$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa File: a409e585-8d9e-38d9-9ed4-2981a1968af3.roa (raw, json) Hash identifier: AfvRmIpvQebp6bzjCZ7BhfXdmr+or74w7b3R0A+SHAI= Subject key identifier: C9:82:94:C3:62:46:C1:B5:F4:12:48:C6:FA:E2:1C:23:9D:C4:84:D7 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49848DA0F7EDEB1B70F42F80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:8d:a0:f7:ed:eb:1b:70:f4:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c6f665b6-b409-4c45-b07b-97c3f1d064e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:56:7f:0b:28:4e:01:d3:e9:7b:19:4a:26: 09:5f:ab:ac:fa:c7:f0:fc:e2:6d:87:e4:9e:76:7d: 32:46:b9:33:f4:6c:61:e0:99:77:0c:0f:b3:69:62: 96:25:a1:ac:7f:21:82:db:55:a5:80:14:1c:dc:87: e0:6b:cc:23:15:9a:6d:93:42:cc:8e:6b:dd:f1:84: dc:26:2f:fd:e4:40:39:28:bd:52:78:b7:2a:20:6e: ad:b8:1c:e5:2d:93:58:5e:25:eb:ba:fe:f0:3f:6f: 41:3a:7a:12:d8:59:6c:b4:cb:77:9b:ef:c4:22:3a: 3b:69:ba:c8:22:cd:a2:31:8a:a9:a0:39:aa:cb:a9: 44:6f:90:47:94:46:0e:b1:31:6b:35:48:2d:e5:ed: 41:92:3f:d6:2c:74:7d:6f:22:cd:07:57:cd:34:1e: b8:2f:38:05:e4:12:67:2b:1a:d7:8e:59:98:20:fc: 74:fc:6c:5f:0c:fc:c2:93:93:73:09:eb:7e:74:c8: 7c:18:af:ce:9d:4d:d9:cd:42:1f:f6:a3:11:29:19: 97:0a:49:74:72:9a:b5:62:cf:9f:db:04:b7:67:37: de:51:16:0e:71:15:eb:af:0e:bc:fa:c5:6c:22:5f: 8e:23:79:7d:a1:57:bd:2b:bf:31:e4:0e:08:ff:ac: 70:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:82:94:C3:62:46:C1:B5:F4:12:48:C6:FA:E2:1C:23:9D:C4:84:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8e:78:bd:1f:27:a9:3b:bf:ad:a5:c5:3e:74:29:70:1f:10: 5c:c3:e8:36:d4:56:3b:29:5d:75:65:53:31:ed:7b:5c:9e:86: ad:77:49:e0:df:0a:d3:29:06:a8:29:35:a8:2b:d1:4c:5b:2a: 00:f8:83:d2:3c:6a:89:bc:d0:fc:eb:68:90:b8:07:6d:a4:f5: 6c:8c:1c:64:d5:c3:9d:fc:fd:41:9f:c3:84:09:4f:d6:84:47: c5:87:eb:f3:5f:24:d4:00:7f:db:6c:f6:da:fa:8f:f0:9c:58: 63:44:47:76:ea:ad:50:4f:7a:a6:0a:96:f7:15:c0:fd:93:ea: 8b:55:f2:eb:4e:29:62:6b:ae:e5:25:42:78:ce:53:06:4a:bb: 9f:1d:ce:ee:a8:4d:b5:a2:0d:55:cd:25:66:75:b9:ed:65:4e: 89:e3:ba:9d:3e:b7:48:95:f4:85:47:59:bf:51:54:a0:fe:bb: dd:95:40:cf:5b:49:24:f2:8c:0e:59:bf:26:40:75:b4:55:62: 69:34:9a:3b:1b:8c:9a:04:a9:b5:f1:67:11:26:12:ce:02:6a: 0f:d1:03:b1:5d:7a:dd:7e:74:9c:bd:49:34:2f:05:21:20:2d: 40:5d:2b:a6:59:47:4a:f8:ea:83:6f:b4:a6:86:1d:b8:c1:27: 15:23:5e:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhI2g9+3rG3D0L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzZmNjY1YjYtYjQwOS00YzQ1LWIwN2ItOTdjM2YxZDA2NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT1WfwsoTgHT6XsZSiYJX6us+sfw/OJth+Se dn0yRrkz9Gxh4Jl3DA+zaWKWJaGsfyGC21WlgBQc3Ifga8wjFZptk0LMjmvd8YTc Ji/95EA5KL1SeLcqIG6tuBzlLZNYXiXruv7wP29BOnoS2FlstMt3m+/EIjo7abrI Is2iMYqpoDmqy6lEb5BHlEYOsTFrNUgt5e1Bkj/WLHR9byLNB1fNNB64LzgF5BJn KxrXjlmYIPx0/GxfDPzCk5NzCet+dMh8GK/OnU3ZzUIf9qMRKRmXCkl0cpq1Ys+f 2wS3ZzfeURYOcRXrrw68+sVsIl+OI3l9oVe9K78x5A4I/6xwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmClMNiRsG19BJIxvriHCOdxITXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTQwOWU1ODUtOGQ5ZS0z OGQ5LTllZDQtMjk4MWExOTY4YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmOeL0fJ6k7v62lxT50KXAfEFzD6DbUVjspXXVlUzHte1yehq13SeDf CtMpBqgpNagr0UxbKgD4g9I8aom80PzraJC4B22k9WyMHGTVw538/UGfw4QJT9aE R8WH6/NfJNQAf9ts9tr6j/CcWGNER3bqrVBPeqYKlvcVwP2T6otV8utOKWJrruUl QnjOUwZKu58dzu6oTbWiDVXNJWZ1ue1lTonjup0+t0iV9IVHWb9RVKD+u92VQM9b SSTyjA5ZvyZAdbRVYmk0mjsbjJoEqbXxZxEmEs4Cag/RA7Fdet1+dJy9STQvBSEg LUBdK6ZZR0r46oNvtKaGHbjBJxUjXgY= -----END CERTIFICATE-----Generated at Sat Sep 26 13:46:56 2026 by rpki-client