$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa File: 9bf48ac1-703c-3af3-8f05-6803d3f10791.roa (raw, json) Hash identifier: mfubBS6hf0E6SPBDmt6B9HjQP8I2IJdEZvJ923SoUCo= Subject key identifier: 0E:97:F8:D3:48:73:F3:0F:19:51:F3:CF:59:C6:3A:9E:E0:A2:00:EA Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49848A31A960E1ABDC860600 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:8a:31:a9:60:e1:ab:dc:86:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=98f9fbbd-2489-4aed-892c-aa492b8ec27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e1:4f:1f:53:6a:ea:f2:bc:8b:af:d6:1c:40: 75:9a:5d:56:57:f0:33:81:b0:c1:95:e1:a8:02:b1: 25:c9:60:9e:a1:43:18:06:71:b5:da:17:27:8e:75: 58:2e:60:21:b9:8c:7f:37:dc:9f:b6:a1:4c:57:3d: 5f:1f:ed:86:85:e9:c8:02:9c:f6:76:c1:46:e7:e9: 23:f4:2d:52:a3:10:9c:d5:1f:6b:6a:31:b3:5b:07: da:b1:a8:07:fd:f0:6c:5c:72:2a:40:3e:47:4f:02: fe:cb:ab:f9:0d:b3:fa:8a:96:0a:53:a9:43:e6:24: 31:9d:4d:af:ab:3e:bc:c3:2e:b7:97:c1:b5:10:36: 04:95:0b:fb:78:2e:70:cc:08:1d:cf:7b:af:ef:6b: eb:de:92:4d:71:15:c3:b4:2d:2c:82:ab:f0:fe:17: 6c:80:41:b5:7f:0f:fc:0b:f6:e6:5f:68:04:13:af: 99:3a:36:51:02:89:b1:03:1b:14:11:44:1a:0c:89: 6d:63:bb:3c:64:62:2e:3c:0e:c0:a5:05:65:80:02: 4f:e1:fb:ba:ba:61:a1:56:f3:9c:80:70:56:db:62: 1f:09:2c:ed:60:5d:25:62:f5:d8:67:a9:7d:dd:56: 72:7e:55:00:af:3a:54:59:a7:74:21:da:c4:0a:a1: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:97:F8:D3:48:73:F3:0F:19:51:F3:CF:59:C6:3A:9E:E0:A2:00:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:08:21:9c:c2:b4:f9:9d:05:c5:b5:d7:42:de:de:48:ef:a8: df:44:9a:58:5f:7b:20:8a:1e:6f:54:11:9e:15:7d:c0:c1:c8: 64:61:d6:3a:27:ec:b6:d5:86:d4:d1:20:46:02:3f:ca:f6:7c: d4:5f:cc:df:14:5d:c6:d0:a6:a3:38:2c:c9:a7:76:f1:13:09: 00:fd:48:52:2d:79:a7:79:65:5c:f3:4c:14:f2:09:d4:9f:16: f9:a1:30:49:82:34:5c:0b:0b:8e:c2:c9:01:27:da:92:36:35: 36:18:9d:d1:e2:80:fd:7c:76:4d:93:38:52:fa:76:06:e5:1b: 55:87:f6:bb:ae:a8:9d:10:cd:ff:df:e3:3f:12:8e:4c:a6:fe: 3a:c2:08:65:71:ab:81:f6:b7:dc:7e:de:91:5e:7c:e5:64:ac: dd:20:5b:8d:f1:fd:1a:ac:d9:e2:f5:7c:60:3e:95:f4:4c:49: 0a:9f:21:e4:cf:b0:22:54:d4:66:a5:fc:80:fe:10:d3:b1:8c: 6f:14:ee:a3:4f:2c:ff:2d:ef:4f:e0:ac:4d:2c:f0:1c:50:d1: 08:1c:c7:7b:c2:3f:cd:4a:1e:5b:2d:b6:39:86:f4:68:45:60: 4e:80:56:7a:87:43:ce:db:0e:70:30:bb:50:e6:f5:c6:db:86: fd:27:7f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhIoxqWDhq9yGBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OThmOWZiYmQtMjQ4OS00YWVkLTg5MmMtYWE0OTJiOGVjMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeFPH1Nq6vK8i6/WHEB1ml1WV/AzgbDBleGo ArElyWCeoUMYBnG12hcnjnVYLmAhuYx/N9yftqFMVz1fH+2GhenIApz2dsFG5+kj 9C1SoxCc1R9rajGzWwfasagH/fBsXHIqQD5HTwL+y6v5DbP6ipYKU6lD5iQxnU2v qz68wy63l8G1EDYElQv7eC5wzAgdz3uv72vr3pJNcRXDtC0sgqvw/hdsgEG1fw/8 C/bmX2gEE6+ZOjZRAomxAxsUEUQaDIltY7s8ZGIuPA7ApQVlgAJP4fu6umGhVvOc gHBW22IfCSztYF0lYvXYZ6l93VZyflUArzpUWad0IdrECqFfYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6X+NNIc/MPGVHzz1nGOp7gogDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWJmNDhhYzEtNzAzYy0z YWYzLThmMDUtNjgwM2QzZjEwNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYIIZzCtPmdBcW110Le3kjvqN9EmlhfeyCKHm9UEZ4VfcDByGRh1jon 7LbVhtTRIEYCP8r2fNRfzN8UXcbQpqM4LMmndvETCQD9SFItead5ZVzzTBTyCdSf FvmhMEmCNFwLC47CyQEn2pI2NTYYndHigP18dk2TOFL6dgblG1WH9ruuqJ0Qzf/f 4z8Sjkym/jrCCGVxq4H2t9x+3pFefOVkrN0gW43x/Rqs2eL1fGA+lfRMSQqfIeTP sCJU1Gal/ID+ENOxjG8U7qNPLP8t70/grE0s8BxQ0Qgcx3vCP81KHlsttjmG9GhF YE6AVnqHQ87bDnAwu1Dm9cbbhv0nfxg= -----END CERTIFICATE-----Generated at Mon Sep 28 23:11:07 2026 by rpki-client