$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa File: 8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa (raw, json) Hash identifier: QkJz7iI05H+wIre8kRILAOLnwWvhMNHGfIbfhiwiPRk= Subject key identifier: 08:8D:16:16:F4:1C:29:AF:57:C4:82:DD:59:E7:B7:E9:51:84:F8:EA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497CB51F84AE11DE38E23C80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:b5:1f:84:ae:11:de:38:e2:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=48394b66-f4a0-4dd8-923a-f752b98af3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:21:ff:7d:5e:21:d2:7b:a6:d3:0c:8d:71: 80:a9:7b:e0:9e:41:16:c3:c8:b1:b8:b1:52:72:fb: 79:cf:22:b5:26:45:6e:f9:48:92:ab:60:1d:e7:a2: 49:e9:93:fc:88:53:42:d5:c8:02:f4:93:b0:99:d4: 40:bf:bf:05:51:66:82:11:8b:11:e0:cc:02:c3:c1: 37:31:b9:75:88:d8:f4:33:c1:9a:6e:1d:1c:17:f4: 16:67:13:5f:b9:19:b4:3f:63:f4:b2:8e:98:d8:88: 6b:90:3c:ab:90:50:90:c1:b8:a1:88:ae:f2:c0:0e: 1e:1e:b6:fc:10:df:ed:8e:54:9f:af:14:44:04:a7: 23:de:d9:34:01:50:ac:c2:af:b7:4c:76:68:3f:3d: 18:ea:9c:b4:62:29:77:45:58:f9:45:f5:0e:28:7a: 82:e6:43:0e:99:79:81:6f:c9:01:52:e7:7e:d6:14: e3:97:c2:ca:a8:d5:5e:3c:dc:79:18:da:7b:0d:2f: e0:ed:65:48:88:13:64:4a:94:d5:5f:42:f9:70:eb: 6b:b7:ed:0a:93:a3:36:6f:64:60:3f:8b:f5:16:cb: 97:05:88:07:f4:03:04:4a:3d:76:17:6f:ec:fb:52: de:f6:55:db:af:fc:f6:6f:51:9f:93:d1:ff:f4:33: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8D:16:16:F4:1C:29:AF:57:C4:82:DD:59:E7:B7:E9:51:84:F8:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8cd43384-1769-3ebc-a872-3f7bc06ad3f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:50:2e:54:37:4f:25:a0:a4:12:07:05:37:f8:73:f0:53:75: a0:70:c3:4b:75:4f:b4:23:5b:d4:b4:63:8e:bc:57:43:a7:de: bd:0f:5e:61:b1:74:71:8f:31:f5:98:85:d9:c5:0c:b5:e9:46: d9:cd:cb:a4:8e:dc:e3:68:c3:1f:22:1b:3a:3e:57:dd:4a:ae: 3a:1c:c0:8d:cd:cf:12:f7:34:5f:28:7f:ec:91:e5:ad:3c:d6: bb:e6:60:8d:4e:4a:91:7c:fa:9e:41:2b:5f:8a:94:98:2c:7f: 89:7d:b0:f7:22:f5:4c:17:0e:fb:40:23:0c:db:fe:e1:2a:76: e0:80:2f:35:b7:57:2b:9d:9f:fb:35:29:8d:e0:fa:a5:0d:ba: ac:9b:6b:ac:47:9b:46:3a:db:e9:76:13:0a:cc:48:24:2d:14: 7f:d0:b4:7b:5c:b1:36:21:41:44:a2:71:61:2d:21:a2:f2:70: 55:18:14:47:5e:0f:a8:05:c4:b4:a8:cd:e7:c4:7a:f9:92:c4: 9c:6c:be:80:d6:ef:c4:42:ba:7f:c2:39:5f:73:99:04:ff:c1: 13:7d:c8:50:d5:d0:87:1e:46:00:65:9c:a3:20:4a:e9:73:90: 01:d4:ca:7e:bf:be:a4:68:23:26:c7:02:a5:25:49:a5:66:53: c6:d2:4e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLUfhK4R3jjiPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDgzOTRiNjYtZjRhMC00ZGQ4LTkyM2EtZjc1MmI5OGFmM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvAh/31eIdJ7ptMMjXGAqXvgnkEWw8ixuLFS cvt5zyK1JkVu+UiSq2Ad56JJ6ZP8iFNC1cgC9JOwmdRAv78FUWaCEYsR4MwCw8E3 Mbl1iNj0M8Gabh0cF/QWZxNfuRm0P2P0so6Y2IhrkDyrkFCQwbihiK7ywA4eHrb8 EN/tjlSfrxREBKcj3tk0AVCswq+3THZoPz0Y6py0Yil3RVj5RfUOKHqC5kMOmXmB b8kBUud+1hTjl8LKqNVePNx5GNp7DS/g7WVIiBNkSpTVX0L5cOtrt+0Kk6M2b2Rg P4v1FsuXBYgH9AMESj12F2/s+1Le9lXbr/z2b1Gfk9H/9DPx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiNFhb0HCmvV8SC3Vnnt+lRhPjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGNkNDMzODQtMTc2OS0z ZWJjLWE4NzItM2Y3YmMwNmFkM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJQLlQ3TyWgpBIHBTf4c/BTdaBww0t1T7QjW9S0Y468V0On3r0PXmGx dHGPMfWYhdnFDLXpRtnNy6SO3ONowx8iGzo+V91KrjocwI3NzxL3NF8of+yR5a08 1rvmYI1OSpF8+p5BK1+KlJgsf4l9sPci9UwXDvtAIwzb/uEqduCALzW3Vyudn/s1 KY3g+qUNuqyba6xHm0Y62+l2EwrMSCQtFH/QtHtcsTYhQUSicWEtIaLycFUYFEde D6gFxLSozefEevmSxJxsvoDW78RCun/COV9zmQT/wRN9yFDV0IceRgBlnKMgSulz kAHUyn6/vqRoIybHAqUlSaVmU8bSTiE= -----END CERTIFICATE-----Generated at Sat Oct 31 02:19:54 2026 by rpki-client