$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a86525a3-dfe7-37bf-a881-cd2c665c178f.roa File: a86525a3-dfe7-37bf-a881-cd2c665c178f.roa (raw, json) Hash identifier: vHgdh8etN9zhOsYi+DJpdTYgeoH/cXfOYacwBd2I4Kw= Subject key identifier: F3:B8:1D:8C:2C:69:79:D0:B9:CE:FE:58:D6:6C:88:BF:DB:E9:C9:76 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA794DAA96E5F5792B079FF00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a86525a3-dfe7-37bf-a881-cd2c665c178f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.132.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:da:a9:6e:5f:57:92:b0:79:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d0d8ac09-a8aa-4ea0-9f08-81fffac96346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:81:66:87:0c:b4:6a:f8:d1:29:da:c3:0f: ea:35:d7:3f:49:4e:48:8d:dc:74:6d:c5:db:d4:ac: 70:5a:a6:7a:6f:4e:12:23:e0:fb:2b:00:42:20:07: 9a:be:5b:bf:fe:0e:e9:a8:fa:55:b5:f6:4f:70:6b: e8:eb:9a:2c:34:da:66:7a:1a:e7:11:6c:5e:b3:7c: 4d:94:26:63:79:c1:7b:72:9e:30:31:cb:a9:39:20: 43:bb:82:9d:80:f8:77:a1:43:19:8d:c9:f0:a9:9b: a2:d5:ac:02:c6:d5:82:fe:08:8f:1d:b8:03:6b:c5: 29:5f:b4:a3:a7:91:7f:77:37:59:db:63:11:4e:2f: 4d:78:ac:59:e1:00:82:c3:00:7f:39:28:dc:43:ee: c3:5b:86:63:fc:49:fc:a1:32:33:1a:c1:ea:ac:d7: ee:92:2e:60:f2:b7:19:a2:95:f5:97:3a:bc:90:6e: 52:1a:6a:1d:d0:11:4a:28:86:a0:50:f8:b6:c6:5e: 65:16:3a:77:9d:97:02:d6:70:c2:aa:5c:ef:dc:1e: 8d:67:4a:98:18:a0:51:71:26:05:f6:5e:70:06:3e: a4:5c:11:8c:d6:8a:4e:01:85:68:71:29:81:32:5e: 6d:83:66:0b:c9:1a:df:d6:96:14:4d:7f:22:a9:0c: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B8:1D:8C:2C:69:79:D0:B9:CE:FE:58:D6:6C:88:BF:DB:E9:C9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a86525a3-dfe7-37bf-a881-cd2c665c178f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1c:1a:1d:10:59:fa:83:fe:37:5b:5f:4c:09:d7:ed:3c:cb: 8c:ec:93:d4:2c:5a:43:57:dd:ef:de:aa:24:2a:a6:e0:4d:3f: 89:89:4e:9e:4e:8a:a0:a8:3e:12:a9:ac:6b:be:a8:70:db:53: cc:a3:39:2b:eb:85:d4:bc:80:bb:09:9c:e1:1f:f4:f1:cb:ee: 00:bd:58:bf:72:68:d4:e0:f7:d4:bf:f0:dc:6f:59:95:ed:bd: 1b:58:ef:14:0a:af:7b:b5:5f:2c:c7:6d:08:eb:11:3d:ae:0f: 73:89:3d:69:9f:4e:c8:e2:e4:8c:25:60:b4:e1:05:1f:63:40: b3:bb:3f:a5:41:3b:09:a9:83:85:54:ae:64:e5:02:39:20:f7: 49:e2:67:6e:07:5a:ac:b9:f7:58:e7:c9:6f:f1:59:2b:9c:0c: a8:0b:61:c1:f3:17:37:78:d6:5a:da:d1:b8:61:21:e3:52:e0: 7e:24:63:2e:6f:98:79:d8:06:2b:b1:b4:6c:60:9d:74:d9:e2: 40:e9:7e:2d:45:18:48:a9:f9:8d:4d:4f:a1:bf:82:c9:34:41: ac:5d:52:9f:19:76:9a:8e:39:9c:c8:7a:fc:0b:55:08:58:29: 30:c6:13:09:7d:2c:92:b0:55:9a:86:47:32:83:2d:8e:33:3b: b9:b0:b2:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlNqpbl9XkrB5/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDBkOGFjMDktYThhYS00ZWEwLTlmMDgtODFmZmZhYzk2MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbeBZocMtGr40Snaww/qNdc/SU5Ijdx0bcXb 1KxwWqZ6b04SI+D7KwBCIAeavlu//g7pqPpVtfZPcGvo65osNNpmehrnEWxes3xN lCZjecF7cp4wMcupOSBDu4KdgPh3oUMZjcnwqZui1awCxtWC/giPHbgDa8UpX7Sj p5F/dzdZ22MRTi9NeKxZ4QCCwwB/OSjcQ+7DW4Zj/En8oTIzGsHqrNfuki5g8rcZ opX1lzq8kG5SGmod0BFKKIagUPi2xl5lFjp3nZcC1nDCqlzv3B6NZ0qYGKBRcSYF 9l5wBj6kXBGM1opOAYVocSmBMl5tg2YLyRrf1pYUTX8iqQw4+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO4HYwsaXnQuc7+WNZsiL/b6cl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTg2NTI1YTMtZGZlNy0z N2JmLWE4ODEtY2QyYzY2NWMxNzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkcGh0QWfqD/jdbX0wJ1+08y4zsk9QsWkNX3e/eqiQqpuBNP4mJTp5O iqCoPhKprGu+qHDbU8yjOSvrhdS8gLsJnOEf9PHL7gC9WL9yaNTg99S/8NxvWZXt vRtY7xQKr3u1XyzHbQjrET2uD3OJPWmfTsji5IwlYLThBR9jQLO7P6VBOwmpg4VU rmTlAjkg90niZ24HWqy591jnyW/xWSucDKgLYcHzFzd41lra0bhhIeNS4H4kYy5v mHnYBiuxtGxgnXTZ4kDpfi1FGEip+Y1NT6G/gsk0QaxdUp8ZdpqOOZzIevwLVQhY KTDGEwl9LJKwVZqGRzKDLY4zO7mwstg= -----END CERTIFICATE-----Generated at Thu Sep 10 19:56:30 2026 by rpki-client