$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa File: afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa (raw, json) Hash identifier: 1N03LFwJLG+8fWqBOoyFg6WoNOwxFwvtzfL/KWsgpmY= Subject key identifier: A6:6A:A3:18:0C:45:C6:D3:A2:F3:E6:8F:DB:56:D4:6D:A6:AD:A4:73 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984CED2A5250508E72EFE00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 104.134.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ce:d2:a5:25:05:08:e7:2e:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b229ca1f-637c-49f7-8864-97b3dd3d59e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ab:0f:b9:a7:40:ca:9f:a3:b8:fc:5b:6d:65: 6a:61:6d:27:3e:89:25:8a:0e:21:1c:be:c3:66:eb: 5d:81:d9:4d:1f:e6:4f:00:51:78:0c:48:92:4b:90: 42:34:17:b9:60:7f:2c:ec:25:5e:7e:a3:86:01:fa: c2:8a:4f:21:6d:78:86:27:61:43:c7:66:36:5c:9d: d6:9f:b0:bb:36:28:3a:f8:a4:8e:41:3b:2b:fd:56: 56:81:7d:e4:71:c6:b4:67:04:9d:a9:b5:ba:f3:76: a0:6f:64:e5:ec:a5:c2:44:70:02:56:58:b4:a8:07: 43:96:cc:a0:bd:8d:5e:58:5b:5a:95:80:fc:c5:66: 72:cf:3f:89:b3:2a:02:48:44:d6:dc:6c:2f:3c:0e: 5b:13:96:17:68:d0:9d:ef:fd:b2:d1:44:76:53:3b: dc:5b:2a:d6:60:b3:f4:55:b6:15:22:db:51:56:e8: c0:cf:c9:0d:05:95:66:9e:b4:96:7f:1d:5a:cf:67: 4b:f3:fa:c7:26:9e:91:e8:9f:8f:5d:f9:77:da:e4: cf:75:aa:52:68:69:c7:b5:35:3a:e4:c8:a6:c5:6c: e3:de:c8:9a:55:ea:2c:0a:ec:7d:19:78:77:86:80: af:51:23:f7:03:46:ba:dc:c2:63:16:87:13:65:25: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6A:A3:18:0C:45:C6:D3:A2:F3:E6:8F:DB:56:D4:6D:A6:AD:A4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ea:81:d3:f2:f2:57:27:55:a2:f8:20:d1:34:0d:32:e0:34: 26:b1:34:b5:b2:43:df:d0:dc:00:87:7f:24:5f:46:35:8a:b2: e1:d0:64:5d:c5:af:9d:e9:c6:d9:dd:88:80:56:4b:de:2e:05: 3c:8b:a9:75:95:ba:b4:3b:a9:bd:82:f4:e7:df:12:2e:11:21: f2:ff:83:9a:82:5a:bd:1e:ea:4d:17:13:20:75:5f:0a:b3:ae: 6c:5d:8e:0e:b2:1d:23:f8:d3:9c:68:27:51:1c:36:1a:62:29: d3:41:3c:e5:b5:3c:6e:18:06:84:f3:db:50:e0:2d:ea:69:f9: 29:13:85:39:cd:f9:e7:bf:10:74:b7:ad:46:cc:6f:65:a5:94: 0f:d1:d8:e5:b6:9b:80:9b:1e:0f:35:12:10:be:4d:7c:f3:64: 60:19:8f:35:4d:6b:d8:05:b9:d6:30:6b:ad:fe:31:08:91:65: 96:1b:cd:54:5c:60:2c:fa:f5:14:b9:ec:69:b0:19:6f:43:6a: e8:84:a8:61:13:fd:11:d8:6b:b4:3a:81:f1:dc:9e:4d:fc:73: a8:68:d0:70:73:40:a3:eb:11:c4:a3:0a:ba:37:e6:83:2b:59: ac:6a:a6:cf:ef:41:02:45:35:9f:35:81:59:43:b7:fa:d1:c6: 3d:17:1d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhM7SpSUFCOcu/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjIyOWNhMWYtNjM3Yy00OWY3LTg4NjQtOTdiM2RkM2Q1OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgasPuadAyp+juPxbbWVqYW0nPoklig4hHL7D ZutdgdlNH+ZPAFF4DEiSS5BCNBe5YH8s7CVefqOGAfrCik8hbXiGJ2FDx2Y2XJ3W n7C7Nig6+KSOQTsr/VZWgX3kcca0ZwSdqbW683agb2Tl7KXCRHACVli0qAdDlsyg vY1eWFtalYD8xWZyzz+JsyoCSETW3GwvPA5bE5YXaNCd7/2y0UR2UzvcWyrWYLP0 VbYVIttRVujAz8kNBZVmnrSWfx1az2dL8/rHJp6R6J+PXfl32uTPdapSaGnHtTU6 5MimxWzj3siaVeosCux9GXh3hoCvUSP3A0a63MJjFocTZSViGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZqoxgMRcbTovPmj9tW1G2mraRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWZjNTg5ZTMtYzFjOS0z ZmU3LWJjNWMtYWEwMmFiMDdkNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbqgdPy8lcnVaL4INE0DTLgNCaxNLWyQ9/Q3ACHfyRfRjWKsuHQZF3F r53pxtndiIBWS94uBTyLqXWVurQ7qb2C9OffEi4RIfL/g5qCWr0e6k0XEyB1Xwqz rmxdjg6yHSP405xoJ1EcNhpiKdNBPOW1PG4YBoTz21DgLepp+SkThTnN+ee/EHS3 rUbMb2WllA/R2OW2m4CbHg81EhC+TXzzZGAZjzVNa9gFudYwa63+MQiRZZYbzVRc YCz69RS57GmwGW9DauiEqGET/RHYa7Q6gfHcnk38c6ho0HBzQKPrEcSjCro35oMr Waxqps/vQQJFNZ81gVlDt/rRxj0XHX8= -----END CERTIFICATE-----Generated at Fri Oct 30 20:25:10 2026 by rpki-client