$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa File: d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa (raw, json) Hash identifier: Nk9v1/Bs3eIODZ6Y83EtWOAL49FCEYtao4hhIzLFF0s= Subject key identifier: 40:5F:37:E3:24:E0:59:89:F3:C6:44:2F:9A:A3:BD:FD:3A:88:5E:60 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984C1041D98B72C222552C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:c1:04:1d:98:b7:2c:22:25:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=90cd088f-498e-4ee4-86fd-086002db4afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:0f:89:de:2d:65:88:b3:27:1d:e4:71:a7: 5c:3a:9e:c6:f3:97:86:ab:72:91:1a:bf:03:06:05: 52:92:39:0c:1d:4f:a3:6a:ad:51:92:b3:92:c8:8c: 67:d8:e9:08:67:a0:d4:24:63:2f:db:59:91:29:1e: 4f:98:dc:11:b0:ae:02:17:71:ec:15:1c:16:5f:a9: 65:52:73:2f:19:40:4e:96:5b:7e:79:4a:af:9b:e4: 29:f3:b7:8f:77:c4:5c:cc:39:a9:21:7b:ff:21:31: ad:23:53:1b:22:59:7e:ae:fb:14:be:fc:b6:13:0e: 74:53:f9:45:8e:c5:8c:cc:d8:f7:c3:1c:33:80:53: 2d:66:2d:61:98:4a:88:a4:b2:e2:87:a1:31:ba:83: a0:b2:12:e2:0f:9e:e4:f8:ba:2f:4b:60:0d:59:99: 26:ac:fa:f6:33:95:93:9e:18:6f:8c:fb:1f:1d:d8: 12:d5:83:11:1a:c0:fc:83:bc:13:51:d0:fe:86:d5: ef:46:22:a1:60:e7:35:cb:79:2f:a8:5f:08:65:e1: 39:fa:34:16:3f:77:2f:50:60:8e:be:0a:31:27:fa: 85:0b:04:6f:70:59:d3:71:df:35:c7:3f:24:39:21: be:f8:b8:d7:cf:a1:e9:56:6d:5f:2e:95:cc:f3:df: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5F:37:E3:24:E0:59:89:F3:C6:44:2F:9A:A3:BD:FD:3A:88:5E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d13b873c-8ec7-3dd9-8f2e-39015fb9f5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c5:1b:78:c6:8c:0f:40:02:31:fd:ee:66:3a:ea:3c:c9:bb: 1a:ed:dc:15:fb:07:d8:4d:bb:27:b1:a8:e2:1e:55:8e:75:48: 32:b6:60:31:70:08:c8:1a:fd:b3:e6:b5:f6:f5:43:6c:c3:75: 3d:e8:7c:df:5a:9f:6c:ec:ff:73:42:8c:b7:64:3b:ba:e8:f7: ad:58:f6:f0:35:05:33:ea:db:67:f9:23:6a:29:a6:8b:85:12: 50:9a:9a:50:6f:6f:07:40:25:ef:8b:f0:ba:e9:6e:da:87:c5: aa:be:63:c3:df:a5:d9:5f:95:64:ee:43:d3:52:5f:41:01:98: ac:a7:33:9f:26:68:40:80:6e:f9:e6:90:81:22:09:79:94:c6: cd:2a:88:d5:d5:26:9b:8a:4e:20:ef:dd:c5:7d:55:10:7f:a9: de:54:a3:ba:96:5b:92:81:f1:56:a8:72:5d:9c:69:fc:e1:06: b2:b3:56:ff:a1:90:5e:3a:12:d3:23:bd:49:26:ef:ec:0f:61: 85:a6:17:f8:1e:78:a0:1b:fb:db:ea:d8:22:13:46:4b:a5:c7: bf:d7:93:ff:71:20:a1:d1:1d:de:7b:22:a6:0f:ea:5c:40:96: f0:d6:fc:9c:e1:83:ec:fe:30:7d:09:fa:4f:0b:89:37:10:8c: 27:5e:14:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhMEEHZi3LCIlUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBjZDA4OGYtNDk4ZS00ZWU0LTg2ZmQtMDg2MDAyZGI0YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0gPid4tZYizJx3kcadcOp7G85eGq3KRGr8D BgVSkjkMHU+jaq1RkrOSyIxn2OkIZ6DUJGMv21mRKR5PmNwRsK4CF3HsFRwWX6ll UnMvGUBOllt+eUqvm+Qp87ePd8RczDmpIXv/ITGtI1MbIll+rvsUvvy2Ew50U/lF jsWMzNj3wxwzgFMtZi1hmEqIpLLih6ExuoOgshLiD57k+LovS2ANWZkmrPr2M5WT nhhvjPsfHdgS1YMRGsD8g7wTUdD+htXvRiKhYOc1y3kvqF8IZeE5+jQWP3cvUGCO vgoxJ/qFCwRvcFnTcd81xz8kOSG++LjXz6HpVm1fLpXM899iYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBfN+Mk4FmJ88ZEL5qjvf06iF5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDEzYjg3M2MtOGVjNy0z ZGQ5LThmMmUtMzkwMTVmYjlmNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETFG3jGjA9AAjH97mY66jzJuxrt3BX7B9hNuyexqOIeVY51SDK2YDFw CMga/bPmtfb1Q2zDdT3ofN9an2zs/3NCjLdkO7ro961Y9vA1BTPq22f5I2oppouF ElCamlBvbwdAJe+L8LrpbtqHxaq+Y8PfpdlflWTuQ9NSX0EBmKynM58maECAbvnm kIEiCXmUxs0qiNXVJpuKTiDv3cV9VRB/qd5Uo7qWW5KB8Vaocl2cafzhBrKzVv+h kF46EtMjvUkm7+wPYYWmF/geeKAb+9vq2CITRkulx7/Xk/9xIKHRHd57IqYP6lxA lvDW/Jzhg+z+MH0J+k8LiTcQjCdeFCI= -----END CERTIFICATE-----Generated at Fri Sep 25 14:28:25 2026 by rpki-client