$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04201947-22ad-3a8f-bfbc-ccd72723c584.roa File: 04201947-22ad-3a8f-bfbc-ccd72723c584.roa (raw, json) Hash identifier: kvmorf4slSfXCiooGVUDl6anN5SFtQ8RaHE6l+pfj98= Subject key identifier: 96:DC:43:9B:72:B0:7C:D9:66:BF:4F:6C:75:C1:09:92:0E:A0:5E:21 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C707D775FCA0AD2ED95C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04201947-22ad-3a8f-bfbc-ccd72723c584.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:70:7d:77:5f:ca:0a:d2:ed:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a428a185-9f6f-4200-a554-5822b4d61874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:6c:b0:8a:71:b5:59:4a:7c:13:5c:16:23: 29:be:d7:40:ba:53:86:8a:3b:a8:a5:14:42:89:7f: 8d:0a:af:d3:5d:89:3c:c7:0a:17:0d:b8:db:8c:1e: 21:6b:50:e9:07:7d:cd:64:32:f1:b3:75:7c:35:e7: 08:89:ba:85:d2:59:58:5d:a0:62:a3:f1:e9:43:fe: 1b:0c:d5:0f:7d:61:cb:d9:94:6b:95:ea:fd:b8:b9: a2:1b:5c:8b:50:4a:77:dd:ad:21:2a:1f:8b:72:12: 40:8d:3d:6a:19:61:60:58:c7:f3:6f:4c:84:1b:1f: 23:24:c5:3d:3c:cf:f3:8b:da:ed:ab:db:ad:80:7d: 2a:e3:9a:d6:03:6f:17:31:2f:07:ba:2a:34:c1:2f: 86:82:50:d3:7a:1a:7c:41:5c:b6:79:b7:fc:cc:07: 0e:5d:ae:29:b8:49:79:bc:32:df:e7:58:10:8e:ef: b4:71:b6:99:a7:db:1c:67:aa:5a:80:32:50:9e:1e: 49:85:37:9e:b7:11:92:e9:d9:87:1c:76:e7:30:91: 59:28:80:d4:85:21:1a:31:8f:ef:df:1e:bc:d7:68: 46:b4:50:50:17:b2:14:35:58:da:a0:ee:e3:53:b9: 63:9a:79:e3:3c:f6:55:30:c0:03:e1:6e:0b:36:db: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:43:9B:72:B0:7C:D9:66:BF:4F:6C:75:C1:09:92:0E:A0:5E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/04201947-22ad-3a8f-bfbc-ccd72723c584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d1:1c:54:ff:a9:eb:39:77:e6:ee:46:1e:a9:8a:fe:b6:b0: 05:7e:a3:45:ee:97:0b:cf:0e:8e:4a:84:5a:20:84:47:15:bd: 94:c3:97:e3:d4:84:50:67:76:55:91:a7:ee:11:4d:18:c3:9b: 98:31:e3:54:56:88:8b:64:d8:b4:1f:98:6d:61:49:09:d9:a2: 56:1e:b0:27:3a:f8:d3:45:a2:9d:18:72:97:45:10:43:79:bf: 8c:2a:b8:bb:93:3b:9c:6b:83:c4:68:30:85:c2:9c:33:0c:34: f6:e6:ee:e3:2f:51:3d:63:81:81:10:d1:bb:e4:d9:fa:37:b4: 03:85:d1:8e:5e:c6:e6:a3:87:68:ef:8f:98:c8:30:cb:19:03: 0f:a7:f0:43:01:a7:e1:cf:f9:97:85:6b:52:0e:76:5a:dd:bb: ea:27:fb:20:16:6a:bc:c1:1b:c0:01:de:bb:62:7e:81:6d:c6: 9e:9b:9f:7d:ff:a2:44:1d:d3:a2:c7:e4:e2:1c:64:47:e4:55: 71:74:09:64:e7:7e:cf:25:fb:38:68:dd:fd:54:6b:58:1f:ea: 6e:ac:c6:2d:07:10:ec:15:20:7e:d5:4c:ba:68:e3:70:71:62: a9:f5:bd:17:45:38:92:3f:cf:53:1d:04:a3:bf:54:5f:f5:2f: ea:20:35:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfHB9d1/KCtLtlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQyOGExODUtOWY2Zi00MjAwLWE1NTQtNTgyMmI0ZDYxODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaNssIpxtVlKfBNcFiMpvtdAulOGijuopRRC iX+NCq/TXYk8xwoXDbjbjB4ha1DpB33NZDLxs3V8NecIibqF0llYXaBio/HpQ/4b DNUPfWHL2ZRrler9uLmiG1yLUEp33a0hKh+LchJAjT1qGWFgWMfzb0yEGx8jJMU9 PM/zi9rtq9utgH0q45rWA28XMS8Huio0wS+GglDTehp8QVy2ebf8zAcOXa4puEl5 vDLf51gQju+0cbaZp9scZ6pagDJQnh5JhTeetxGS6dmHHHbnMJFZKIDUhSEaMY/v 3x6812hGtFBQF7IUNVjaoO7jU7ljmnnjPPZVMMAD4W4LNtu1OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbcQ5tysHzZZr9PbHXBCZIOoF4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDQyMDE5NDctMjJhZC0z YThmLWJmYmMtY2NkNzI3MjNjNTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3RHFT/qes5d+buRh6piv62sAV+o0XulwvPDo5KhFoghEcVvZTDl+PU hFBndlWRp+4RTRjDm5gx41RWiItk2LQfmG1hSQnZolYesCc6+NNFop0YcpdFEEN5 v4wquLuTO5xrg8RoMIXCnDMMNPbm7uMvUT1jgYEQ0bvk2fo3tAOF0Y5exuajh2jv j5jIMMsZAw+n8EMBp+HP+ZeFa1IOdlrdu+on+yAWarzBG8AB3rtifoFtxp6bn33/ okQd06LH5OIcZEfkVXF0CWTnfs8l+zho3f1Ua1gf6m6sxi0HEOwVIH7VTLpo43Bx Yqn1vRdFOJI/z1MdBKO/VF/1L+ogNXo= -----END CERTIFICATE-----Generated at Fri Sep 25 16:03:49 2026 by rpki-client