$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa File: c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa (raw, json) Hash identifier: y2NJW6OIx7HNhUcfT9DAO0TsTDzIwc5ghhVOSY5XUrk= Subject key identifier: 3A:83:9F:18:7C:53:FB:03:11:FA:34:D3:2B:52:B7:36:41:4F:58:85 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584EA79678D89A7ACEC80B710E00 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 41264 IP address blocks: 104.133.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:78:d8:9a:7a:ce:c8:0b:71:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7f16e89c-fbf5-4439-81e1-404bc081849a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:6f:23:a6:ed:39:c3:d3:b4:58:1a:e6:15: 97:b1:64:3c:d2:af:39:36:63:0d:ef:24:9f:d4:ea: ce:51:cf:be:9b:fb:a3:d6:cb:ef:e6:12:e4:8e:02: ef:f2:f9:75:f8:70:b2:8c:04:fc:6f:20:1d:eb:8a: 34:28:4b:e7:c5:bf:55:a1:76:84:1c:f8:40:0a:89: 63:20:69:fd:25:1d:bf:89:66:29:8e:37:9f:7a:d3: ae:9f:f0:1c:ce:e6:2c:38:d8:43:d9:f0:7a:13:63: 15:ed:53:3e:ab:54:59:bd:c6:5c:72:8a:81:7b:86: 1e:17:ad:e8:c8:65:1a:a3:f4:75:e0:0e:ef:39:c4: ca:59:7c:8f:f6:b4:af:6a:31:52:6f:34:19:1f:1f: 24:6e:86:9f:94:55:f2:66:b3:b8:ed:bf:2e:14:91: 6e:b7:bd:7c:02:9c:73:0d:2f:80:e3:cb:f2:d3:25: af:c1:23:57:10:41:6a:7e:14:55:e2:b5:04:dc:31: ae:ab:9c:73:f3:52:fa:31:6e:72:b4:d7:93:45:82: 93:d0:66:49:a2:39:c7:02:44:c3:26:ea:71:12:b9: f8:88:75:01:f3:20:59:a1:e7:e5:05:16:2f:6e:09: 8d:5b:0a:fb:9e:4e:1b:01:c8:98:7c:03:fa:cc:2d: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:83:9F:18:7C:53:FB:03:11:FA:34:D3:2B:52:B7:36:41:4F:58:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ec:90:15:8e:c2:94:b8:9a:28:18:44:80:18:2a:ef:59:a5: 46:75:90:c8:9c:b3:a3:35:af:10:c4:38:57:cb:e4:61:7a:72: 99:b3:25:7d:8f:e1:c6:72:d3:0a:bf:e3:8c:71:7d:15:53:ae: 3b:b6:a2:c3:2d:c9:d7:77:28:12:7b:b6:a8:48:88:81:aa:fb: f6:8d:7d:f1:66:d5:a9:c2:6a:93:92:7a:ca:5d:dd:09:0c:24: c5:d5:f5:3a:9a:5c:fe:26:a0:e8:72:e9:ed:54:5b:c2:0a:13: 6f:0d:0f:bf:cc:60:a6:f5:f8:96:bd:fa:63:e1:30:3e:ab:80: 1d:b7:75:f4:fc:45:83:e9:d9:ec:37:ea:5d:93:ed:2d:cf:89: e7:09:49:fa:84:ba:ea:dc:f5:cc:07:70:2c:3e:7a:8d:08:31: d8:c5:66:35:d7:e2:bd:ab:ce:e7:1e:b2:52:40:9d:e7:8c:8b: 5a:4f:58:89:d6:32:6c:a3:39:83:f0:24:7b:46:7c:46:e4:c1: fb:e8:b9:64:74:02:04:9d:f2:21:d3:44:ec:7f:dc:ac:a8:14: 19:28:84:86:83:79:80:24:4c:c1:75:dc:f3:c8:fd:19:08:4e: 7c:b4:73:c1:09:72:fe:7d:82:96:1c:03:f4:d1:3e:ca:32:3c: 6d:12:32:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlnjYmnrOyAtxDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2YxNmU4OWMtZmJmNS00NDM5LTgxZTEtNDA0YmMwODE4NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOVvI6btOcPTtFga5hWXsWQ80q85NmMN7ySf 1OrOUc++m/uj1svv5hLkjgLv8vl1+HCyjAT8byAd64o0KEvnxb9VoXaEHPhAColj IGn9JR2/iWYpjjefetOun/AczuYsONhD2fB6E2MV7VM+q1RZvcZccoqBe4YeF63o yGUao/R14A7vOcTKWXyP9rSvajFSbzQZHx8kboaflFXyZrO47b8uFJFut718Apxz DS+A48vy0yWvwSNXEEFqfhRV4rUE3DGuq5xz81L6MW5ytNeTRYKT0GZJojnHAkTD JupxErn4iHUB8yBZoeflBRYvbgmNWwr7nk4bAciYfAP6zC1p+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqDnxh8U/sDEfo00ytStzZBT1iFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzhlOTU0ODUtNGM3OC0z Nzg4LTlmN2YtZjNhZDFjZGVhZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHskBWOwpS4migYRIAYKu9ZpUZ1kMics6M1rxDEOFfL5GF6cpmzJX2P 4cZy0wq/44xxfRVTrju2osMtydd3KBJ7tqhIiIGq+/aNffFm1anCapOSespd3QkM JMXV9TqaXP4moOhy6e1UW8IKE28ND7/MYKb1+Ja9+mPhMD6rgB23dfT8RYPp2ew3 6l2T7S3PiecJSfqEuurc9cwHcCw+eo0IMdjFZjXX4r2rzuceslJAneeMi1pPWInW MmyjOYPwJHtGfEbkwfvouWR0AgSd8iHTROx/3KyoFBkohIaDeYAkTMF13PPI/RkI Tny0c8EJcv59gpYcA/TRPsoyPG0SMho= -----END CERTIFICATE-----Generated at Thu Sep 10 19:26:26 2026 by rpki-client