$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa File: 5cb1ed81-7286-331b-baf6-f8df13e27704.roa (raw, json) Hash identifier: dGUNdygNfBXR1fd5VVyRj//IpI8/rRA1wUC3x2h5t6A= Subject key identifier: 90:BF:30:83:9A:64:C7:C7:0F:5E:12:12:2C:08:B3:54:BE:68:70:9A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA794DBD4AA9AB2EE8D66CF00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.132.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:db:d4:aa:9a:b2:ee:8d:66:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dd352502-85c8-48e3-a05c-67043e464572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:46:26:bd:ac:42:83:20:0d:94:09:34:99: af:46:14:a6:a3:56:07:9a:ca:f4:19:c4:e7:82:c9: 27:1f:4c:a6:ef:12:d8:aa:25:f2:0a:7f:75:5a:ef: 05:37:61:a0:33:00:75:dd:2e:d7:a5:dd:a4:73:0a: ca:8a:2c:47:a3:d4:5f:36:42:02:9e:ad:5f:fd:77: ce:dd:f0:c6:53:80:8d:1d:9c:5f:f7:23:ec:5d:49: 24:c3:25:79:42:9a:ab:97:10:89:d8:f3:22:5a:d3: 9f:62:ca:60:d0:bc:62:4a:e8:58:00:c9:32:69:11: 95:8f:ca:e3:fb:8d:41:ec:9b:e2:c0:e0:e8:c0:ca: d1:bf:b8:b5:35:e5:1d:9c:5f:a7:7f:01:21:86:87: d7:19:7b:8f:d3:07:77:b8:a1:bb:0a:68:9b:41:07: 9b:49:1d:f4:3c:eb:b0:7f:8d:f8:0d:0f:48:e0:ab: 9c:ae:c0:3b:0e:86:17:3a:be:21:b5:8d:0a:bb:15: bb:29:32:ce:e8:db:f9:b2:1c:55:b7:3f:bf:d7:d0: a3:7c:1e:03:52:03:d1:1c:06:78:86:5c:c8:fb:8b: dc:66:4b:ce:c9:e1:0e:0f:33:59:e6:9b:d4:fc:04: 87:f9:e0:7c:cb:ed:dd:6f:1c:8e:d3:b7:f8:7d:30: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BF:30:83:9A:64:C7:C7:0F:5E:12:12:2C:08:B3:54:BE:68:70:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5cb1ed81-7286-331b-baf6-f8df13e27704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7f:28:73:8d:03:e0:1c:4f:23:16:f0:65:29:9a:45:09:a5: 30:bb:01:ec:82:0d:a7:ff:e6:ac:91:32:c5:7c:3e:09:d7:14: b9:65:6e:86:51:8b:9b:d8:d4:28:de:78:cb:48:70:73:a0:b8: c6:4a:30:30:60:09:82:dc:e8:d8:e5:5c:57:82:41:82:c7:87: 0c:c1:ce:8b:70:b2:31:57:9c:ea:c7:41:e1:9c:2c:8a:74:8f: 25:08:46:9c:16:2b:a7:b3:f6:3e:86:98:a2:e4:c6:03:f7:d0: ec:4f:2b:a8:80:c5:fb:d1:df:17:b2:ac:f0:2a:41:c2:85:5f: 8a:6c:05:6f:5a:49:a4:9c:28:38:e2:0f:29:56:4c:aa:fd:90: 4f:f0:17:04:ef:73:a0:03:86:6c:fe:a5:96:ce:71:ed:95:2a: aa:74:15:d3:56:b0:2e:1e:27:88:47:fc:c6:71:89:0d:2c:5c: f9:9c:80:61:52:2e:1f:06:7d:00:1c:8e:f6:a4:dc:46:c3:ab: 04:2f:1b:ee:87:17:96:b2:d6:75:62:11:fe:87:76:78:92:de: 11:d5:0f:17:4e:59:34:eb:cb:62:1e:6e:0e:2a:fa:0e:62:f9: 5d:22:e7:e6:07:9e:0b:66:fe:3d:ef:46:35:23:6c:3e:8b:99: 55:30:b8:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlNvUqpqy7o1mzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGQzNTI1MDItODVjOC00OGUzLWEwNWMtNjcwNDNlNDY0NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZGJr2sQoMgDZQJNJmvRhSmo1YHmsr0GcTn gsknH0ym7xLYqiXyCn91Wu8FN2GgMwB13S7Xpd2kcwrKiixHo9RfNkICnq1f/XfO 3fDGU4CNHZxf9yPsXUkkwyV5QpqrlxCJ2PMiWtOfYspg0LxiSuhYAMkyaRGVj8rj +41B7JviwODowMrRv7i1NeUdnF+nfwEhhofXGXuP0wd3uKG7CmibQQebSR30POuw f434DQ9I4KucrsA7DoYXOr4htY0KuxW7KTLO6Nv5shxVtz+/19CjfB4DUgPRHAZ4 hlzI+4vcZkvOyeEODzNZ5pvU/ASH+eB8y+3dbxyO07f4fTBGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC/MIOaZMfHD14SEiwIs1S+aHCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWNiMWVkODEtNzI4Ni0z MzFiLWJhZjYtZjhkZjEzZTI3NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1/KHONA+AcTyMW8GUpmkUJpTC7AeyCDaf/5qyRMsV8PgnXFLllboZR i5vY1CjeeMtIcHOguMZKMDBgCYLc6NjlXFeCQYLHhwzBzotwsjFXnOrHQeGcLIp0 jyUIRpwWK6ez9j6GmKLkxgP30OxPK6iAxfvR3xeyrPAqQcKFX4psBW9aSaScKDji DylWTKr9kE/wFwTvc6ADhmz+pZbOce2VKqp0FdNWsC4eJ4hH/MZxiQ0sXPmcgGFS Lh8GfQAcjvak3EbDqwQvG+6HF5ay1nViEf6HdniS3hHVDxdOWTTry2Iebg4q+g5i +V0i5+YHngtm/j3vRjUjbD6LmVUwuFE= -----END CERTIFICATE-----Generated at Thu Sep 10 19:58:58 2026 by rpki-client