$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf145ec-6bd0-383a-a36a-aab30e64c599.roa File: ecf145ec-6bd0-383a-a36a-aab30e64c599.roa (raw, json) Hash identifier: OwCp6pYWfxeSNshYHW8o1o3gV38xwJJPBv4Ury00Edg= Subject key identifier: 5F:F2:13:11:49:A1:7F:F9:64:91:11:C8:31:29:F5:D5:B3:80:B4:A5 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F7E7D9F394947EFF2562EC2E0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf145ec-6bd0-383a-a36a-aab30e64c599.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 15169 IP address blocks: 104.134.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:9f:39:49:47:ef:f2:56:2e:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=56cc7ac0-83f9-422a-b6bb-f9f3c933b245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:7b:10:6b:41:be:c0:21:97:16:97:b0:8f: 1f:0f:71:53:fe:58:1f:45:67:78:2f:ae:92:d6:c8: d5:53:b8:12:9d:17:27:f4:a7:1b:48:f1:da:e5:87: b4:5c:a6:dd:d9:0d:b5:58:b1:03:10:85:c6:b7:6e: c5:7c:71:80:c7:43:3a:a6:db:21:79:38:a0:56:ff: 5d:f4:4d:c0:86:a6:b4:44:46:78:c8:f6:d2:17:aa: f9:12:02:44:2b:9a:ea:93:8e:bf:89:66:38:40:17: a3:4c:1d:18:35:de:f1:13:d7:93:0a:c3:2b:01:5c: c2:f7:ba:ba:ac:8a:a6:f6:61:0c:53:9f:55:a7:9a: ae:b0:a3:7d:c9:75:89:ba:33:83:4d:28:f2:3c:ae: dc:37:5c:d7:ab:84:0d:7c:ed:de:03:67:fa:a4:b7: b8:27:25:68:2d:9a:41:55:14:99:33:8e:8e:81:0a: fd:58:a4:8a:94:52:6e:83:6f:e0:e3:c4:67:2c:bd: 8d:30:05:e5:45:4a:16:31:2e:40:6f:09:a2:bf:38: 58:c9:a5:27:22:92:2a:34:b2:25:ac:b7:62:fc:17: 01:ba:b0:63:90:20:6a:5f:db:f7:42:5d:39:36:ca: 1c:8d:6b:84:31:88:54:52:31:60:a4:85:45:8f:5d: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F2:13:11:49:A1:7F:F9:64:91:11:C8:31:29:F5:D5:B3:80:B4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecf145ec-6bd0-383a-a36a-aab30e64c599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:51:59:c5:58:91:82:a0:4b:af:a3:72:74:e6:ef:ea:b0:39: 69:4d:15:fc:67:4c:54:d9:76:49:18:83:98:e7:fe:6a:ec:33: 80:0a:6b:f0:8b:90:d9:97:24:48:6d:33:10:96:f7:e7:c4:74: 2e:64:0f:22:00:df:03:a0:43:64:88:0f:91:60:ea:51:b0:3c: 26:27:5c:f0:b9:53:48:b6:5e:0c:bc:94:87:aa:81:92:d7:dd: 93:69:c1:f5:4d:f8:a0:29:99:5e:8e:42:f3:38:e3:8c:63:de: 3e:c6:36:9d:02:75:29:e8:9f:1c:14:87:c6:d9:c2:2b:3f:8f: 70:39:7c:d3:cf:a5:be:bd:42:a7:3a:f1:8c:a3:05:c1:20:6f: fb:22:55:39:e2:fe:00:98:88:a2:d2:e2:77:90:e2:e3:2a:86: 73:ae:c0:88:56:49:e6:8d:ed:6e:61:43:b6:8c:3e:f7:43:db: 0d:10:93:32:36:27:ce:a3:d4:15:ba:b9:29:4d:e4:6f:3e:50: b6:72:44:65:65:4e:a4:bd:48:a5:5c:7c:02:c1:ea:69:7c:56: c7:c3:9f:e8:7a:bb:62:30:65:bd:fd:9c:e4:e0:e6:c3:3b:8a: 74:dc:c3:49:ce:3f:9a:4b:c8:55:a7:0c:3d:f0:6d:3d:4d:81: 10:d1:17:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fZ85SUfv8lYuwuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTZjYzdhYzAtODNmOS00MjJhLWI2YmItZjlmM2M5MzNiMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTt7EGtBvsAhlxaXsI8fD3FT/lgfRWd4L66S 1sjVU7gSnRcn9KcbSPHa5Ye0XKbd2Q21WLEDEIXGt27FfHGAx0M6ptsheTigVv9d 9E3Ahqa0REZ4yPbSF6r5EgJEK5rqk46/iWY4QBejTB0YNd7xE9eTCsMrAVzC97q6 rIqm9mEMU59Vp5qusKN9yXWJujODTSjyPK7cN1zXq4QNfO3eA2f6pLe4JyVoLZpB VRSZM46OgQr9WKSKlFJug2/g48RnLL2NMAXlRUoWMS5AbwmivzhYyaUnIpIqNLIl rLdi/BcBurBjkCBqX9v3Ql05NsocjWuEMYhUUjFgpIVFj131iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/yExFJoX/5ZJERyDEp9dWzgLSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWNmMTQ1ZWMtNmJkMC0z ODNhLWEzNmEtYWFiMzBlNjRjNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIYrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRRWcVYkYKgS6+jcnTm7+qwOWlNFfxnTFTZdkkYg5jn/mrsM4AKa/CL kNmXJEhtMxCW9+fEdC5kDyIA3wOgQ2SID5Fg6lGwPCYnXPC5U0i2Xgy8lIeqgZLX 3ZNpwfVN+KApmV6OQvM444xj3j7GNp0CdSnonxwUh8bZwis/j3A5fNPPpb69Qqc6 8YyjBcEgb/siVTni/gCYiKLS4neQ4uMqhnOuwIhWSeaN7W5hQ7aMPvdD2w0QkzI2 J86j1BW6uSlN5G8+ULZyRGVlTqS9SKVcfALB6ml8VsfDn+h6u2IwZb39nOTg5sM7 inTcw0nOP5pLyFWnDD3wbT1NgRDRF2A= -----END CERTIFICATE-----Generated at Sat Oct 31 12:07:48 2026 by rpki-client