bc:f9:02:59:ad:f7:63:27:2f:61: 3e:d0:b6:1a:a4:14:db:d4:76:bf:55:0e:9c:09:05: da:14:52:fe:ae:1e:b0:a9:27:2e:7b:c6:f2:a7:97: f8:a9:e7:75:70:df:36:36:09:e9:4c:64:c8:fd:03: 2f:f3:85:3d:44:dc:e5:43:d8:98:69:65:47:5a:4d: c5:27:ba:1e:1c:0c:05:66:f9:d1:9b:47:1b:c3:ea: 2d:d2:18:5f:56:45:3e:0b:01:0b:11:bf:bc:d9:78: f7:cf:7e:b5:86:ec:a2:bf:3f:8f:b0:7b:21:e3:ff: c6:4c:7f:54:42:da:bc:d0:d9:a8:cb:37:c7:4f:ba: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:45:EF:FC:29:C6:EC:31:D1:16:DE:ED:83:D2:0F:13:22:D9:F2:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:46:5d:98:53:93:2b:a8:4a:99:22:78:d0:16:1a:87:fa:85: 97:60:ef:99:0d:27:2f:f9:21:43:e4:85:43:0c:42:85:7a:d3: 89:20:19:85:ec:b5:12:84:d7:6a:88:e2:02:89:a3:c9:c5:62: 10:fa:fb:b3:e8:7e:8a:76:f5:78:4f:9e:7e:5b:04:50:ad:ab: 2e:27:66:4d:0f:7f:29:98:72:09:df:f1:20:d8:d0:88:8a:ac: a0:d7:63:ab:96:e3:7b:ce:bf:04:54:20:47:f8:df:01:ee:0a: 80:67:34:46:9c:02:2c:d4:ab:ed:e0:46:4d:2f:7c:28:02:20: cd:56:24:03:14:83:45:ed:85:9a:0a:29:37:74:4e:5d:ce:bc: 54:9d:cb:45:f5:76:6a:bb:74:31:26:26:6a:15:ad:bb:01:fa: 61:8b:de:7e:ea:10:1e:11:02:8b:a7:74:36:c7:54:ad:86:c8: 8f:f5:a4:12:ea:9a:d7:c5:f9:fc:37:8b:ff:f7:19:1f:54:0f: ca:72:66:bd:f4:02:c3:e3:44:66:f9:f6:c1:66:0f:51:55:50: 1a:fa:bb:ab:dc:ed:76:f5:a6:d6:22:47:4f:73:de:ac:bc:f7: ba:43:24:52:bc:79:bc:c3:a2:a5:ab:9a:46:b0:29:3e:0c:1f: 8a:44:61:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfFyOrZHvdGrkMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjVlM2NmZDEtNzg4Mi00MjRhLThjMjEtN2ZlNDIxNjRmZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeaWOqekrMzIDAtQNrAu2xSf9Lc3THc79QOk hH61jOWn4JnF/+E4B8ECAgDz7oll72vsfm5UqqHjUUG0TqBoGdGgJi5wRXoDOCYr gAwxtuUCreuV/RYBUKZdOhDGghcbxyHorC4VLYIoB7adrJz5KZT2kJyUaOAEiuTs Abz5Almt92MnL2E+0LYapBTb1Ha/VQ6cCQXaFFL+rh6wqScue8byp5f4qed1cN82 NgnpTGTI/QMv84U9RNzlQ9iYaWVHWk3FJ7oeHAwFZvnRm0cbw+ot0hhfVkU+CwEL Eb+82Xj3z361huyivz+PsHsh4//GTH9UQtq80NmoyzfHT7rjDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlF7/wpxuwx0Rbe7YPSDxMi2fLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWE3YTQyOTQtNmIyZC0z MTFlLWE2ODAtNWE2ZmZiOTVhNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtGXZhTkyuoSpkieNAWGof6hZdg75kNJy/5IUPkhUMMQoV604kgGYXs tRKE12qI4gKJo8nFYhD6+7Pofop29XhPnn5bBFCtqy4nZk0PfymYcgnf8SDY0IiK rKDXY6uW43vOvwRUIEf43wHuCoBnNEacAizUq+3gRk0vfCgCIM1WJAMUg0XthZoK KTd0Tl3OvFSdy0X1dmq7dDEmJmoVrbsB+mGL3n7qEB4RAoundDbHVK2GyI/1pBLq mtfF+fw3i//3GR9UD8pyZr30AsPjRGb59sFmD1FVUBr6u6vc7Xb1ptYiR09z3qy8 97pDJFK8ebzDoqWrmkawKT4MH4pEYTY= -----END CERTIFICATE-----Generated at Sun Sep 27 23:32:13 2026 by rpki-client