$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f5e497b-b3c8-3899-8a82-0a9db4cc281d.roa File: 9f5e497b-b3c8-3899-8a82-0a9db4cc281d.roa (raw, json) Hash identifier: 7GYimHjw/yEDhfo65ywfRZSQyJM0/R3cuk4l7f+rRhI= Subject key identifier: C0:A2:EA:FE:16:89:31:80:DF:4A:C7:97:13:E5:5F:6F:2A:C8:67:96 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F6F2315F0F186E688A9BB4800 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f5e497b-b3c8-3899-8a82-0a9db4cc281d.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 395973 IP address blocks: 104.134.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:15:f0:f1:86:e6:88:a9:bb:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=b56e5d8d-645d-4aa1-a476-002a7452fecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:6c:05:96:2f:6c:92:5a:dc:4f:84:3e:9f: e7:e6:55:bc:7a:30:35:83:c5:91:84:0d:0b:a8:0f: bb:c4:3f:e9:f0:d5:01:b9:76:ed:7e:c4:e1:0f:fb: 2c:42:dd:92:04:0e:b1:c1:c9:0d:b9:77:f7:f9:4b: 17:d0:e6:d8:f3:5b:e8:2c:ca:2c:ed:40:61:88:c9: 2d:e1:0f:8f:d2:a3:de:b2:e6:76:00:a4:6a:f2:3f: 67:d9:01:48:87:e0:a2:3f:aa:67:68:a3:36:7e:f3: 57:7d:eb:46:99:36:f4:58:8b:30:84:59:ea:d4:98: 2d:19:5a:fb:9e:00:2f:ee:b0:2a:f9:c1:ed:fb:ba: 18:e5:73:e9:b9:af:7c:f9:36:20:4a:72:cb:8a:20: a9:ee:74:fd:ce:e9:cc:50:f2:dc:a9:bc:7a:5c:2a: 38:40:0d:ea:84:31:f2:6e:05:d3:61:a9:0c:2e:cf: d8:4e:8b:c0:fb:ba:7a:06:27:af:b6:0d:df:cc:8a: cb:28:50:6e:e7:75:6a:74:00:62:c0:7a:22:41:5b: 27:c4:58:64:65:b7:38:2e:5c:c7:e0:14:a2:86:ee: b6:db:bb:98:1d:03:8a:27:e1:73:7a:ff:8c:86:2a: 75:cd:8f:23:87:8f:bb:d1:86:30:c2:31:11:11:64: 93:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A2:EA:FE:16:89:31:80:DF:4A:C7:97:13:E5:5F:6F:2A:C8:67:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f5e497b-b3c8-3899-8a82-0a9db4cc281d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:54:c3:6e:ac:d2:cf:19:3b:73:22:ff:37:e1:67:cd:59:cd: 0c:d0:2a:0c:87:3c:29:80:ae:2e:77:8e:7e:e5:b7:51:3f:38: 41:61:3c:be:b8:07:79:b6:a0:f9:4b:e2:47:b3:d7:e6:f4:81: d3:0d:34:a6:1a:1e:da:5a:bc:3d:de:78:32:80:70:19:c6:f4: 47:ed:69:08:83:0c:f1:5d:7e:11:1a:a8:92:95:c2:ef:17:a9: c5:4b:1a:e7:e1:68:62:7f:50:e6:3f:1f:9d:63:84:68:95:67: 7c:f3:01:b5:7e:76:38:54:09:ea:51:50:88:d8:08:80:60:51: 65:42:90:69:0e:a5:ce:ab:17:9c:95:1c:fe:a5:28:5d:11:6e: a2:82:8c:0b:be:d5:27:b2:4e:73:29:ec:a1:37:68:bc:e2:ee: 56:26:2a:a1:49:37:c6:fc:07:51:e0:13:01:4d:c2:bb:fd:c0: 92:8e:cb:6e:d8:2c:f3:b9:17:45:32:9a:d9:a9:fc:2f:08:29: e0:b2:c6:9b:16:0d:a0:99:65:eb:4c:74:68:19:d8:56:ba:9e: a7:de:38:52:74:5a:94:6b:4f:9a:86:a8:df:19:af:46:96:ae: 4a:79:76:5b:8b:87:a3:1b:cf:4c:25:be:4e:41:60:fe:c6:f0: 34:d9:70:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxXw8YbmiKm7SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjU2ZTVkOGQtNjQ1ZC00YWExLWE0NzYtMDAyYTc0NTJmZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApepsBZYvbJJa3E+EPp/n5lW8ejA1g8WRhA0L qA+7xD/p8NUBuXbtfsThD/ssQt2SBA6xwckNuXf3+UsX0ObY81voLMos7UBhiMkt 4Q+P0qPesuZ2AKRq8j9n2QFIh+CiP6pnaKM2fvNXfetGmTb0WIswhFnq1JgtGVr7 ngAv7rAq+cHt+7oY5XPpua98+TYgSnLLiiCp7nT9zunMUPLcqbx6XCo4QA3qhDHy bgXTYakMLs/YTovA+7p6Bievtg3fzIrLKFBu53VqdABiwHoiQVsnxFhkZbc4LlzH 4BSihu6227uYHQOKJ+Fzev+Mhip1zY8jh4+70YYwwjEREWSTDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCi6v4WiTGA30rHlxPlX28qyGeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWY1ZTQ5N2ItYjNjOC0z ODk5LThhODItMGE5ZGI0Y2MyODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9Uw26s0s8ZO3Mi/zfhZ81ZzQzQKgyHPCmAri53jn7lt1E/OEFhPL64 B3m2oPlL4kez1+b0gdMNNKYaHtpavD3eeDKAcBnG9EftaQiDDPFdfhEaqJKVwu8X qcVLGufhaGJ/UOY/H51jhGiVZ3zzAbV+djhUCepRUIjYCIBgUWVCkGkOpc6rF5yV HP6lKF0RbqKCjAu+1SeyTnMp7KE3aLzi7lYmKqFJN8b8B1HgEwFNwrv9wJKOy27Y LPO5F0Uymtmp/C8IKeCyxpsWDaCZZetMdGgZ2Fa6nqfeOFJ0WpRrT5qGqN8Zr0aW rkp5dluLh6Mbz0wlvk5BYP7G8DTZcDk= -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:36 2026 by rpki-client