$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa File: bf43aa8f-6881-31aa-8958-92f09ff019c2.roa (raw, json) Hash identifier: 8xv5WQcEQ5J+uai7F2J7fuQXcPm9HipLsPC+DDZLZYU= Subject key identifier: 54:42:F9:AD:38:9F:52:65:D4:3F:55:96:CB:1F:63:C7:38:5F:BB:87 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C65A2A45E1D18CD7FE4A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:65:a2:a4:5e:1d:18:cd:7f:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=113caf71-61c4-49b2-8712-e6c69b5634a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:cf:c9:43:89:e5:8b:a8:6c:21:2d:ef:4b: 53:e7:b7:c6:ed:60:df:74:ad:7e:ef:dd:e1:21:9a: 81:f3:31:a0:2f:11:1c:36:fc:f2:41:03:8f:79:be: f1:f0:29:bb:c8:91:68:59:ab:d2:66:a9:4f:e3:cd: 02:a1:8c:16:f9:24:60:69:10:45:d9:94:52:0f:08: cf:93:33:59:78:b9:41:cf:ac:16:a7:ff:12:e3:6d: 2e:3e:42:ea:2b:de:51:e9:a0:98:3f:d3:4c:be:8d: a7:9d:a4:3e:80:18:9c:4c:5b:48:f8:3c:30:cd:d8: 6c:1c:83:4d:c1:39:38:28:c3:77:7d:a9:82:31:24: 46:23:6d:14:ee:4c:e2:ae:b3:a6:94:02:34:3a:d0: 0f:fb:62:19:1a:e7:02:f8:1d:44:87:15:52:56:b9: 04:64:d6:a8:5d:29:f5:35:44:aa:ba:d5:30:a6:49: 48:98:f4:7b:d2:b2:2d:87:aa:04:d6:3b:a6:15:ab: 6c:2a:e6:dc:62:59:3f:d9:4a:75:c6:e7:83:e0:99: b5:33:65:d5:96:44:6b:4a:8e:b1:b6:56:c2:7e:93: 34:ba:ff:84:18:5d:ee:a8:b7:18:0b:7e:b9:cf:84: c8:25:77:d8:e2:43:84:e6:b9:be:2a:56:e6:f4:a0: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:F9:AD:38:9F:52:65:D4:3F:55:96:CB:1F:63:C7:38:5F:BB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bf43aa8f-6881-31aa-8958-92f09ff019c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ad:3b:71:54:34:7f:84:4a:d4:37:11:b8:72:61:14:f7:24: 86:09:e3:d1:22:fc:91:06:8c:5b:96:0e:b7:79:8e:26:2e:d3: 5f:38:e8:b4:a7:d1:0e:c2:88:b2:72:a1:59:d2:81:95:bc:43: 2b:54:53:33:db:33:0a:58:8b:7c:98:19:bd:34:68:9d:90:a5: 40:42:8c:c0:1e:67:79:c8:d7:0a:b4:ab:a1:c5:fa:36:f3:c0: 7d:36:59:1f:f0:e4:0f:64:82:3d:aa:cb:36:3e:c6:6f:96:77: d0:78:0b:c4:f6:f4:6b:2f:80:0e:65:86:71:aa:a9:df:58:73: 7d:3b:c2:2b:f0:05:90:ab:a0:ef:02:14:d9:0c:d1:e1:87:6c: b0:81:e4:2b:f4:8d:1f:03:74:58:25:c6:44:3c:61:92:0b:3d: 9e:d5:8d:9c:41:db:a6:e0:75:1e:21:be:7a:98:18:22:85:41: 3e:03:ea:a8:9d:03:b6:4c:c5:10:29:38:99:a5:68:28:56:b4: a8:6c:dd:0f:67:64:64:c1:68:c6:57:28:bd:81:05:b4:6d:4e: 19:1e:40:3b:e6:8e:59:fe:1c:7c:bc:1f:e5:90:23:57:dd:e3: c8:2d:d6:b8:b3:21:c4:de:9f:31:12:50:cd:72:3c:be:6c:d5: 14:cf:41:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfGWipF4dGM1/5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTEzY2FmNzEtNjFjNC00OWIyLTg3MTItZTZjNjliNTYzNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB/PyUOJ5YuobCEt70tT57fG7WDfdK1+793h IZqB8zGgLxEcNvzyQQOPeb7x8Cm7yJFoWavSZqlP480CoYwW+SRgaRBF2ZRSDwjP kzNZeLlBz6wWp/8S420uPkLqK95R6aCYP9NMvo2nnaQ+gBicTFtI+DwwzdhsHINN wTk4KMN3famCMSRGI20U7kzirrOmlAI0OtAP+2IZGucC+B1EhxVSVrkEZNaoXSn1 NUSqutUwpklImPR70rIth6oE1jumFatsKubcYlk/2Up1xueD4Jm1M2XVlkRrSo6x tlbCfpM0uv+EGF3uqLcYC365z4TIJXfY4kOE5rm+Klbm9KCNyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRC+a04n1Jl1D9VlssfY8c4X7uHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmY0M2FhOGYtNjg4MS0z MWFhLTg5NTgtOTJmMDlmZjAxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABStO3FUNH+EStQ3EbhyYRT3JIYJ49Ei/JEGjFuWDrd5jiYu01846LSn 0Q7CiLJyoVnSgZW8QytUUzPbMwpYi3yYGb00aJ2QpUBCjMAeZ3nI1wq0q6HF+jbz wH02WR/w5A9kgj2qyzY+xm+Wd9B4C8T29GsvgA5lhnGqqd9Yc307wivwBZCroO8C FNkM0eGHbLCB5Cv0jR8DdFglxkQ8YZILPZ7VjZxB26bgdR4hvnqYGCKFQT4D6qid A7ZMxRApOJmlaChWtKhs3Q9nZGTBaMZXKL2BBbRtThkeQDvmjln+HHy8H+WQI1fd 48gt1rizIcTenzESUM1yPL5s1RTPQcg= -----END CERTIFICATE-----Generated at Sun Sep 27 21:20:58 2026 by rpki-client