$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa File: cfd5bacf-b676-36e1-b190-4f38b062ea59.roa (raw, json) Hash identifier: gW1DW5REcW520M0kh37w6YRjP9//3IUA6VjZP6MPvt4= Subject key identifier: 94:AD:0F:F9:29:BC:56:34:D0:2B:8B:9A:B0:66:CB:5D:57:FA:F0:14 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984C80F2AC3C6D29DF86D00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36411 IP address blocks: 104.134.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:c8:0f:2a:c3:c6:d2:9d:f8:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d037e6d3-f5af-49d5-a7be-0dda676e7e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:4a:12:e3:40:d6:bb:86:6e:62:ea:9a:3a: 39:95:65:0f:3f:e2:4f:67:7c:cc:60:72:40:d2:bf: c7:05:98:ae:e2:b8:f8:f5:97:7f:e6:3f:8f:07:49: b9:0e:15:92:d5:24:e1:b2:cb:64:27:29:dd:88:84: 16:ad:91:2a:8b:ee:ad:5a:9f:fc:d9:b6:e3:45:1c: 25:ec:d5:92:48:fa:be:9b:de:9b:5b:74:8e:44:22: 06:fd:88:54:3c:d3:c4:65:68:35:c5:34:da:6f:6f: 2e:ca:da:c0:43:1e:0f:c9:b1:cb:e1:ea:a4:0d:d4: 53:78:a4:70:73:b8:bf:f5:78:04:fe:84:15:4d:c6: 72:18:86:ed:f2:32:58:17:f6:31:bc:f4:19:e1:8d: 2f:c8:8f:7c:6f:b9:46:6a:2e:87:43:41:b7:7c:a5: e2:9f:0b:a5:5c:01:93:62:b5:0d:71:55:0d:2b:27: 44:e1:5c:dd:36:84:a9:b9:05:c9:f3:c2:5d:21:e7: 50:4a:9d:04:23:a5:7d:b7:b6:aa:a5:86:79:38:a6: ad:32:ec:73:da:f4:f1:2e:00:48:b5:48:89:26:28: 58:e0:5d:bd:e8:b2:fc:55:f1:21:bb:74:19:0d:02: c8:73:0a:4c:73:ea:a0:6a:70:19:8b:97:3d:81:33: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AD:0F:F9:29:BC:56:34:D0:2B:8B:9A:B0:66:CB:5D:57:FA:F0:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cfd5bacf-b676-36e1-b190-4f38b062ea59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:5e:93:9e:3c:c7:9c:70:28:52:c3:02:bd:3f:91:3d:94:2e: e2:24:45:70:2a:d3:9a:78:c2:7b:22:bf:de:e7:71:f0:88:72: 83:5c:f0:17:cf:dc:a8:64:3d:be:06:77:59:25:2a:a7:22:d5: 54:f2:d1:3f:a8:73:07:91:9e:ab:b1:e1:e6:6e:1f:4f:bc:ed: 43:05:ea:3b:b6:3d:b9:68:f5:3c:e0:75:3c:67:19:a6:66:a6: 8e:f1:21:c1:d8:2a:c7:d0:00:d9:c4:34:75:7d:3b:bd:09:ef: 17:a0:1e:f6:27:1d:f2:de:a9:58:d8:1d:ab:c3:86:87:ce:cd: 9e:6f:67:ee:57:00:80:32:8c:6e:22:1c:5b:c5:18:c1:84:5e: 12:44:20:f7:c3:7c:ac:84:c3:58:ac:ca:94:13:0c:65:b8:e9: 68:98:79:61:30:7b:3d:eb:71:58:dd:52:73:a4:2c:2e:e0:84: 18:3a:6c:d9:58:fc:82:5c:31:bc:d2:5b:ab:e3:d5:67:41:40: 02:58:7e:85:ce:46:df:b1:76:5c:be:34:08:b8:e7:fb:4b:17: ac:19:41:f8:12:be:10:a4:bb:83:fa:57:96:e9:9e:4f:4e:cb: 3d:e5:b7:e4:be:4d:3a:c0:74:e1:60:8c:30:3e:28:f5:ea:61: 96:be:0f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMgPKsPG0p34bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDAzN2U2ZDMtZjVhZi00OWQ1LWE3YmUtMGRkYTY3NmU3ZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXBKEuNA1ruGbmLqmjo5lWUPP+JPZ3zMYHJA 0r/HBZiu4rj49Zd/5j+PB0m5DhWS1SThsstkJyndiIQWrZEqi+6tWp/82bbjRRwl 7NWSSPq+m96bW3SORCIG/YhUPNPEZWg1xTTab28uytrAQx4PybHL4eqkDdRTeKRw c7i/9XgE/oQVTcZyGIbt8jJYF/YxvPQZ4Y0vyI98b7lGai6HQ0G3fKXinwulXAGT YrUNcVUNKydE4VzdNoSpuQXJ88JdIedQSp0EI6V9t7aqpYZ5OKatMuxz2vTxLgBI tUiJJihY4F296LL8VfEhu3QZDQLIcwpMc+qganAZi5c9gTMOPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJStD/kpvFY00CuLmrBmy11X+vAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvY2ZkNWJhY2YtYjY3Ni0z NmUxLWIxOTAtNGYzOGIwNjJlYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZek548x5xwKFLDAr0/kT2ULuIkRXAq05p4wnsiv97ncfCIcoNc8BfP 3KhkPb4Gd1klKqci1VTy0T+ocweRnqux4eZuH0+87UMF6ju2Pblo9TzgdTxnGaZm po7xIcHYKsfQANnENHV9O70J7xegHvYnHfLeqVjYHavDhofOzZ5vZ+5XAIAyjG4i HFvFGMGEXhJEIPfDfKyEw1isypQTDGW46WiYeWEwez3rcVjdUnOkLC7ghBg6bNlY /IJcMbzSW6vj1WdBQAJYfoXORt+xdly+NAi45/tLF6wZQfgSvhCku4P6V5bpnk9O yz3lt+S+TTrAdOFgjDA+KPXqYZa+D9E= -----END CERTIFICATE-----Generated at Sat Sep 26 12:14:21 2026 by rpki-client