$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa File: bd3b0885-6cef-3635-b11c-5144dec857f3.roa (raw, json) Hash identifier: 4LGXKRJSDGKq3bABjS3QbuhIWbvHn2MhY+ArR9EyOkI= Subject key identifier: 19:96:AA:50:27:8F:B3:2D:25:28:9C:69:E2:AF:A9:F4:DA:3E:BA:A9 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C887C00B805BFF9FD9440 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395973 IP address blocks: 104.134.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:88:7c:00:b8:05:bf:f9:fd:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78725dea-cfd7-40dc-bac1-b4c0fb0dd8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:79:50:08:d3:b0:27:11:45:8c:d4:50:64: 7f:50:a6:b1:51:cf:67:f4:42:32:2e:46:ea:cd:11: ec:91:67:58:af:10:99:e4:f0:b0:74:57:a1:ae:e8: 61:95:88:a1:c4:d2:cb:da:9f:32:26:83:ed:3d:91: a0:f2:ec:34:8a:be:80:07:57:b1:ac:aa:19:cd:ac: 06:45:9d:d9:db:43:18:4e:d6:4c:fd:1c:e7:66:f4: da:88:6b:f7:1b:cc:5f:e3:62:95:15:df:50:0d:7a: 2f:be:e0:07:47:fc:0c:63:2f:5a:35:c3:88:c2:bd: 6c:9a:93:81:c5:f6:2f:44:eb:4f:d9:c6:a4:bb:40: de:b2:72:2e:12:06:5e:c8:d7:38:3f:9e:1a:87:17: 54:6e:c2:9f:34:26:3f:0f:7c:f1:42:e5:fd:85:48: 3a:b2:c7:13:53:47:2c:86:31:f9:ca:f3:42:34:f7: 8e:89:a9:5b:1c:dc:05:f0:07:e5:92:c8:5b:28:2d: 9c:83:5a:43:da:f5:aa:8f:0a:ba:be:4f:7f:98:4b: 6b:8f:84:62:c9:78:a1:3f:56:0f:71:0a:e2:48:06: f7:24:b6:f8:89:d1:24:1a:9a:5c:4b:6b:0c:01:9a: b0:a5:88:28:59:c3:fa:9f:92:38:08:18:79:0b:18: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:96:AA:50:27:8F:B3:2D:25:28:9C:69:E2:AF:A9:F4:DA:3E:BA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd3b0885-6cef-3635-b11c-5144dec857f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8d:27:ba:5f:61:90:7a:d7:bf:87:ac:c1:56:c3:e9:f2:db: 99:db:51:2a:2c:79:e9:e8:7f:7d:60:81:a4:ad:2c:8e:83:a6: 23:ef:35:a6:21:53:c7:19:20:1e:e0:57:0b:0f:c0:9c:f9:7b: cb:70:28:7c:8f:8a:db:82:66:25:be:30:38:e9:a4:27:09:71: 4d:0b:fb:92:14:71:64:bb:1c:db:64:a3:17:ce:22:ff:dc:8e: 75:c5:f7:82:c1:c1:3b:82:04:fe:66:4c:51:a3:a8:b4:6c:75: a6:55:de:e8:82:7d:4e:46:70:79:2a:e1:95:d6:8b:a3:2e:84: 19:44:41:a2:cd:72:9f:c2:d2:8f:f9:dd:c4:5f:5c:36:7b:8a: bf:f6:11:7e:ff:f2:ae:9e:6c:46:a8:27:f3:94:81:1f:71:ff: 2a:08:a8:3a:fc:6f:6d:b8:17:83:06:a8:b6:3a:6c:0a:ae:6a: ef:fc:f1:77:14:36:a5:1a:2f:9e:fd:75:8a:84:0a:86:91:7a: 21:e0:89:98:4e:82:36:eb:59:6d:d7:48:30:ea:b7:f5:92:eb: 03:1d:dd:87:69:1b:c2:54:e8:2f:38:ef:9e:57:5f:85:ab:50: aa:fa:8f:0a:f1:39:b6:8c:4a:2a:91:b5:9a:16:d0:db:07:b5: 51:f1:61:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfIh8ALgFv/n9lEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzg3MjVkZWEtY2ZkNy00MGRjLWJhYzEtYjRjMGZiMGRkOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1h5UAjTsCcRRYzUUGR/UKaxUc9n9EIyLkbq zRHskWdYrxCZ5PCwdFehruhhlYihxNLL2p8yJoPtPZGg8uw0ir6AB1exrKoZzawG RZ3Z20MYTtZM/RznZvTaiGv3G8xf42KVFd9QDXovvuAHR/wMYy9aNcOIwr1smpOB xfYvROtP2caku0DesnIuEgZeyNc4P54ahxdUbsKfNCY/D3zxQuX9hUg6sscTU0cs hjH5yvNCNPeOialbHNwF8AflkshbKC2cg1pD2vWqjwq6vk9/mEtrj4RiyXihP1YP cQriSAb3JLb4idEkGppcS2sMAZqwpYgoWcP6n5I4CBh5CxiVIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmWqlAnj7MtJSicaeKvqfTaPrqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmQzYjA4ODUtNmNlZi0z NjM1LWIxMWMtNTE0NGRlYzg1N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2NJ7pfYZB617+HrMFWw+ny25nbUSoseenof31ggaStLI6DpiPvNaYh U8cZIB7gVwsPwJz5e8twKHyPituCZiW+MDjppCcJcU0L+5IUcWS7HNtkoxfOIv/c jnXF94LBwTuCBP5mTFGjqLRsdaZV3uiCfU5GcHkq4ZXWi6MuhBlEQaLNcp/C0o/5 3cRfXDZ7ir/2EX7/8q6ebEaoJ/OUgR9x/yoIqDr8b224F4MGqLY6bAquau/88XcU NqUaL579dYqECoaReiHgiZhOgjbrWW3XSDDqt/WS6wMd3YdpG8JU6C84755XX4Wr UKr6jwrxObaMSiqRtZoW0NsHtVHxYTs= -----END CERTIFICATE-----Generated at Sat Oct 31 02:41:38 2026 by rpki-client