$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa File: 10ef1877-c0c5-3e4e-b34b-dc7258983421.roa (raw, json) Hash identifier: kdYtrpzY72zy9lmlwWvVJB+gMr2npW1ksdyq0catXfU= Subject key identifier: C6:09:5E:65:5C:63:E3:83:7A:49:32:E4:FD:C0:B3:B5:B8:9A:07:30 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7956ADF0ADF10D57B335D80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.132.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:6a:df:0a:df:10:d5:7b:33:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0d029027-64f0-4c84-9dc3-df1440bf02cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:70:01:57:45:f6:87:30:3b:e7:58:54:dd: bc:1a:76:e1:54:db:ef:e9:4d:cb:8c:da:95:5b:e0: 9d:6e:f0:27:bd:5b:09:28:52:e7:49:90:fa:d3:3e: 39:b4:93:1f:23:dd:dd:7e:af:5e:d6:8a:0a:16:5b: 18:cc:fc:58:8d:da:4a:9c:c0:46:9f:36:fd:8a:ed: 0a:2b:84:ad:fb:31:98:34:54:5d:ec:3d:24:2d:f9: d9:93:23:83:9a:50:b0:96:12:6f:2d:48:b5:f2:1d: 8b:82:53:20:93:f2:71:da:8a:b2:fc:2e:09:ef:58: 18:0f:4c:bb:ba:0e:5a:02:fd:48:12:88:8b:b9:f2: a6:3d:84:a4:39:24:2c:a1:d0:e1:1f:6e:3c:67:ec: a6:96:bd:b5:4d:33:c3:be:91:6e:2d:86:b5:bb:9e: 6e:a7:4a:3a:4e:cf:44:ed:85:52:1e:81:16:7b:04: 1e:81:ce:ac:03:fd:dc:27:75:88:42:07:4f:9f:c6: 89:f2:d8:e6:97:50:d0:a8:cf:9e:84:62:a2:fd:ec: 3f:eb:ef:61:40:5d:88:60:ee:ab:f2:7d:7a:e7:4e: 7e:02:9a:91:7e:f9:5b:01:c2:71:9a:99:a7:50:eb: 41:47:a5:7b:eb:4c:72:d5:4f:b5:51:66:60:4f:96: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:09:5E:65:5C:63:E3:83:7A:49:32:E4:FD:C0:B3:B5:B8:9A:07:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ab:77:0a:34:cf:2f:01:13:d8:09:da:22:ce:ec:73:1f:cd: 92:21:de:21:6e:26:51:dd:dd:e9:c2:95:fe:4f:d4:67:3c:d0: 46:5e:69:23:3a:a4:19:5c:3f:ab:4b:74:d1:36:db:82:2f:1e: ab:a0:e8:23:81:5c:63:6e:58:91:19:2a:e5:0b:70:f2:5c:b6: a3:af:73:b5:f6:77:12:b2:0b:68:53:4c:98:96:1a:fd:6d:23: 85:41:78:be:05:18:2b:52:e1:91:bd:73:65:42:d2:db:20:c6: 3b:83:b6:c1:5f:9f:94:d4:03:db:0c:4d:1a:e2:5f:06:77:0b: ff:8e:dc:c6:a8:ac:2a:c9:6e:79:a9:6c:ae:3c:01:30:50:48: 31:62:c2:16:ea:4a:e6:67:96:d6:32:21:f5:92:ed:44:10:9c: d9:7b:ae:75:40:0e:d8:20:bc:49:74:a8:ae:04:c8:8a:81:61: 7e:19:78:f4:06:06:b7:ef:8f:78:d3:2a:cd:f4:d0:72:32:e7: 97:b4:c2:bb:67:c5:76:09:a1:61:62:76:15:1d:e2:30:e1:a6: ae:49:d4:ff:a5:48:c8:75:cf:54:47:df:e6:ce:55:a9:3d:b5: a2:67:07:8b:e7:c5:f7:cf:da:87:34:6b:02:c7:67:b8:b5:c4: e8:59:d6:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlWrfCt8Q1XszXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGQwMjkwMjctNjRmMC00Yzg0LTlkYzMtZGYxNDQwYmYwMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmBwAVdF9ocwO+dYVN28GnbhVNvv6U3LjNqV W+CdbvAnvVsJKFLnSZD60z45tJMfI93dfq9e1ooKFlsYzPxYjdpKnMBGnzb9iu0K K4St+zGYNFRd7D0kLfnZkyODmlCwlhJvLUi18h2LglMgk/Jx2oqy/C4J71gYD0y7 ug5aAv1IEoiLufKmPYSkOSQsodDhH248Z+ymlr21TTPDvpFuLYa1u55up0o6Ts9E 7YVSHoEWewQegc6sA/3cJ3WIQgdPn8aJ8tjml1DQqM+ehGKi/ew/6+9hQF2IYO6r 8n16505+ApqRfvlbAcJxmpmnUOtBR6V760xy1U+1UWZgT5alTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYJXmVcY+ODekky5P3As7W4mgcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTBlZjE4NzctYzBjNS0z ZTRlLWIzNGItZGM3MjU4OTgzNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWrdwo0zy8BE9gJ2iLO7HMfzZIh3iFuJlHd3enClf5P1Gc80EZeaSM6 pBlcP6tLdNE224IvHqug6COBXGNuWJEZKuULcPJctqOvc7X2dxKyC2hTTJiWGv1t I4VBeL4FGCtS4ZG9c2VC0tsgxjuDtsFfn5TUA9sMTRriXwZ3C/+O3MaorCrJbnmp bK48ATBQSDFiwhbqSuZnltYyIfWS7UQQnNl7rnVADtggvEl0qK4EyIqBYX4ZePQG Brfvj3jTKs300HIy55e0wrtnxXYJoWFidhUd4jDhpq5J1P+lSMh1z1RH3+bOVak9 taJnB4vnxffP2oc0awLHZ7i1xOhZ1qY= -----END CERTIFICATE-----Generated at Thu Sep 10 19:25:23 2026 by rpki-client