$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa File: c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa (raw, json) Hash identifier: hDQfbmUa3wMWlG6/HzWmBw0rIGpFmD9KgZtn6LXEymg= Subject key identifier: 77:F0:F1:20:C9:C5:AE:5F:BB:45:A9:E3:FB:C0:DD:5A:6A:97:CA:E7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49849BADCD6AFDB3883783C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:9b:ad:cd:6a:fd:b3:88:37:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8b1e56c7-61cc-4e2a-9f22-037f88dff734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:4c:c9:4b:71:44:e1:15:08:10:b3:41:f2: e9:42:e8:dd:b7:51:57:3a:6f:f1:22:2b:38:8e:ad: 77:8b:93:a7:5b:55:78:65:cd:65:7f:6a:e8:11:47: f4:a4:c8:e4:00:f5:bd:30:4f:1e:6c:2a:51:17:db: 84:d9:07:61:bc:1e:7c:51:ec:a5:30:a3:ca:24:bf: f5:68:ce:0f:2a:af:27:22:fb:18:db:ad:be:5b:c3: 89:7d:01:52:8f:77:95:e6:e7:9d:d9:cf:6c:ef:e7: a1:e4:f1:d3:b0:27:ff:6a:8f:da:98:0b:59:dd:f5: 7f:73:08:55:d0:37:5d:2e:82:85:e0:b1:cc:34:cd: 20:3a:09:85:64:e2:b8:56:e9:56:a0:68:59:f6:b9: f0:a0:29:c2:11:91:c7:29:75:62:d4:67:d2:73:9f: 75:33:b8:fd:f2:b6:64:c9:da:f0:a7:62:c9:dc:ab: 11:d3:ae:d6:d7:ac:17:52:97:38:72:15:7b:fe:98: e8:da:c5:60:84:77:58:82:7c:b6:b2:3c:d5:7f:75: 96:76:fc:fa:7d:54:b8:48:46:0e:0b:e7:00:72:b5: 3b:e4:57:8c:d5:24:d5:8c:f0:b9:7e:c1:30:07:f2: fa:28:ca:46:2f:b5:ad:53:16:40:3c:34:87:b7:a3: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F0:F1:20:C9:C5:AE:5F:BB:45:A9:E3:FB:C0:DD:5A:6A:97:CA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c5d4421c-acdd-368c-adb9-c16500f4a0d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:53:f0:76:23:bc:11:df:d8:60:ff:bb:a7:c0:96:cc:fd:2d: a7:d7:7e:8c:f9:7e:e7:d0:9b:c1:b7:9a:b5:80:bb:d6:8f:b0: b5:79:69:f6:02:91:36:7f:30:5b:70:9f:23:3f:a0:08:58:38: 6f:3c:4a:2a:1c:cd:ae:5d:80:19:f0:35:7e:df:5a:71:18:15: 23:ba:87:ac:e2:ec:e8:60:f3:78:e3:5f:70:dd:dd:dc:4c:61: 84:15:02:9d:81:1b:67:53:66:0f:1d:82:5f:a0:aa:55:f0:90: c7:12:b3:02:7d:9f:f0:f7:4a:c6:9d:0c:8b:d8:67:73:5b:b0: 73:ce:02:5b:07:86:a1:e8:ab:66:d9:ea:51:50:73:91:94:13: a8:6e:d2:b2:1f:0a:e4:a8:04:b1:53:a8:b4:2c:ca:9d:59:da: 12:f1:f0:3e:4e:6a:70:42:c0:d5:37:b1:98:8d:0b:22:7b:1f: 81:f1:6f:ba:8e:10:a3:76:13:7d:a1:4d:ec:35:26:de:5d:ad: c9:83:b2:6f:27:32:49:e1:0f:e2:a5:6e:1f:bb:5e:56:75:7b: bc:4d:a9:d3:58:e5:b9:05:40:08:fc:de:b2:8b:41:8d:32:ae: 9e:76:d3:34:9d:e6:f1:98:9d:a0:43:73:fc:b5:c0:a3:0e:0f: f5:8a:8b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhJutzWr9s4g3g8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGIxZTU2YzctNjFjYy00ZTJhLTlmMjItMDM3Zjg4ZGZmNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOpMyUtxROEVCBCzQfLpQujdt1FXOm/xIis4 jq13i5OnW1V4Zc1lf2roEUf0pMjkAPW9ME8ebCpRF9uE2QdhvB58UeylMKPKJL/1 aM4PKq8nIvsY262+W8OJfQFSj3eV5ued2c9s7+eh5PHTsCf/ao/amAtZ3fV/cwhV 0DddLoKF4LHMNM0gOgmFZOK4VulWoGhZ9rnwoCnCEZHHKXVi1GfSc591M7j98rZk ydrwp2LJ3KsR067W16wXUpc4chV7/pjo2sVghHdYgny2sjzVf3WWdvz6fVS4SEYO C+cAcrU75FeM1STVjPC5fsEwB/L6KMpGL7WtUxZAPDSHt6MuSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfw8SDJxa5fu0Wp4/vA3Vpql8rnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzVkNDQyMWMtYWNkZC0z NjhjLWFkYjktYzE2NTAwZjRhMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxT8HYjvBHf2GD/u6fAlsz9LafXfoz5fufQm8G3mrWAu9aPsLV5afYC kTZ/MFtwnyM/oAhYOG88Siocza5dgBnwNX7fWnEYFSO6h6zi7Ohg83jjX3Dd3dxM YYQVAp2BG2dTZg8dgl+gqlXwkMcSswJ9n/D3SsadDIvYZ3NbsHPOAlsHhqHoq2bZ 6lFQc5GUE6hu0rIfCuSoBLFTqLQsyp1Z2hLx8D5OanBCwNU3sZiNCyJ7H4Hxb7qO EKN2E32hTew1Jt5drcmDsm8nMknhD+Klbh+7XlZ1e7xNqdNY5bkFQAj83rKLQY0y rp520zSd5vGYnaBDc/y1wKMOD/WKi/g= -----END CERTIFICATE-----Generated at Tue Sep 29 02:22:54 2026 by rpki-client