$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa File: 01620e47-da9e-39c7-a15b-342b4b54372f.roa (raw, json) Hash identifier: D4nhv6vsQ/oN9LqCvjtT/+3uQS3JrbC37IubBQE/LzM= Subject key identifier: E2:DF:BB:58:DA:05:5F:78:14:C5:29:5C:5C:93:5B:95:11:BF:A2:A5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA7968800F1B77ADD72BE7A40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:88:00:f1:b7:7a:dd:72:be:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7b39421d-2f6c-4f29-a525-628ce3c19061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:68:3f:be:5a:12:64:f1:da:6b:15:f1:88: 4c:2a:78:ed:df:a5:6a:cb:32:82:5b:12:ba:bc:6c: c2:26:f4:51:d1:7a:44:ab:d5:04:6b:bf:0a:e7:cc: 26:10:5a:55:98:b6:b3:06:8a:17:4e:0a:be:58:57: 3d:f4:2a:8f:e3:f9:f6:fb:c9:db:2c:b1:d1:60:93: 3e:4e:bc:85:b4:e6:cc:d1:03:d8:75:59:ea:9c:e1: 0b:3f:61:12:0f:1f:b1:fb:ff:cd:3a:19:f7:23:cb: 4f:2e:21:a1:52:ec:80:80:83:53:3b:d4:b6:f3:a5: 22:c9:9a:29:03:f3:dd:eb:ed:55:a0:85:9a:9b:67: c7:51:d2:96:51:51:74:2a:43:e9:70:18:cc:16:db: ad:30:56:c8:14:88:a1:ff:43:75:3d:3c:f1:34:bd: 4c:39:42:36:0c:45:7d:57:b7:8f:14:8a:62:2c:7c: b6:66:a7:0e:24:bd:ab:5d:44:75:97:c8:18:95:41: 70:73:06:55:67:cd:53:d9:9d:55:3d:f5:00:12:00: fb:c6:fe:db:eb:5e:d6:87:c7:f9:61:70:9c:21:d7: 32:a1:37:90:b6:b9:6b:5e:c4:53:dc:b1:ed:52:f2: 4f:ef:71:2b:66:9a:18:94:29:be:ff:a9:be:c5:c8: a9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DF:BB:58:DA:05:5F:78:14:C5:29:5C:5C:93:5B:95:11:BF:A2:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01620e47-da9e-39c7-a15b-342b4b54372f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:04:fd:2f:5d:af:ce:31:50:45:bc:cf:f3:6a:b6:4c:25:9f: bc:73:e2:a4:0f:65:ae:00:0a:c5:64:55:05:eb:1e:c2:2b:fa: 40:fd:7b:91:ea:88:70:bf:f5:d8:45:a8:07:90:5a:48:00:1a: 17:b3:24:03:a8:c4:38:d8:27:f0:dd:2e:54:f4:83:26:92:e9: a2:73:23:5c:00:7e:16:bc:16:55:11:f1:74:71:0d:40:c9:88: a2:2a:9c:0f:73:28:41:21:06:da:17:a4:66:cc:bf:0e:75:62: db:96:90:33:29:f7:46:ba:ac:39:a5:20:0f:89:7b:04:39:04: ba:6a:87:c7:cc:0a:b6:89:15:01:5c:96:dd:b2:1e:07:78:e6: 35:33:13:4c:54:34:66:62:d3:47:06:b6:23:52:77:5b:42:39: 4c:c1:90:56:d7:69:11:74:ae:80:c7:0f:60:c7:07:3d:ff:b3: d1:32:d7:ca:cd:85:29:4b:f3:9d:66:a6:ae:3c:69:18:5d:3b: 85:ec:f7:63:d5:97:ee:9f:dc:e2:b3:6c:d8:cf:1d:eb:0e:7c: 21:a7:d1:8d:5b:ca:7b:31:8b:f7:69:09:73:91:22:c3:2f:2a: 44:56:21:53:eb:27:43:58:ef:2b:70:f5:72:bd:c4:9a:1d:be: 2b:3b:97:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlogA8bd63XK+ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2IzOTQyMWQtMmY2Yy00ZjI5LWE1MjUtNjI4Y2UzYzE5MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis9oP75aEmTx2msV8YhMKnjt36VqyzKCWxK6 vGzCJvRR0XpEq9UEa78K58wmEFpVmLazBooXTgq+WFc99CqP4/n2+8nbLLHRYJM+ TryFtObM0QPYdVnqnOELP2ESDx+x+//NOhn3I8tPLiGhUuyAgINTO9S286UiyZop A/Pd6+1VoIWam2fHUdKWUVF0KkPpcBjMFtutMFbIFIih/0N1PTzxNL1MOUI2DEV9 V7ePFIpiLHy2ZqcOJL2rXUR1l8gYlUFwcwZVZ81T2Z1VPfUAEgD7xv7b617Wh8f5 YXCcIdcyoTeQtrlrXsRT3LHtUvJP73ErZpoYlCm+/6m+xcipQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLfu1jaBV94FMUpXFyTW5URv6KlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDE2MjBlNDctZGE5ZS0z OWM3LWExNWItMzQyYjRiNTQzNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkE/S9dr84xUEW8z/Nqtkwln7xz4qQPZa4ACsVkVQXrHsIr+kD9e5Hq iHC/9dhFqAeQWkgAGhezJAOoxDjYJ/DdLlT0gyaS6aJzI1wAfha8FlUR8XRxDUDJ iKIqnA9zKEEhBtoXpGbMvw51YtuWkDMp90a6rDmlIA+JewQ5BLpqh8fMCraJFQFc lt2yHgd45jUzE0xUNGZi00cGtiNSd1tCOUzBkFbXaRF0roDHD2DHBz3/s9Ey18rN hSlL851mpq48aRhdO4Xs92PVl+6f3OKzbNjPHesOfCGn0Y1bynsxi/dpCXORIsMv KkRWIVPrJ0NY7ytw9XK9xJodvis7l+U= -----END CERTIFICATE-----Generated at Thu Sep 10 19:26:03 2026 by rpki-client