$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4422969b-409a-3c25-9720-750c1c1377c2.roa File: 4422969b-409a-3c25-9720-750c1c1377c2.roa (raw, json) Hash identifier: JoUkRxTyqD+HrVVQpAnDtdDFPMyQsA5IMSZTNcFozdA= Subject key identifier: 5A:B1:B3:A4:34:F3:F9:4C:DE:FF:34:49:E6:14:FB:EA:A0:F2:7A:FC Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584ECD37177556356DA437A5CF40 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4422969b-409a-3c25-9720-750c1c1377c2.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 395973 IP address blocks: 104.134.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:17:75:56:35:6d:a4:37:a5:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=e52b35fb-cdcf-4830-944c-2e66527a6dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:b1:44:1d:ab:e1:f8:23:17:06:0d:84:6d: ff:97:46:4c:ee:d3:91:e3:76:24:44:cb:35:75:6c: a8:d8:7b:4f:a3:d0:12:1c:b5:fb:4e:4a:c0:04:d8: da:12:1e:d6:d6:c7:6e:1c:89:c9:03:e3:cf:9e:52: 4d:e6:72:65:b9:95:45:5a:35:a4:c4:f3:2c:d1:72: 57:25:a5:20:62:fc:2c:54:18:20:ca:8b:20:26:39: 0c:b7:70:4e:6c:00:9f:91:dd:ba:88:9a:58:5c:b8: 41:d5:02:2b:bc:6f:bd:99:aa:1b:4a:94:c0:4f:e4: 68:ef:7e:2f:34:06:4a:fe:72:df:02:e4:6f:06:aa: 3a:03:a8:d6:07:88:f7:09:49:b8:69:ee:ab:b8:d7: c5:a5:ea:40:9b:df:af:6a:55:aa:32:54:17:81:13: 16:ed:6d:60:74:1b:fe:b5:db:bb:63:4f:17:7c:3e: 12:00:fb:29:77:a3:80:7f:4f:fd:e9:20:40:8b:91: 2a:a3:fa:ea:57:77:2a:72:ec:f2:51:24:29:59:c3: 05:21:fc:31:15:b5:39:46:61:24:a6:da:e0:3e:ce: 1c:9b:25:39:2a:26:2c:1e:d6:4d:2b:6c:63:ec:5c: 10:dc:64:75:e5:3c:9e:eb:a5:62:72:2f:93:61:1a: 12:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:B3:A4:34:F3:F9:4C:DE:FF:34:49:E6:14:FB:EA:A0:F2:7A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4422969b-409a-3c25-9720-750c1c1377c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:ca:03:69:dd:c5:c7:e4:30:45:36:09:3a:ed:c0:c1:02:56: 39:2a:b3:bd:71:f2:be:16:9f:d4:f2:87:d8:be:d7:2f:d2:13: 46:bd:7f:71:e2:9f:92:c0:3a:d1:26:eb:73:6d:d0:7f:29:f4: 2a:40:b0:a1:54:e9:9e:3a:ed:38:09:3e:4f:db:86:6d:e3:c7: b6:56:75:63:64:fc:ef:5a:cd:33:54:89:e3:cb:2d:86:cf:22: bb:36:75:72:9f:8e:a8:f2:bc:e9:30:69:dc:49:e7:f9:d9:5d: fb:4f:55:b9:39:db:2e:d0:1f:ce:d2:60:36:a3:90:c7:e4:73: 41:e3:fa:a5:d9:34:21:c8:7c:ee:8f:28:af:f0:57:37:78:d0: 70:ed:4e:94:ea:5c:13:9a:84:7a:ed:10:19:fc:6a:2f:52:77: 92:e1:85:ab:be:ef:7b:3d:e0:56:09:e5:0a:58:eb:d5:a3:d3: 2a:d5:cb:ac:af:56:cd:5e:e9:eb:3e:b6:d1:db:85:16:33:e3: 47:56:78:83:4e:bb:14:d9:2a:eb:ba:85:df:b1:9f:f4:5c:cb: 27:e7:b2:0f:55:ad:51:f4:f9:c8:57:48:35:a0:76:86:8d:f4: f0:f8:f4:96:fe:fd:2e:65:21:e3:dc:c9:6c:19:28:99:05:e7: 9f:76:d4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxd1VjVtpDelz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZTUyYjM1ZmItY2RjZi00ODMwLTk0NGMtMmU2NjUyN2E2ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkWxRB2r4fgjFwYNhG3/l0ZM7tOR43YkRMs1 dWyo2HtPo9ASHLX7TkrABNjaEh7W1sduHInJA+PPnlJN5nJluZVFWjWkxPMs0XJX JaUgYvwsVBggyosgJjkMt3BObACfkd26iJpYXLhB1QIrvG+9maobSpTAT+Ro734v NAZK/nLfAuRvBqo6A6jWB4j3CUm4ae6ruNfFpepAm9+valWqMlQXgRMW7W1gdBv+ tdu7Y08XfD4SAPspd6OAf0/96SBAi5Eqo/rqV3cqcuzyUSQpWcMFIfwxFbU5RmEk ptrgPs4cmyU5KiYsHtZNK2xj7FwQ3GR15Tye66Vici+TYRoSBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqxs6Q08/lM3v80SeYU++qg8nr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDQyMjk2OWItNDA5YS0z YzI1LTk3MjAtNzUwYzFjMTM3N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTKA2ndxcfkMEU2CTrtwMECVjkqs71x8r4Wn9Tyh9i+1y/SE0a9f3Hi n5LAOtEm63Nt0H8p9CpAsKFU6Z467TgJPk/bhm3jx7ZWdWNk/O9azTNUiePLLYbP Irs2dXKfjqjyvOkwadxJ5/nZXftPVbk52y7QH87SYDajkMfkc0Hj+qXZNCHIfO6P KK/wVzd40HDtTpTqXBOahHrtEBn8ai9Sd5Lhhau+73s94FYJ5QpY69Wj0yrVy6yv Vs1e6es+ttHbhRYz40dWeINOuxTZKuu6hd+xn/Rcyyfnsg9VrVH0+chXSDWgdoaN 9PD49Jb+/S5lIePcyWwZKJkF55921IE= -----END CERTIFICATE-----Generated at Thu Sep 10 19:59:17 2026 by rpki-client