$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa File: bd3b0885-6cef-3635-b11c-5144dec857f3.roa (raw, json) Hash identifier: SHpAIn/xy9ze/LQ1bAsRDHnuWJZSI2N/Jak1i05q9kg= Subject key identifier: 18:89:B4:6F:86:FA:6B:01:5C:E4:F0:3A:6D:22:A5:65:BA:50:BB:C9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7967F1B106A07266FCD4500 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 395973 IP address blocks: 104.134.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:7f:1b:10:6a:07:26:6f:cd:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a0fb08b1-f667-45c1-8fb7-2b150f25ff62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:e6:13:b5:88:53:3e:24:af:9a:22:f8:60: 1a:26:72:80:3b:df:07:ff:45:41:53:a4:a6:12:ed: 10:21:44:b6:5a:2f:23:37:f3:72:51:b9:36:ff:5c: 65:2d:e7:75:69:72:09:6c:87:c0:44:46:3c:b1:f9: 7d:fa:7a:8f:01:f6:1d:5b:01:9e:f9:b3:7a:d1:e1: 20:d6:7c:0c:16:5a:92:e3:bd:12:0b:be:fa:62:aa: fc:5a:65:39:b1:37:d8:1c:95:14:cd:39:a5:aa:c7: a9:48:20:c3:1b:c7:5e:b1:82:3c:2a:ac:c7:7b:e8: 79:d6:7b:e4:c8:f2:b7:ab:f1:9f:e0:de:13:ee:fe: c4:62:92:0a:46:6a:57:75:55:b4:67:21:3a:84:09: 49:5b:43:bb:fe:9a:17:12:17:fd:33:7e:ec:b6:ed: ab:7a:7d:25:d8:6d:53:28:80:87:72:c9:7f:e1:b1: db:52:bc:ab:12:5b:dc:ae:e6:47:86:bf:91:97:70: d4:8c:3a:a0:99:30:f0:3f:3e:87:bf:09:9d:f8:14: ba:70:8c:5f:a9:83:a6:6b:6a:ab:c2:8d:17:75:ca: 1f:11:a8:e6:3f:5b:d9:52:21:f2:d0:a1:4c:37:27: b1:ee:48:4d:18:a2:2a:1a:74:32:26:f0:ad:cb:c4: cc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:89:B4:6F:86:FA:6B:01:5C:E4:F0:3A:6D:22:A5:65:BA:50:BB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:a6:3f:bf:28:5d:88:df:c2:c3:22:3a:5d:89:06:26:89:09: bb:13:9d:64:ac:07:d2:9e:73:93:d4:90:9d:41:73:37:c0:e5: 52:28:f6:f3:02:50:6b:ea:72:58:01:b0:f7:47:c0:71:68:ce: 59:6d:b6:cf:0b:e0:14:e8:d8:e7:1e:26:1f:75:71:fd:37:52: 63:b5:10:45:58:a4:1a:a9:78:56:4e:ad:98:09:97:b1:7b:79: a8:4e:7d:74:3b:04:81:56:23:0e:d0:d4:20:88:2c:f7:bf:e9: 62:7b:eb:bd:35:2a:de:4e:df:f5:9b:02:7e:7a:a2:e0:90:c7: 02:4b:f0:bb:9e:36:be:62:f6:45:b6:44:0f:6e:65:bf:ea:a0: 23:92:d2:51:be:14:67:cd:f7:9f:72:f2:bb:82:6b:cb:c2:f8: dd:ae:9d:fb:2b:3e:ad:f9:2b:6e:08:e2:7f:c8:cc:e7:c9:92: 18:48:aa:aa:97:6d:ef:9c:41:c3:00:bb:a0:50:d2:9c:68:c8: 64:99:2f:e7:37:2d:bd:34:2e:ea:43:3b:57:b9:ba:5d:98:2b: b6:87:b3:ed:5a:5a:84:ba:6b:1f:b5:c1:9d:56:5b:69:02:e3: 8b:c3:48:0f:81:dc:0f:c8:29:72:02:84:cf:1e:a9:65:e2:64: c1:4d:f5:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nln8bEGoHJm/NRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTBmYjA4YjEtZjY2Ny00NWMxLThmYjctMmIxNTBmMjVmZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC7mE7WIUz4kr5oi+GAaJnKAO98H/0VBU6Sm Eu0QIUS2Wi8jN/NyUbk2/1xlLed1aXIJbIfAREY8sfl9+nqPAfYdWwGe+bN60eEg 1nwMFlqS470SC776Yqr8WmU5sTfYHJUUzTmlqsepSCDDG8desYI8KqzHe+h51nvk yPK3q/Gf4N4T7v7EYpIKRmpXdVW0ZyE6hAlJW0O7/poXEhf9M37stu2ren0l2G1T KICHcsl/4bHbUryrElvcruZHhr+Rl3DUjDqgmTDwPz6Hvwmd+BS6cIxfqYOma2qr wo0XdcofEajmP1vZUiHy0KFMNyex7khNGKIqGnQyJvCty8TMbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiJtG+G+msBXOTwOm0ipWW6ULvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmQzYjA4ODUtNmNlZi0z NjM1LWIxMWMtNTE0NGRlYzg1N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSmP78oXYjfwsMiOl2JBiaJCbsTnWSsB9Kec5PUkJ1BczfA5VIo9vMC UGvqclgBsPdHwHFozlltts8L4BTo2OceJh91cf03UmO1EEVYpBqpeFZOrZgJl7F7 eahOfXQ7BIFWIw7Q1CCILPe/6WJ76701Kt5O3/WbAn56ouCQxwJL8LueNr5i9kW2 RA9uZb/qoCOS0lG+FGfN959y8ruCa8vC+N2unfsrPq35K24I4n/IzOfJkhhIqqqX be+cQcMAu6BQ0pxoyGSZL+c3Lb00LupDO1e5ul2YK7aHs+1aWoS6ax+1wZ1WW2kC 44vDSA+B3A/IKXIChM8eqWXiZMFN9V4= -----END CERTIFICATE-----Generated at Thu Sep 10 19:25:50 2026 by rpki-client