$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa File: 752cc9bf-1f19-3b84-98be-45790d2ac109.roa (raw, json) Hash identifier: s4vZP22VYA+LUy5DvVuWJfy+B1eb4BhnVWBDAy3yHEk= Subject key identifier: 60:D6:C4:EF:0C:17:06:10:29:D1:53:4E:B7:A7:48:B0:34:F3:8D:17 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F4984A01679826EFFC8ED2380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395973 IP address blocks: 104.134.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:a0:16:79:82:6e:ff:c8:ed:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f3afb3f9-59cf-459b-9cdb-882ce91bd56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4b:35:37:1f:ab:5d:d9:e1:e1:ff:73:da:df: 24:d8:35:ef:e4:1a:9b:47:50:6c:d5:ab:b0:db:c4: 64:e9:1a:a5:81:8b:c4:95:33:d3:8e:87:8d:4f:b2: 89:23:84:40:5b:d3:36:8e:e9:77:b5:41:51:46:1c: 3e:49:0e:11:eb:3c:ae:24:a9:0a:32:98:49:cc:9f: 9c:2d:9c:d6:06:0d:63:dd:ab:65:d4:d0:78:04:d8: e4:ab:d0:d6:92:8b:da:73:5d:d9:64:52:b9:bd:3a: 0d:63:8b:26:38:4b:02:c8:58:c7:d0:d8:7e:18:fc: a9:05:6d:9c:9d:58:e6:a4:ad:cf:a6:9c:95:d6:2e: 12:31:d9:fa:e3:56:45:11:72:02:ba:37:24:6a:23: 3f:5b:b8:3f:bc:32:fb:f4:2a:15:ca:ee:60:5a:65: f8:21:d9:d7:c4:31:ea:af:73:3d:03:b5:fc:c9:e6: 1a:0f:bd:b1:45:08:7f:82:cc:22:01:36:44:59:c8: a0:d6:17:38:5b:b3:da:ed:cf:76:cd:b9:83:4f:d0: 0b:34:ee:46:0c:6f:50:d7:40:d9:ed:20:15:71:d3: 4d:17:b5:0d:0b:d0:df:9f:f3:0a:56:ff:19:31:29: 05:dc:fb:5a:33:27:2e:1f:30:d5:ab:41:fe:83:1f: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D6:C4:EF:0C:17:06:10:29:D1:53:4E:B7:A7:48:B0:34:F3:8D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:af:5f:bd:7b:02:d8:95:fd:8f:73:ae:44:30:93:23:33:07: e5:f2:01:dd:c7:0d:9f:1f:2b:1f:52:9c:b2:e8:5b:c9:4b:4a: da:6b:d8:ee:63:1a:78:c1:c5:82:ea:dd:c4:d8:c9:c9:a7:1a: 21:02:07:94:e5:9d:e8:2d:d1:d7:89:f5:9e:a3:86:95:1b:c8: 34:93:80:58:a0:06:21:cc:e1:78:ce:8c:90:8c:88:36:d6:47: b5:c1:de:e8:fb:fb:c2:0e:a0:66:ef:7b:76:7d:06:af:ed:c4: 8a:83:aa:c8:4e:db:ad:ad:19:8c:85:72:93:d1:89:4a:c2:de: d8:87:d4:94:a8:c5:43:4e:de:33:da:36:7e:78:25:2a:33:68: 0c:e0:1d:ab:1a:5f:ec:0c:e7:f6:cd:ce:3a:d5:5f:f7:11:d6: 70:41:63:dc:08:70:c2:7a:72:cd:ac:70:6c:49:ed:78:37:8d: 3b:35:c8:57:08:a4:23:93:27:1a:50:fd:24:15:60:7d:ad:35: ca:f9:91:87:93:1d:16:9b:00:49:18:9a:d2:46:f7:b9:b6:47: c0:22:c1:06:e6:9b:4e:07:2a:9c:a4:10:2a:f5:c7:7f:c2:b1: 86:5c:15:66:7c:4d:2e:5e:cf:44:da:a8:4b:cb:93:ab:4f:b5: ce:65:59:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhKAWeYJu/8jtI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjNhZmIzZjktNTljZi00NTliLTljZGItODgyY2U5MWJkNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUs1Nx+rXdnh4f9z2t8k2DXv5BqbR1Bs1auw 28Rk6RqlgYvElTPTjoeNT7KJI4RAW9M2jul3tUFRRhw+SQ4R6zyuJKkKMphJzJ+c LZzWBg1j3atl1NB4BNjkq9DWkovac13ZZFK5vToNY4smOEsCyFjH0Nh+GPypBW2c nVjmpK3PppyV1i4SMdn641ZFEXICujckaiM/W7g/vDL79CoVyu5gWmX4IdnXxDHq r3M9A7X8yeYaD72xRQh/gswiATZEWcig1hc4W7Pa7c92zbmDT9ALNO5GDG9Q10DZ 7SAVcdNNF7UNC9Dfn/MKVv8ZMSkF3PtaMycuHzDVq0H+gx8n0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDWxO8MFwYQKdFTTrenSLA0840XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzUyY2M5YmYtMWYxOS0z Yjg0LTk4YmUtNDU3OTBkMmFjMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuvX717AtiV/Y9zrkQwkyMzB+XyAd3HDZ8fKx9SnLLoW8lLStpr2O5j GnjBxYLq3cTYycmnGiECB5Tlnegt0deJ9Z6jhpUbyDSTgFigBiHM4XjOjJCMiDbW R7XB3uj7+8IOoGbve3Z9Bq/txIqDqshO262tGYyFcpPRiUrC3tiH1JSoxUNO3jPa Nn54JSozaAzgHasaX+wM5/bNzjrVX/cR1nBBY9wIcMJ6cs2scGxJ7Xg3jTs1yFcI pCOTJxpQ/SQVYH2tNcr5kYeTHRabAEkYmtJG97m2R8AiwQbmm04HKpykECr1x3/C sYZcFWZ8TS5ez0TaqEvLk6tPtc5lWWk= -----END CERTIFICATE-----Generated at Sat Sep 26 08:06:55 2026 by rpki-client