$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa File: ae43273c-3272-3c44-8061-d922ad832252.roa (raw, json) Hash identifier: ulIVxMF2VnKOJsz3Fai2htsJKQ9n3IAmpTtEXtGuRFU= Subject key identifier: 3E:2C:9F:D3:C7:E7:D2:8E:13:B0:75:63:3C:9D:57:96:B4:83:33:6B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F857876AB0391F8508307A080 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 395973 IP address blocks: 104.134.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:76:ab:03:91:f8:50:83:07:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=9988199d-a859-4651-a9fc-c9bd80ab3ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:01:7f:df:7e:88:bb:ce:a1:8a:9b:8d:1e: d8:ee:6f:b3:4f:83:cb:8d:93:c7:00:45:9d:bc:f7: 60:a1:91:55:8b:e9:7e:28:06:ab:7f:cd:dd:97:a1: d8:23:e2:dc:35:00:53:07:b9:d7:7b:6b:12:b3:f1: 39:e5:96:9a:2c:d0:53:53:6a:95:95:6a:e4:2e:9b: ed:61:60:79:e8:ee:d4:21:a9:6e:97:1f:b7:48:58: e4:24:9d:80:3e:3f:49:dd:79:b9:df:83:d7:83:08: 71:3c:3e:5b:d1:4f:4b:15:03:4c:9c:98:60:1a:19: ae:54:9a:04:20:03:6e:13:d3:53:8e:1a:fe:aa:7f: 45:db:47:2f:9b:b0:06:c6:d3:24:18:61:87:44:0e: 82:2b:b4:5e:2e:58:0f:12:e2:ee:19:eb:b8:a4:71: 96:da:04:d5:0b:6d:ad:12:2c:e1:b4:6c:89:a3:cf: 1f:c0:80:4d:b4:a0:3a:17:b1:ed:b4:9b:00:79:f7: ca:38:8b:ee:66:81:c0:97:65:38:80:6b:18:12:11: 7c:a7:a9:40:4b:7a:9b:85:90:90:cd:e4:53:1a:16: 03:7c:a6:8b:75:e1:2c:07:b4:e0:02:5b:b6:2e:ff: fa:b9:a9:60:af:10:1f:df:5f:a2:4b:84:0c:48:c5: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2C:9F:D3:C7:E7:D2:8E:13:B0:75:63:3C:9D:57:96:B4:83:33:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ae43273c-3272-3c44-8061-d922ad832252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:55:2a:5b:12:ed:c5:52:3a:48:da:4d:55:ab:ba:b9:0a:84: 10:d0:c4:30:b8:63:12:0d:44:88:41:9e:31:59:ca:97:04:71: d1:5b:52:2f:f8:69:7d:3f:cf:5e:68:47:97:b4:87:bb:85:b1: 85:7d:37:11:0b:d7:3b:08:61:2d:47:65:44:f0:27:08:1c:ca: 35:08:a9:a0:07:63:f8:e0:3c:9c:73:55:ff:34:74:90:93:65: 01:1c:ec:d2:8a:10:61:86:a3:dc:de:3b:1b:89:0c:6a:74:90: 1b:1f:a6:40:a8:f9:e5:1f:cb:8b:96:38:96:73:07:cf:01:31: 98:ab:fc:11:ec:6e:b5:3a:36:fe:30:6c:12:ed:80:ca:41:52: 75:05:c7:f9:bf:44:b2:90:2f:72:f3:6e:27:1e:4e:f1:f8:2b: 41:18:d6:23:dd:ab:70:68:ed:5d:a0:79:e8:8f:4d:d7:8d:73: e1:7a:bf:d6:07:a8:c5:cb:52:26:4b:ee:ff:93:99:25:59:e4: d6:6a:d5:53:2f:95:e0:b2:e1:35:c5:5e:a9:27:f0:6b:88:67: ef:55:93:a0:88:41:05:3b:ef:4c:18:39:5d:98:71:ca:b3:9c: d6:0b:48:32:2f:5c:d8:be:4d:9a:94:0e:2f:0e:db:3c:2a:3a: 38:56:9f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHarA5H4UIMHoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk OTk4ODE5OWQtYTg1OS00NjUxLWE5ZmMtYzliZDgwYWIzYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZQBf99+iLvOoYqbjR7Y7m+zT4PLjZPHAEWd vPdgoZFVi+l+KAarf83dl6HYI+LcNQBTB7nXe2sSs/E55ZaaLNBTU2qVlWrkLpvt YWB56O7UIalulx+3SFjkJJ2APj9J3Xm534PXgwhxPD5b0U9LFQNMnJhgGhmuVJoE IANuE9NTjhr+qn9F20cvm7AGxtMkGGGHRA6CK7ReLlgPEuLuGeu4pHGW2gTVC22t EizhtGyJo88fwIBNtKA6F7HttJsAeffKOIvuZoHAl2U4gGsYEhF8p6lAS3qbhZCQ zeRTGhYDfKaLdeEsB7TgAlu2Lv/6ualgrxAf31+iS4QMSMXrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4sn9PH59KOE7B1YzydV5a0gzNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWU0MzI3M2MtMzI3Mi0z YzQ0LTgwNjEtZDkyMmFkODMyMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFVKlsS7cVSOkjaTVWrurkKhBDQxDC4YxINRIhBnjFZypcEcdFbUi/4 aX0/z15oR5e0h7uFsYV9NxEL1zsIYS1HZUTwJwgcyjUIqaAHY/jgPJxzVf80dJCT ZQEc7NKKEGGGo9zeOxuJDGp0kBsfpkCo+eUfy4uWOJZzB88BMZir/BHsbrU6Nv4w bBLtgMpBUnUFx/m/RLKQL3LzbiceTvH4K0EY1iPdq3Bo7V2geeiPTdeNc+F6v9YH qMXLUiZL7v+TmSVZ5NZq1VMvleCy4TXFXqkn8GuIZ+9Vk6CIQQU770wYOV2Yccqz nNYLSDIvXNi+TZqUDi8O2zwqOjhWn/A= -----END CERTIFICATE-----Generated at Sat Oct 31 12:31:27 2026 by rpki-client