$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01d455de-e07c-3a9d-8efb-7b0a3ec8fe4b.roa File: 01d455de-e07c-3a9d-8efb-7b0a3ec8fe4b.roa (raw, json) Hash identifier: 3OKOSQ9UChVGv36FZ7lJHU34K5jZynV0UCZEnvElFEY= Subject key identifier: 72:D7:F8:E0:43:75:E3:C8:52:01:D5:C1:7A:5D:81:94:08:A6:80:A3 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984A7E0E0C657BE3AC3C680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01d455de-e07c-3a9d-8efb-7b0a3ec8fe4b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395973 IP address blocks: 104.134.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:a7:e0:e0:c6:57:be:3a:c3:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b0f6d37b-5c43-41fd-bde9-0e6c8e08a556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:6f:c6:ea:bd:ff:bf:e9:39:a3:5c:33:65: 7b:aa:4e:b0:3a:c1:4f:8e:7f:bf:44:da:98:7b:65: 72:08:05:3b:80:93:36:7d:91:6e:0b:27:c4:90:54: a7:2d:cc:1b:f5:98:1e:58:06:87:82:98:22:00:36: f3:b2:cc:2d:2f:e7:a6:ec:38:bf:ec:0f:aa:e8:72: f4:ba:73:b0:64:12:ef:7a:60:74:a5:c9:1f:9d:00: d9:f9:98:5a:c0:ce:38:99:f5:13:e2:3b:7b:06:b9: 76:51:e9:c7:2a:f5:a7:6b:91:7e:b2:b8:3d:2e:4a: 2d:dd:fb:41:e5:3f:9b:23:57:81:42:f4:19:64:63: 28:ed:de:b3:89:dc:0f:d2:15:06:a6:30:fe:c9:a9: b2:83:be:de:ee:25:18:a3:c6:7b:f8:a1:28:e5:c7: fe:d0:8a:2e:3c:3c:e9:b9:63:5c:34:6a:a7:ff:a0: 50:5d:6f:e5:df:6a:ea:9b:6d:ed:d4:2e:64:40:7c: ea:26:04:3a:55:6f:65:29:a3:08:21:42:60:c0:c3: 7c:5f:9e:4f:44:e9:cf:4e:3c:6a:54:4e:6d:a9:1e: 11:28:6b:8a:6e:c7:33:30:27:4f:da:f3:8c:0c:fd: c5:5a:85:f5:d1:d0:35:8a:09:5c:e5:ff:7c:de:4b: 7e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D7:F8:E0:43:75:E3:C8:52:01:D5:C1:7A:5D:81:94:08:A6:80:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01d455de-e07c-3a9d-8efb-7b0a3ec8fe4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c6:5f:a5:51:1d:f2:9e:b7:4f:1c:ad:d7:3b:bb:8a:8c:ce: 07:1a:30:98:27:b6:93:40:00:77:d8:f2:ab:c1:78:4a:e6:4f: 2d:68:5c:a7:a1:57:4c:88:78:09:16:97:f6:b0:5a:01:6f:5b: 2c:2d:db:52:6d:be:b5:82:8d:8e:89:f3:b7:60:ea:97:7d:7e: df:c3:ee:63:6c:86:00:b8:25:dd:e2:45:95:7f:0d:0c:dc:7e: 4f:9c:16:23:c0:dd:1b:a8:cf:49:62:67:3e:be:0a:db:35:50: 71:a4:36:ab:18:3c:d3:df:c4:18:93:d6:d6:06:bd:fe:a6:4d: 31:15:8c:4e:17:ed:61:72:6f:f6:43:1f:4d:aa:25:17:d9:ff: bc:18:9e:c4:8e:24:8e:b3:13:76:2c:50:98:71:bb:7d:2b:fa: 30:79:8f:38:3f:48:b0:87:ab:d6:40:8a:96:95:97:49:0a:57: 22:44:ea:bc:af:8a:9a:32:e2:b5:c7:54:ae:36:67:30:b3:c0: f5:c5:3c:d3:6b:6f:3d:41:c6:2e:30:11:1c:8d:8a:37:ed:fd: 67:42:07:cc:cf:02:4c:71:c9:69:22:c0:c7:4e:db:3c:41:f4: 8b:26:1c:6a:53:2c:49:13:a0:9a:62:99:b2:f0:6e:7b:21:d9: 29:7d:4f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKfg4MZXvjrDxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjBmNmQzN2ItNWM0My00MWZkLWJkZTktMGU2YzhlMDhhNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9lvxuq9/7/pOaNcM2V7qk6wOsFPjn+/RNqY e2VyCAU7gJM2fZFuCyfEkFSnLcwb9ZgeWAaHgpgiADbzsswtL+em7Di/7A+q6HL0 unOwZBLvemB0pckfnQDZ+ZhawM44mfUT4jt7Brl2UenHKvWna5F+srg9Lkot3ftB 5T+bI1eBQvQZZGMo7d6zidwP0hUGpjD+yamyg77e7iUYo8Z7+KEo5cf+0IouPDzp uWNcNGqn/6BQXW/l32rqm23t1C5kQHzqJgQ6VW9lKaMIIUJgwMN8X55PROnPTjxq VE5tqR4RKGuKbsczMCdP2vOMDP3FWoX10dA1iglc5f983kt+gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLX+OBDdePIUgHVwXpdgZQIpoCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDFkNDU1ZGUtZTA3Yy0z YTlkLThlZmItN2IwYTNlYzhmZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLGX6VRHfKet08crdc7u4qMzgcaMJgntpNAAHfY8qvBeErmTy1oXKeh V0yIeAkWl/awWgFvWywt21JtvrWCjY6J87dg6pd9ft/D7mNshgC4Jd3iRZV/DQzc fk+cFiPA3Ruoz0liZz6+Cts1UHGkNqsYPNPfxBiT1tYGvf6mTTEVjE4X7WFyb/ZD H02qJRfZ/7wYnsSOJI6zE3YsUJhxu30r+jB5jzg/SLCHq9ZAipaVl0kKVyJE6ryv ipoy4rXHVK42ZzCzwPXFPNNrbz1Bxi4wERyNijft/WdCB8zPAkxxyWkiwMdO2zxB 9IsmHGpTLEkToJpimbLwbnsh2Sl9T48= -----END CERTIFICATE-----Generated at Fri Oct 30 18:06:38 2026 by rpki-client