$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c8e9521-47ac-3654-9873-8792d5f2d00a.roa File: 1c8e9521-47ac-3654-9873-8792d5f2d00a.roa (raw, json) Hash identifier: Q0+PyXiqnn1crzV53hk/y6WlIEmP8ZXvjlwZwh8USVY= Subject key identifier: 5E:15:87:0C:D3:C3:78:CC:C6:B3:22:DE:70:36:2A:CD:E9:31:14:06 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7957F42E9C6039362EB1200 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c8e9521-47ac-3654-9873-8792d5f2d00a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.132.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:7f:42:e9:c6:03:93:62:eb:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4fed930a-9c26-49b0-89f2-ef92c63673cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:bf:96:62:36:90:80:97:e0:f6:e5:44:d0: d8:16:53:52:72:1e:6c:c0:68:85:c4:ab:03:a4:37: 95:e0:c2:0d:36:12:bc:eb:e9:6a:45:47:33:3e:ed: 09:5d:e1:6b:63:bf:c8:8e:e0:3d:f1:f9:c7:b9:9b: 7b:8e:32:57:e0:b6:22:36:99:80:6f:63:d1:14:5a: 4c:93:ff:bb:fb:f1:b7:f8:41:cb:70:5b:0c:ac:36: b3:4b:1c:96:de:9f:96:0d:8d:cb:be:a9:b7:1d:a9: b7:e4:d7:1c:df:cc:90:c3:5e:77:3a:26:f1:e2:92: 45:f8:c6:b4:eb:ba:cb:e7:a6:39:43:cd:5b:20:0f: de:ae:06:0f:65:05:4a:f2:a8:c6:5a:2b:f2:50:e7: c5:87:24:0e:4f:06:c9:b3:1a:9f:4f:91:3f:c3:30: f7:18:3e:1a:ec:33:0c:17:31:50:0a:d0:f4:b4:6b: 02:f9:98:d7:ae:1c:00:15:37:5f:d2:99:76:9e:a3: 6e:f8:b8:c4:df:52:4a:43:45:f0:69:45:3c:cf:b3: a1:4b:f8:c3:00:c9:5e:61:70:60:30:6d:7d:ed:c8: 08:2c:cf:d6:c8:c9:b2:e9:3f:7c:25:46:05:ec:32: 9f:94:fa:f8:3a:6c:e7:41:29:12:3c:89:31:cf:9b: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:15:87:0C:D3:C3:78:CC:C6:B3:22:DE:70:36:2A:CD:E9:31:14:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c8e9521-47ac-3654-9873-8792d5f2d00a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:47:23:d0:fc:6f:f0:2e:22:06:03:4e:88:3a:de:8c:82:3b: 99:3c:28:68:73:aa:ce:1d:54:ff:d3:9e:74:c9:e8:cc:09:99: 00:d1:36:41:9b:16:b3:3e:b9:48:68:97:44:5b:38:4d:5a:5e: f0:4d:16:fd:4d:1f:ca:6e:41:b2:fa:c4:bc:b9:a2:f7:e2:65: 6b:2f:21:cc:74:79:89:a9:6e:e4:94:4f:64:2a:38:7f:46:71: aa:d4:53:2d:c1:cb:4c:a4:de:b2:dd:de:4d:84:12:9c:8f:16: 9d:ca:96:ed:55:f9:28:fe:1c:56:b1:d4:4c:37:d7:96:f3:14: 1c:ce:68:68:df:39:7f:6e:11:27:df:b2:70:a2:1c:5a:7f:6f: 37:9a:30:07:8a:d2:26:d4:60:75:ed:0c:a0:74:c1:67:5d:dd: bf:56:8f:63:e0:95:c6:f3:09:12:e8:d9:de:a0:91:56:13:8c: 91:8c:33:af:a5:5c:c2:a7:04:5b:ba:04:77:40:91:64:d4:43: 5e:e8:11:09:71:d6:5a:a8:8a:92:88:cf:90:fa:8f:42:53:7a: 27:cf:3a:90:6c:5c:1c:ca:4d:da:29:68:20:bf:2c:cb:d0:98: 4c:1b:a7:06:39:6d:b2:75:5f:0b:d9:03:97:25:de:fd:cd:de: 77:7a:38:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlX9C6cYDk2LrEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGZlZDkzMGEtOWMyNi00OWIwLTg5ZjItZWY5MmM2MzY3M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aq/lmI2kICX4PblRNDYFlNSch5swGiFxKsD pDeV4MINNhK86+lqRUczPu0JXeFrY7/IjuA98fnHuZt7jjJX4LYiNpmAb2PRFFpM k/+7+/G3+EHLcFsMrDazSxyW3p+WDY3Lvqm3Ham35Ncc38yQw153Oibx4pJF+Ma0 67rL56Y5Q81bIA/ergYPZQVK8qjGWivyUOfFhyQOTwbJsxqfT5E/wzD3GD4a7DMM FzFQCtD0tGsC+ZjXrhwAFTdf0pl2nqNu+LjE31JKQ0XwaUU8z7OhS/jDAMleYXBg MG197cgILM/WyMmy6T98JUYF7DKflPr4OmznQSkSPIkxz5t9jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4VhwzTw3jMxrMi3nA2Ks3pMRQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWM4ZTk1MjEtNDdhYy0z NjU0LTk4NzMtODc5MmQ1ZjJkMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItHI9D8b/AuIgYDTog63oyCO5k8KGhzqs4dVP/TnnTJ6MwJmQDRNkGb FrM+uUhol0RbOE1aXvBNFv1NH8puQbL6xLy5ovfiZWsvIcx0eYmpbuSUT2QqOH9G carUUy3By0yk3rLd3k2EEpyPFp3Klu1V+Sj+HFax1Ew315bzFBzOaGjfOX9uESff snCiHFp/bzeaMAeK0ibUYHXtDKB0wWdd3b9Wj2PglcbzCRLo2d6gkVYTjJGMM6+l XMKnBFu6BHdAkWTUQ17oEQlx1lqoipKIz5D6j0JTeifPOpBsXBzKTdopaCC/LMvQ mEwbpwY5bbJ1XwvZA5cl3v3N3nd6OIY= -----END CERTIFICATE-----Generated at Fri Sep 11 05:57:53 2026 by rpki-client