$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/665a966b-a944-3749-9ecf-e64afd213b9c.roa File: 665a966b-a944-3749-9ecf-e64afd213b9c.roa (raw, json) Hash identifier: Bm0i+M8fph8nQIVZCyDIGL6kAETPOypIhq//wC1Gcv4= Subject key identifier: C8:1E:5B:9F:C9:77:5C:39:A3:A9:01:3C:6A:E8:EF:48:F9:77:9D:6F Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F5A33346A7CD5C186F83B9E80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/665a966b-a944-3749-9ecf-e64afd213b9c.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 36411 IP address blocks: 104.134.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:34:6a:7c:d5:c1:86:f8:3b:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=01a4421b-3ef5-4b61-9627-2548c8efd9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:c3:ac:c4:eb:d7:0b:4b:4a:fe:91:94:fb: ea:ac:1a:dc:1d:80:6c:82:c5:cc:52:b9:bc:b4:90: d8:db:fb:33:f5:95:b4:f6:a4:d4:20:28:58:c6:a9: 23:08:3b:b0:da:a0:13:35:94:77:50:70:53:1c:64: 47:b2:3a:6b:27:0f:7e:b0:e6:ed:01:94:6f:57:81: d9:48:5d:0a:e3:0b:be:c9:29:87:ae:3f:42:87:41: 80:f4:23:8c:f0:f9:85:ed:62:ae:9a:35:9a:63:58: 91:3e:ef:c3:b5:f6:e0:9a:2c:e8:11:ab:4f:0d:1f: c8:f9:f8:df:25:c7:0b:7a:ec:2f:0b:97:62:c1:19: 09:38:32:1c:d0:e0:ad:26:a2:db:c7:1d:b8:d9:05: 41:94:d5:eb:3d:c9:e4:8e:27:41:96:d2:64:67:e9: c3:9b:e4:1f:5a:96:63:b2:e7:21:8c:ca:7c:b2:9c: 9d:08:2e:a8:0d:c4:4a:fd:3e:02:5c:6e:04:6c:ed: a3:9e:40:09:e1:7e:f6:bb:5f:66:95:96:89:cb:8e: dc:e2:01:60:62:2e:b3:98:f7:46:3e:03:6b:21:fd: 6a:a5:ed:25:45:21:fb:a0:2d:0e:ef:d7:84:8e:10: 17:81:e9:45:bd:d9:ea:81:18:a1:6b:d0:7b:f0:45: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1E:5B:9F:C9:77:5C:39:A3:A9:01:3C:6A:E8:EF:48:F9:77:9D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/665a966b-a944-3749-9ecf-e64afd213b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0d:3e:a2:df:1f:ea:c3:2a:c2:fb:f7:35:67:c6:f8:95:0d: d3:17:95:9b:b5:6d:9d:c0:f7:f6:86:31:14:c7:d4:58:21:6e: 42:c6:15:ec:6c:1e:fc:ee:7b:9d:f5:c9:ea:a4:89:b8:14:58: 07:9b:a0:1c:07:6b:c0:b8:94:26:01:fa:da:1b:7e:e5:f7:68: 25:59:e3:3a:e0:4f:e9:87:38:f5:09:4a:55:1d:bf:b5:9b:aa: a6:c2:bd:0d:c6:d0:33:00:2d:6a:b6:50:bc:2f:fd:12:20:34: bd:23:a3:7c:f3:49:81:15:0b:4f:f4:23:a9:3a:23:54:8e:94: f5:69:13:e6:48:f3:dd:73:1b:88:e4:78:ab:4f:a2:08:2b:18: 6d:e4:d7:d6:97:06:bf:e3:76:27:70:07:76:04:6f:a8:f7:c1: 1f:ed:c7:7c:f3:3d:fd:2e:57:7a:76:e6:62:31:82:74:1e:13: 5e:ba:87:ce:6c:83:7f:43:d7:32:cf:83:76:46:68:12:7c:52: 47:09:28:aa:0b:d0:1d:bb:fa:4a:0c:20:cf:a2:5f:10:b1:6e: d7:39:63:7a:eb:c6:b7:b9:18:a6:f6:94:06:64:dc:e5:bf:75: d1:e0:a0:8b:9c:47:9e:33:c7:25:96:a7:49:18:1a:17:5f:2a: ab:33:f5:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzRqfNXBhvg7noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDFhNDQyMWItM2VmNS00YjYxLTk2MjctMjU0OGM4ZWZkOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4nDrMTr1wtLSv6RlPvqrBrcHYBsgsXMUrm8 tJDY2/sz9ZW09qTUIChYxqkjCDuw2qATNZR3UHBTHGRHsjprJw9+sObtAZRvV4HZ SF0K4wu+ySmHrj9Ch0GA9COM8PmF7WKumjWaY1iRPu/DtfbgmizoEatPDR/I+fjf JccLeuwvC5diwRkJODIc0OCtJqLbxx242QVBlNXrPcnkjidBltJkZ+nDm+QfWpZj suchjMp8spydCC6oDcRK/T4CXG4EbO2jnkAJ4X72u19mlZaJy47c4gFgYi6zmPdG PgNrIf1qpe0lRSH7oC0O79eEjhAXgelFvdnqgRiha9B78EV3dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgeW5/Jd1w5o6kBPGro70j5d51vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjY1YTk2NmItYTk0NC0z NzQ5LTllY2YtZTY0YWZkMjEzYjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsNPqLfH+rDKsL79zVnxviVDdMXlZu1bZ3A9/aGMRTH1FghbkLGFexs Hvzue531yeqkibgUWAeboBwHa8C4lCYB+tobfuX3aCVZ4zrgT+mHOPUJSlUdv7Wb qqbCvQ3G0DMALWq2ULwv/RIgNL0jo3zzSYEVC0/0I6k6I1SOlPVpE+ZI891zG4jk eKtPoggrGG3k19aXBr/jdidwB3YEb6j3wR/tx3zzPf0uV3p25mIxgnQeE166h85s g39D1zLPg3ZGaBJ8UkcJKKoL0B27+koMIM+iXxCxbtc5Y3rrxre5GKb2lAZk3OW/ ddHgoIucR54zxyWWp0kYGhdfKqsz9S4= -----END CERTIFICATE-----Generated at Sat Oct 31 05:43:48 2026 by rpki-client