$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a709c782-1374-325d-a7c2-8131201459e2.roa File: a709c782-1374-325d-a7c2-8131201459e2.roa (raw, json) Hash identifier: hc3oqoVKKUC/sL+ER4OZ5RKOs+4UwVqgPWgJFAaC19o= Subject key identifier: C0:C3:E8:94:14:A2:0E:5F:58:3B:B1:BE:79:B7:6A:4C:44:A9:1F:28 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C7207100842AEAE010B00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a709c782-1374-325d-a7c2-8131201459e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:72:07:10:08:42:ae:ae:01:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3f5c7365-8584-4660-8bc8-e40c71ad6c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:aa:02:67:fb:85:43:da:e0:77:c4:19:07: 4d:22:33:f8:bb:01:cc:16:02:09:c9:0b:b9:35:ef: e3:90:38:c0:43:e7:56:e9:8a:c8:a2:4c:f8:da:73: 1f:2b:87:11:93:98:e4:22:d1:0d:e4:fa:04:f5:b6: 03:02:c9:89:d5:e1:50:97:78:26:88:f6:3c:d4:19: 71:9c:77:dd:62:26:a9:24:42:c5:98:fa:d3:5f:fe: db:ff:54:2d:67:89:fd:70:3b:f1:68:52:b3:3a:ec: 95:bc:af:33:05:95:68:43:bd:bd:75:3a:75:f5:40: 68:c5:c5:2c:b9:8f:e5:eb:1d:6b:fc:c8:ad:57:37: 2f:ca:b6:b7:94:54:5a:0e:de:ab:90:c6:4c:f4:a5: c0:2f:80:53:6e:86:a7:ba:d4:c5:5e:67:db:a8:a9: 55:e3:b7:4d:6e:36:13:e9:2c:46:22:d5:b5:9b:c8: 8a:06:c6:41:46:c9:08:5e:df:dd:21:a0:6b:6c:0b: a5:5d:4f:9d:61:62:ac:4e:d2:e7:e3:54:f3:0e:12: f7:99:7d:63:a7:d3:d3:79:37:66:0f:f8:be:cb:76: a8:54:5b:df:d2:5e:38:ae:de:84:e0:ee:18:ad:58: 00:ba:b0:09:1b:0a:c2:de:50:2b:57:a3:de:4b:96: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C3:E8:94:14:A2:0E:5F:58:3B:B1:BE:79:B7:6A:4C:44:A9:1F:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a709c782-1374-325d-a7c2-8131201459e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:db:54:56:cd:8f:80:04:58:d2:15:c2:a1:56:b1:91:a0:ce: e5:0d:23:1c:f2:6c:32:c1:3b:88:06:f8:18:67:8f:56:53:42: b9:68:ab:0a:bf:92:7a:a8:32:5c:d7:32:b5:96:87:2f:7b:ad: 04:1a:45:1e:57:06:0a:50:70:23:88:0e:87:69:bc:18:ff:68: 54:5f:b8:a2:5a:40:fa:37:27:7e:17:9c:15:71:26:38:27:6d: a0:9e:32:7c:36:54:5b:31:04:f0:44:ed:ba:39:dd:f8:64:54: aa:7d:6b:c6:62:81:55:21:ef:8d:6a:f6:b8:51:c5:c5:64:cc: a6:69:3d:b9:34:d9:01:61:5d:57:b0:27:d6:9a:63:53:61:a3: ca:ed:aa:7b:40:74:18:08:3f:1d:7a:26:07:85:5e:a2:9a:46: 8b:63:fb:42:8d:37:30:ed:38:31:de:de:b2:2c:06:15:74:ee: b2:2f:bc:5c:60:0a:b6:e4:cf:58:a6:3b:ae:95:f1:c2:a9:d2: ee:55:f1:d7:96:2d:eb:3e:5b:ed:e4:8f:d7:87:04:21:29:bb: 91:a9:f8:53:fe:6f:8b:25:b1:58:ec:dd:e8:0b:50:1a:c3:c6: 76:c3:58:f9:20:aa:f7:3b:75:44:97:88:4d:56:40:9e:f4:db: ed:35:28:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfHIHEAhCrq4BCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Y1YzczNjUtODU4NC00NjYwLThiYzgtZTQwYzcxYWQ2YzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTiqAmf7hUPa4HfEGQdNIjP4uwHMFgIJyQu5 Ne/jkDjAQ+dW6YrIokz42nMfK4cRk5jkItEN5PoE9bYDAsmJ1eFQl3gmiPY81Blx nHfdYiapJELFmPrTX/7b/1QtZ4n9cDvxaFKzOuyVvK8zBZVoQ729dTp19UBoxcUs uY/l6x1r/MitVzcvyra3lFRaDt6rkMZM9KXAL4BTboanutTFXmfbqKlV47dNbjYT 6SxGItW1m8iKBsZBRskIXt/dIaBrbAulXU+dYWKsTtLn41TzDhL3mX1jp9PTeTdm D/i+y3aoVFvf0l44rt6E4O4YrVgAurAJGwrC3lArV6PeS5bo+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDD6JQUog5fWDuxvnm3akxEqR8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTcwOWM3ODItMTM3NC0z MjVkLWE3YzItODEzMTIwMTQ1OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfbVFbNj4AEWNIVwqFWsZGgzuUNIxzybDLBO4gG+Bhnj1ZTQrloqwq/ knqoMlzXMrWWhy97rQQaRR5XBgpQcCOIDodpvBj/aFRfuKJaQPo3J34XnBVxJjgn baCeMnw2VFsxBPBE7bo53fhkVKp9a8ZigVUh741q9rhRxcVkzKZpPbk02QFhXVew J9aaY1Nho8rtqntAdBgIPx16JgeFXqKaRotj+0KNNzDtODHe3rIsBhV07rIvvFxg Crbkz1imO66V8cKp0u5V8deWLes+W+3kj9eHBCEpu5Gp+FP+b4slsVjs3egLUBrD xnbDWPkgqvc7dUSXiE1WQJ702+01KJU= -----END CERTIFICATE-----Generated at Tue Sep 29 17:50:37 2026 by rpki-client