$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa File: 5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa (raw, json) Hash identifier: Q3B2kjksVqaj+CtXC+eL5Wc7tPnaSQAIfMQDBwCfYBw= Subject key identifier: D0:9F:3C:11:D8:F0:77:6A:BF:0F:AD:56:F8:EC:C8:D2:94:F9:C6:22 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49849B6B1C356BC4A10588A0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:9b:6b:1c:35:6b:c4:a1:05:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f30037b-6612-4e75-8a37-ed65c859e578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:8f:c0:21:71:56:20:1b:c0:fa:1e:98:aa: 2d:3f:1a:f6:15:f3:b7:fc:ba:80:e3:fe:90:2f:20: e3:01:5d:17:c5:0e:90:21:fc:7c:ea:23:36:2d:5a: 9c:d6:91:aa:c0:1b:6d:79:72:0e:3e:db:c7:37:92: f0:60:69:c0:75:48:de:cb:d0:76:23:51:cb:19:7c: 46:04:ed:5b:cc:77:0c:c9:23:ef:73:c7:f5:cd:4a: bc:d7:8b:5a:5e:42:bb:7b:73:21:bb:71:b3:82:49: fb:61:4f:a6:19:f5:03:69:ff:d6:37:d3:87:87:2b: 56:6f:84:97:c6:29:32:77:26:2b:71:e0:95:dd:50: 20:d8:66:01:08:ec:1e:fc:37:6a:38:be:5b:61:00: 57:37:6c:69:7b:d0:73:db:bd:0c:11:5e:41:ac:93: c9:1f:ab:b1:1d:3e:9f:18:66:46:5c:4c:f5:cf:60: 1e:4d:16:3a:ee:24:02:f7:4b:91:d7:e7:1a:3c:9a: da:03:5f:ff:5e:48:2f:c5:0a:62:0c:b2:36:6e:b8: 65:b6:73:f4:20:cc:69:5c:77:dc:d4:d2:6c:54:74: 5f:03:5f:59:e2:52:4f:ce:b0:39:c3:90:a9:79:02: 0b:11:20:8c:3a:1c:0b:23:1a:c6:88:f3:0c:99:66: 2c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9F:3C:11:D8:F0:77:6A:BF:0F:AD:56:F8:EC:C8:D2:94:F9:C6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5ea1f7d4-ffc1-3d88-ab19-b0074d958300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b0:95:be:a5:8f:6c:be:c3:fe:7e:3d:98:02:23:f7:96:5f: 05:4d:b9:12:e4:50:4e:4d:90:0a:b8:9f:4c:1e:51:c7:e6:69: 63:9c:20:3a:4c:a4:31:62:9d:9c:2a:37:9a:e2:84:aa:8b:c7: 59:14:3c:92:6c:3c:a0:0a:75:5f:03:6a:77:09:98:37:96:e6: b1:a4:b6:ce:9f:7c:1f:84:9f:51:87:82:9d:0f:56:bc:01:44: cb:3c:8d:f9:90:55:26:ae:c0:ed:b2:14:cb:84:cc:92:d6:0f: 71:6c:cd:d2:14:6e:e2:63:a0:c1:d4:ca:1f:36:a7:83:25:1a: 13:b4:40:86:bc:f0:fe:e0:6a:72:25:8a:4d:7d:38:65:2f:e4: 2e:bb:98:13:50:65:ab:62:d8:0e:73:18:4e:0b:00:de:30:9e: 77:85:92:e7:02:43:9e:b5:6d:13:e5:32:a5:6f:70:89:42:98: d0:17:fb:00:10:39:0b:3c:f1:b2:66:24:81:0b:8e:cc:5a:d9: 0d:18:72:49:f6:f0:49:cb:63:60:b9:04:99:e0:75:cd:dd:05: 8e:54:25:35:f4:14:ab:e0:3b:a9:31:c0:9c:64:cb:d2:63:43: 21:df:26:0b:b4:04:82:fd:af:c2:d7:02:c2:68:9a:1e:91:9b: 7e:5d:9a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhJtrHDVrxKEFiKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWYzMDAzN2ItNjYxMi00ZTc1LThhMzctZWQ2NWM4NTllNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlmPwCFxViAbwPoemKotPxr2FfO3/LqA4/6Q LyDjAV0XxQ6QIfx86iM2LVqc1pGqwBtteXIOPtvHN5LwYGnAdUjey9B2I1HLGXxG BO1bzHcMySPvc8f1zUq814taXkK7e3Mhu3Gzgkn7YU+mGfUDaf/WN9OHhytWb4SX xikydyYrceCV3VAg2GYBCOwe/DdqOL5bYQBXN2xpe9Bz270MEV5BrJPJH6uxHT6f GGZGXEz1z2AeTRY67iQC90uR1+caPJraA1//XkgvxQpiDLI2brhltnP0IMxpXHfc 1NJsVHRfA19Z4lJPzrA5w5CpeQILESCMOhwLIxrGiPMMmWYsOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCfPBHY8Hdqvw+tVvjsyNKU+cYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNWVhMWY3ZDQtZmZjMS0z ZDg4LWFiMTktYjAwNzRkOTU4MzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIW9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2wlb6lj2y+w/5+PZgCI/eWXwVNuRLkUE5NkAq4n0weUcfmaWOcIDpM pDFinZwqN5rihKqLx1kUPJJsPKAKdV8DancJmDeW5rGkts6ffB+En1GHgp0PVrwB RMs8jfmQVSauwO2yFMuEzJLWD3FszdIUbuJjoMHUyh82p4MlGhO0QIa88P7ganIl ik19OGUv5C67mBNQZati2A5zGE4LAN4wnneFkucCQ561bRPlMqVvcIlCmNAX+wAQ OQs88bJmJIELjsxa2Q0Yckn28EnLY2C5BJngdc3dBY5UJTX0FKvgO6kxwJxky9Jj QyHfJgu0BIL9r8LXAsJomh6Rm35dmsc= -----END CERTIFICATE-----Generated at Fri Sep 25 10:01:42 2026 by rpki-client