$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2553defe-e935-3f4e-a537-0b6e1a8c630a.roa File: 2553defe-e935-3f4e-a537-0b6e1a8c630a.roa (raw, json) Hash identifier: +X3IhpTMAocQG6N5zt/QIwcb6C6FoCU5/QlUz72LDUg= Subject key identifier: 4C:17:83:29:B0:34:0E:9E:DF:DC:1C:97:94:18:1F:1F:AA:D4:73:8A Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C9F20B5A005872574A180 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2553defe-e935-3f4e-a537-0b6e1a8c630a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.134.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:9f:20:b5:a0:05:87:25:74:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cd0d0776-e9c8-4211-ba7a-8eae2cbc0ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:56:e6:f1:70:1b:ba:85:ed:10:31:52:3d: 1c:db:15:0a:49:5e:f2:71:dd:da:ed:46:2a:61:22: af:c1:8c:e5:81:fa:f2:e2:30:fa:80:0a:91:04:c1: 5e:56:00:b9:3a:8c:8d:04:27:96:6c:99:f8:aa:20: ba:aa:86:88:d5:60:2c:1f:1d:7a:e5:af:26:f2:9f: 25:25:18:b9:1e:5c:6a:de:4e:6d:da:b1:0e:cb:09: 5f:25:af:16:8c:ae:47:91:be:1d:84:11:a4:e1:6a: bc:ac:da:cd:19:0d:e7:85:9e:71:4a:2e:25:61:72: 48:57:a3:1c:db:52:f4:84:e6:d7:6c:04:0e:b1:ec: a7:84:0e:63:8b:8b:e2:ff:69:64:76:a2:b2:8f:dc: 50:a7:2d:d7:c9:c9:49:b7:87:9c:ed:74:2e:34:61: cb:4e:c9:ca:45:d1:94:ed:c2:f1:da:56:19:f2:a1: 56:57:1d:50:31:90:36:15:cf:82:30:78:6b:63:e5: 75:15:75:ed:54:88:d4:79:33:24:d0:d5:ca:26:34: e2:fa:fe:62:40:8f:3e:cb:78:a7:34:38:65:56:b7: 41:bb:40:0c:16:a1:93:ab:21:1b:08:93:90:26:e2: d3:03:db:55:52:e9:a2:8f:90:aa:e4:53:77:75:79: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:17:83:29:B0:34:0E:9E:DF:DC:1C:97:94:18:1F:1F:AA:D4:73:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2553defe-e935-3f4e-a537-0b6e1a8c630a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f8:4a:4f:2a:91:dc:56:48:3f:72:cd:44:e2:71:3b:bb:c0: 30:73:30:1d:20:fd:fc:68:7d:60:e9:45:46:03:54:51:90:45: 16:d1:45:cd:e9:e2:2c:de:98:42:83:d7:4e:8c:67:81:15:79: 56:90:d9:46:06:84:19:64:71:77:80:c9:4d:87:73:0b:da:d4: dd:ba:41:4d:38:63:b3:ca:0d:26:5a:70:1b:c2:43:1a:d6:14: 7e:5c:45:78:b7:9d:5a:a6:e1:a9:f7:4f:4c:ae:d1:ce:1a:33: 64:4a:9c:f5:a5:02:59:4c:04:2d:bb:a6:6e:f6:dd:f1:5e:c3: f4:8c:f0:37:84:6e:61:77:59:82:a5:02:22:38:dd:c8:68:a2: 1b:57:b2:60:77:c2:cf:4e:fd:75:66:b7:b6:6d:0f:80:b5:42: 0e:42:65:ef:8b:50:b3:e6:ff:6b:dd:10:75:fd:e0:51:e0:4b: 42:35:25:f1:ad:bf:d1:27:6f:24:2d:da:be:3e:d8:75:3b:25: 39:0d:0b:37:6e:6b:28:06:95:04:3e:87:5a:54:72:69:44:d1: 42:28:cf:12:26:45:19:78:38:c9:2c:9e:9d:bc:c8:23:11:28: ae:3c:d4:e7:67:d7:02:7a:7a:ba:9a:64:c1:ce:63:d7:84:96: 14:81:df:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfJ8gtaAFhyV0oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2QwZDA3NzYtZTljOC00MjExLWJhN2EtOGVhZTJjYmMwZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqRW5vFwG7qF7RAxUj0c2xUKSV7ycd3a7UYq YSKvwYzlgfry4jD6gAqRBMFeVgC5OoyNBCeWbJn4qiC6qoaI1WAsHx165a8m8p8l JRi5Hlxq3k5t2rEOywlfJa8WjK5Hkb4dhBGk4Wq8rNrNGQ3nhZ5xSi4lYXJIV6Mc 21L0hObXbAQOseynhA5ji4vi/2lkdqKyj9xQpy3XyclJt4ec7XQuNGHLTsnKRdGU 7cLx2lYZ8qFWVx1QMZA2Fc+CMHhrY+V1FXXtVIjUeTMk0NXKJjTi+v5iQI8+y3in NDhlVrdBu0AMFqGTqyEbCJOQJuLTA9tVUumij5Cq5FN3dXkfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwXgymwNA6e39wcl5QYHx+q1HOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjU1M2RlZmUtZTkzNS0z ZjRlLWE1MzctMGI2ZTFhOGM2MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP4Sk8qkdxWSD9yzUTicTu7wDBzMB0g/fxofWDpRUYDVFGQRRbRRc3p 4izemEKD106MZ4EVeVaQ2UYGhBlkcXeAyU2Hcwva1N26QU04Y7PKDSZacBvCQxrW FH5cRXi3nVqm4an3T0yu0c4aM2RKnPWlAllMBC27pm723fFew/SM8DeEbmF3WYKl AiI43choohtXsmB3ws9O/XVmt7ZtD4C1Qg5CZe+LULPm/2vdEHX94FHgS0I1JfGt v9EnbyQt2r4+2HU7JTkNCzduaygGlQQ+h1pUcmlE0UIozxImRRl4OMksnp28yCMR KK481Odn1wJ6erqaZMHOY9eElhSB35w= -----END CERTIFICATE-----Generated at Sun Sep 27 21:43:42 2026 by rpki-client