$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa File: 3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa (raw, json) Hash identifier: aLks9vaTuWPDzRS9PXD8uPYnA328S4s8a1ZmP6hvqJ4= Subject key identifier: 9F:ED:78:37:01:DE:C9:7E:AD:8C:11:88:2D:6C:C9:03:77:C3:7D:C0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA79A77B5D50C4EF00E4DCC40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 104.134.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:77:b5:d5:0c:4e:f0:0e:4d:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=56a31b20-459c-49d6-901c-730082b86529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:07:76:c0:d9:01:3e:18:f4:74:24:8b:ea: ba:04:29:75:8f:15:10:86:22:13:2b:2c:5e:a6:57: d5:47:d2:e5:02:57:3f:73:ab:a3:87:61:22:34:55: 4a:29:58:5a:16:28:5a:e8:e1:1c:b4:ad:70:ad:ae: c7:bf:5f:4d:9f:e8:6d:2a:7c:e8:ef:6f:ec:3a:33: 81:9f:d1:a9:03:fb:15:48:b7:25:90:90:5c:dc:24: d8:1d:a8:b8:88:c4:1b:dd:60:6a:f3:0c:89:78:55: bd:fc:0a:89:69:a5:cf:db:67:25:a3:c4:7d:7a:5a: d6:a2:3f:ef:09:44:a6:85:5a:c7:79:38:79:85:70: ab:56:6b:4f:ce:46:3d:41:60:48:ed:42:56:f2:6c: 2a:65:1f:4e:2c:38:d3:18:e2:47:8d:ef:4e:9e:67: f3:d8:0f:8c:91:62:d5:ad:74:b2:da:4c:42:55:bf: 03:f3:f5:0d:37:6c:1a:0d:ea:c9:38:07:5f:d9:b8: a8:f7:d5:f3:13:dc:bb:5b:d4:be:fd:77:15:0a:92: fa:da:39:76:89:3d:27:83:17:a8:c5:d3:e1:1b:17: 67:66:74:28:e4:02:4c:68:40:7d:59:09:36:28:8a: 8e:dc:e9:47:47:60:45:0c:5d:82:ec:6a:4a:2a:6c: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:78:37:01:DE:C9:7E:AD:8C:11:88:2D:6C:C9:03:77:C3:7D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3341bbfe-0602-3bce-a7a2-d721321d6c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8c:9f:0b:b7:dc:39:b6:77:fe:e5:59:68:17:52:be:91:7e: 75:9e:f7:22:03:75:88:91:6e:98:99:17:4d:b9:2a:41:c6:05: 97:07:9a:7a:e9:0e:b4:79:ef:e5:a1:61:13:69:21:57:e1:f3: 89:72:dc:a2:7f:ae:ad:a9:1d:32:65:a4:73:23:af:86:29:be: d9:bc:d1:ec:97:67:67:1a:1b:be:a9:29:4c:41:fb:c7:59:80: 6c:77:59:3d:b9:a4:b8:96:b2:e1:d6:d4:92:85:1d:f8:9c:f4: 24:d8:3c:aa:18:9f:91:24:e3:c6:07:9b:30:7d:f7:5e:38:ff: c7:f7:59:4c:e4:1e:2b:aa:26:30:49:02:ca:7e:44:67:a0:a4: 25:a3:83:fc:c0:1f:3e:aa:bc:bd:54:57:fc:1b:46:d2:b1:ef: dd:68:34:5b:d6:99:b5:fa:54:00:99:4e:44:81:27:ec:da:27: 33:57:8c:c4:5c:52:10:f8:a6:b2:d0:3d:4f:4d:c4:98:de:72: 4e:69:57:8a:48:70:f0:d0:94:a1:cc:84:7a:44:ec:fe:63:eb: 1f:4b:68:28:60:ed:b1:2f:bd:82:8f:81:fc:8a:54:4d:f7:86: b2:aa:f4:d9:fa:9c:35:e5:81:7f:44:7c:48:90:13:a7:1d:16: 54:65:73:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmne11QxO8A5NzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTZhMzFiMjAtNDU5Yy00OWQ2LTkwMWMtNzMwMDgyYjg2NTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5QHdsDZAT4Y9HQki+q6BCl1jxUQhiITKyxe plfVR9LlAlc/c6ujh2EiNFVKKVhaFiha6OEctK1wra7Hv19Nn+htKnzo72/sOjOB n9GpA/sVSLclkJBc3CTYHai4iMQb3WBq8wyJeFW9/AqJaaXP22clo8R9elrWoj/v CUSmhVrHeTh5hXCrVmtPzkY9QWBI7UJW8mwqZR9OLDjTGOJHje9Onmfz2A+MkWLV rXSy2kxCVb8D8/UNN2waDerJOAdf2bio99XzE9y7W9S+/XcVCpL62jl2iT0ngxeo xdPhGxdnZnQo5AJMaEB9WQk2KIqO3OlHR2BFDF2C7GpKKmzjswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/teDcB3sl+rYwRiC1syQN3w33AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzM0MWJiZmUtMDYwMi0z YmNlLWE3YTItZDcyMTMyMWQ2YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmMnwu33Dm2d/7lWWgXUr6RfnWe9yIDdYiRbpiZF025KkHGBZcHmnrp DrR57+WhYRNpIVfh84ly3KJ/rq2pHTJlpHMjr4Ypvtm80eyXZ2caG76pKUxB+8dZ gGx3WT25pLiWsuHW1JKFHfic9CTYPKoYn5Ek48YHmzB99144/8f3WUzkHiuqJjBJ Asp+RGegpCWjg/zAHz6qvL1UV/wbRtKx791oNFvWmbX6VACZTkSBJ+zaJzNXjMRc UhD4prLQPU9NxJjeck5pV4pIcPDQlKHMhHpE7P5j6x9LaChg7bEvvYKPgfyKVE33 hrKq9Nn6nDXlgX9EfEiQE6cdFlRlc/o= -----END CERTIFICATE-----Generated at Thu Sep 10 19:56:20 2026 by rpki-client