$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79103b5c-43ae-310e-a3e0-ad458665e3a8.roa File: 79103b5c-43ae-310e-a3e0-ad458665e3a8.roa (raw, json) Hash identifier: MRatNg1CfJUwIEyiKrxAyzwh78LkTa7XGZT3o+PayK4= Subject key identifier: 95:A8:28:17:28:8E:F2:6F:6A:0B:35:9D:0E:2E:C7:B6:4A:32:93:F0 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA79685DC523A5AF725A829B8 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79103b5c-43ae-310e-a3e0-ad458665e3a8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 395973 IP address blocks: 104.134.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:85:dc:52:3a:5a:f7:25:a8:29:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9705c294-72ef-42e5-a410-11e3432e4b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:c8:1a:97:18:51:63:c6:b1:76:9f:a3:c3: b4:f1:fc:84:6b:d3:80:b7:b5:8d:ab:b5:57:24:f8: 19:62:d4:3c:ee:e9:10:1f:9e:ca:4d:44:94:0b:9e: 99:85:e3:7f:81:ee:39:78:bd:b6:ea:f4:e9:3f:52: b4:5f:88:91:26:99:3b:e1:00:bb:25:62:c5:a4:29: 59:c2:a0:64:f7:a3:15:3a:85:17:dc:f2:f3:14:59: 50:af:7a:a3:f5:51:5b:e2:2a:be:8f:56:bb:d0:a8: 3a:a4:1a:75:3e:7f:0f:00:99:75:98:97:37:4d:bc: 6f:b7:99:85:05:f4:1b:27:ab:b5:27:2c:1d:23:bc: dd:dc:a6:4c:bd:74:c6:a4:f9:e2:7e:26:4e:64:88: 85:3c:65:0e:ae:a5:6f:1d:3a:60:1b:c5:16:ec:44: 3f:d6:a5:19:44:ee:53:05:66:65:a9:4f:14:9f:d0: 88:79:21:b5:04:59:5a:28:ea:db:76:da:50:bf:d8: 2d:bc:ee:72:1e:f2:47:b1:61:32:8c:6e:ad:70:33: f6:a0:67:9e:26:78:7d:61:7f:3a:1e:d3:37:45:de: 13:a4:77:b1:54:55:39:0b:58:71:2d:e6:26:aa:52: 50:90:10:0a:a4:4a:2e:09:df:b2:6e:17:ec:f6:40: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:28:17:28:8E:F2:6F:6A:0B:35:9D:0E:2E:C7:B6:4A:32:93:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79103b5c-43ae-310e-a3e0-ad458665e3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d3:91:28:85:a7:24:d8:ef:61:19:b4:9e:92:3f:a9:a5:60: 42:53:fe:0f:8e:d2:77:7d:49:52:6e:bd:4c:09:a2:f2:4c:c8: be:8a:48:27:e0:0c:d1:56:af:6d:9e:72:a5:0d:fd:21:2d:dc: f6:87:13:d3:e2:69:8f:7b:ab:fc:ae:d7:0c:46:49:2a:80:e1: be:ad:11:29:67:ae:b1:15:2e:1c:a5:3b:4f:68:b6:2f:a0:74: d9:17:ba:7c:3a:d0:c2:a3:49:21:2b:af:97:bd:a4:39:a7:e6: e1:52:90:11:af:78:db:20:71:d8:8f:eb:fb:a9:a8:e5:a2:f1: 29:15:f6:9f:34:46:40:93:e7:e1:6f:69:5b:41:66:be:f4:f7: bb:df:7e:b9:5f:af:0a:82:36:4a:ce:83:f0:36:05:6b:86:fe: f7:c2:ce:e0:66:41:76:0b:e5:d0:32:cf:17:e4:0b:05:19:e7: 67:fa:5d:cf:f0:7f:99:f2:08:d8:c9:ce:60:7b:8a:b9:84:cb: 79:10:0e:57:0a:f3:a1:f8:20:a4:b9:c6:e8:02:2e:52:cf:f9: 3a:41:30:39:34:f5:00:e3:41:e7:d0:6f:79:1e:6e:58:02:f4: c7:7f:c1:2f:52:fe:d8:86:e6:9c:6b:2f:c3:1e:a6:45:a5:5d: 79:49:a3:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nloXcUjpa9yWoKbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTcwNWMyOTQtNzJlZi00MmU1LWE0MTAtMTFlMzQzMmU0YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRfIGpcYUWPGsXafo8O08fyEa9OAt7WNq7VX JPgZYtQ87ukQH57KTUSUC56ZheN/ge45eL226vTpP1K0X4iRJpk74QC7JWLFpClZ wqBk96MVOoUX3PLzFFlQr3qj9VFb4iq+j1a70Kg6pBp1Pn8PAJl1mJc3Tbxvt5mF BfQbJ6u1JywdI7zd3KZMvXTGpPnifiZOZIiFPGUOrqVvHTpgG8UW7EQ/1qUZRO5T BWZlqU8Un9CIeSG1BFlaKOrbdtpQv9gtvO5yHvJHsWEyjG6tcDP2oGeeJnh9YX86 HtM3Rd4TpHexVFU5C1hxLeYmqlJQkBAKpEouCd+ybhfs9kBypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWoKBcojvJvags1nQ4ux7ZKMpPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzkxMDNiNWMtNDNhZS0z MTBlLWEzZTAtYWQ0NTg2NjVlM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPTkSiFpyTY72EZtJ6SP6mlYEJT/g+O0nd9SVJuvUwJovJMyL6KSCfg DNFWr22ecqUN/SEt3PaHE9PiaY97q/yu1wxGSSqA4b6tESlnrrEVLhylO09oti+g dNkXunw60MKjSSErr5e9pDmn5uFSkBGveNsgcdiP6/upqOWi8SkV9p80RkCT5+Fv aVtBZr7097vffrlfrwqCNkrOg/A2BWuG/vfCzuBmQXYL5dAyzxfkCwUZ52f6Xc/w f5nyCNjJzmB7irmEy3kQDlcK86H4IKS5xugCLlLP+TpBMDk09QDjQefQb3keblgC 9Md/wS9S/tiG5pxrL8MepkWlXXlJo6Q= -----END CERTIFICATE-----Generated at Thu Sep 10 19:57:50 2026 by rpki-client