$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1034f7e9-a751-337a-a27e-2f56bb7a502a.roa File: 1034f7e9-a751-337a-a27e-2f56bb7a502a.roa (raw, json) Hash identifier: u65DGdXJReg+BqdqVVjJDwZQpFrJ+/oItVjkpFfdD2k= Subject key identifier: F4:B8:B7:A9:92:6C:B5:17:08:DB:4E:7F:E7:D9:1B:33:0B:C8:9C:BB Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497CA2452E7B0048E57EC300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1034f7e9-a751-337a-a27e-2f56bb7a502a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:a2:45:2e:7b:00:48:e5:7e:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec648a02-8a34-45b7-aedd-43b4f4cd8235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:bc:06:b6:ff:dd:db:89:af:17:bf:cd:3b: 41:fc:16:8c:25:15:8f:7d:8a:4c:62:7e:ce:cb:2d: 8d:a8:8b:a2:ea:4e:49:b9:5e:7b:84:ca:09:e6:28: ec:c2:92:fa:a9:ec:80:35:42:1b:ac:19:8a:55:f7: f9:f5:7b:c1:ae:8d:5b:45:ea:d8:84:5d:7f:29:d1: 99:9f:af:18:c4:f9:cf:a8:d7:58:6a:ea:67:8c:a1: bd:17:87:7c:4e:f4:fc:2d:d8:ae:23:b6:21:fe:ef: f0:3e:fa:01:53:9b:b9:7c:4e:6b:a9:c4:83:e6:86: a0:32:91:c6:ff:db:5f:55:4c:de:4f:e0:85:5d:18: 61:05:25:fc:44:19:c5:c0:40:8c:87:2c:e6:8a:9a: ea:69:6c:ce:2b:d7:c8:26:26:8a:91:1c:41:66:a0: 15:44:c8:5a:92:90:e9:a6:51:d7:e8:89:2e:57:9a: a7:54:5d:3a:64:1e:c1:cd:0e:94:61:aa:53:f1:1e: ae:67:a4:f7:74:b8:2a:cd:6b:fd:35:3e:4c:82:f8: e9:e2:c2:a4:dd:29:0d:10:34:4d:80:58:f1:9f:ba: 60:68:88:fd:1c:6b:4a:f0:fb:cc:9b:eb:0f:40:56: 8e:e7:5f:a9:44:e5:32:27:9d:0d:f4:b9:c4:56:7a: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B8:B7:A9:92:6C:B5:17:08:DB:4E:7F:E7:D9:1B:33:0B:C8:9C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1034f7e9-a751-337a-a27e-2f56bb7a502a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9f:a3:d4:7c:81:3d:f5:9d:a7:be:b7:e8:21:bb:f0:e3:4e: f8:48:96:4e:ea:86:30:ce:79:40:4f:d5:c5:0a:b9:7e:c2:62: 52:05:b0:85:40:9c:e6:35:37:31:ac:e7:01:25:8d:ee:e0:72: 77:e7:55:b0:bd:bc:d0:fd:99:74:f4:b2:86:07:96:4f:de:b0: 87:db:b9:d0:0d:7f:1d:8a:d2:91:78:44:0a:a0:07:ce:71:7e: 86:66:4e:d8:85:93:78:94:fb:b4:46:e7:7d:b7:cb:67:45:68: c3:8a:01:9a:e7:8d:9f:65:a3:e2:65:ea:14:14:39:cc:6d:71: 91:83:8d:30:97:65:59:95:52:17:1d:51:5a:6c:4e:9d:df:c9: ea:6e:b4:c7:40:55:01:a5:d5:cc:20:1d:aa:fd:46:88:79:17: ac:bd:af:05:d0:a9:a9:55:e6:88:0d:c6:64:e9:46:61:fd:7f: c6:13:16:30:58:76:e0:a8:c4:d6:a3:b3:f5:ce:3a:14:63:24: 0d:12:6a:8b:05:9d:c9:83:b2:89:79:c7:3e:69:b3:53:73:cc: a4:99:80:a1:d7:04:fa:20:33:f1:30:dd:00:40:97:59:d9:33: 34:33:cb:b6:e3:58:83:a6:d8:21:3f:01:67:c6:c4:33:20:b1: 00:81:87:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfKJFLnsASOV+wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM2NDhhMDItOGEzNC00NWI3LWFlZGQtNDNiNGY0Y2Q4MjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWu8Brb/3duJrxe/zTtB/BaMJRWPfYpMYn7O yy2NqIui6k5JuV57hMoJ5ijswpL6qeyANUIbrBmKVff59XvBro1bRerYhF1/KdGZ n68YxPnPqNdYaupnjKG9F4d8TvT8LdiuI7Yh/u/wPvoBU5u5fE5rqcSD5oagMpHG /9tfVUzeT+CFXRhhBSX8RBnFwECMhyzmiprqaWzOK9fIJiaKkRxBZqAVRMhakpDp plHX6IkuV5qnVF06ZB7BzQ6UYapT8R6uZ6T3dLgqzWv9NT5Mgvjp4sKk3SkNEDRN gFjxn7pgaIj9HGtK8PvMm+sPQFaO51+pROUyJ50N9LnEVnrMmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS4t6mSbLUXCNtOf+fZGzMLyJy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTAzNGY3ZTktYTc1MS0z MzdhLWEyN2UtMmY1NmJiN2E1MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFafo9R8gT31nae+t+ghu/DjTvhIlk7qhjDOeUBP1cUKuX7CYlIFsIVA nOY1NzGs5wElje7gcnfnVbC9vND9mXT0soYHlk/esIfbudANfx2K0pF4RAqgB85x foZmTtiFk3iU+7RG5323y2dFaMOKAZrnjZ9lo+Jl6hQUOcxtcZGDjTCXZVmVUhcd UVpsTp3fyeputMdAVQGl1cwgHar9Roh5F6y9rwXQqalV5ogNxmTpRmH9f8YTFjBY duCoxNajs/XOOhRjJA0SaosFncmDsol5xz5ps1NzzKSZgKHXBPogM/Ew3QBAl1nZ MzQzy7bjWIOm2CE/AWfGxDMgsQCBhyQ= -----END CERTIFICATE-----Generated at Sun Nov 1 13:02:17 2026 by rpki-client