$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71a7ba9c-8502-3515-8db2-433776b27f44.roa File: 71a7ba9c-8502-3515-8db2-433776b27f44.roa (raw, json) Hash identifier: TkRGbopk6/nuZoy3LDjzqniLWMeW4zInFpD9S7E9jVc= Subject key identifier: 20:9F:A9:2B:94:BD:71:68:9C:0E:CB:EC:EC:B6:18:F4:AA:E5:1B:77 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49848D289CFF0F51BE4A3F80 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71a7ba9c-8502-3515-8db2-433776b27f44.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:8d:28:9c:ff:0f:51:be:4a:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4fc4ee42-96b7-4cf1-a53c-e313697b7ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:5e:07:b5:e4:89:0a:7b:0e:43:06:14:26: e1:06:a7:ca:d6:50:6f:ab:a6:b4:21:2b:b4:5d:03: 9d:0d:10:c2:dd:1b:4f:70:37:9a:88:81:64:db:4c: 2f:7a:d6:df:f7:65:4e:38:48:50:c2:43:11:34:78: 26:51:b5:3d:3c:ba:e7:b0:c9:af:15:bf:b4:ce:c6: c8:25:62:de:27:94:98:3a:a8:f8:10:d6:a2:d4:b2: 3f:55:6f:2e:9a:7b:2b:a3:6d:f6:7e:dc:7c:ad:32: e6:f6:d7:d1:d3:b9:77:3e:c1:05:cd:3b:c7:ee:ce: da:3d:58:bf:fd:1d:37:32:f4:9d:cb:94:b2:e0:30: 7d:8e:67:93:7c:3d:b2:d1:e8:5d:8f:0c:97:eb:0c: f7:42:f0:b1:25:0d:27:26:5a:27:00:c1:48:32:53: 39:ee:1a:39:c9:6e:e0:06:dc:91:f8:88:5c:87:e9: 8a:38:27:be:93:dd:36:04:5d:1a:43:aa:3a:f5:3e: 97:ee:31:ac:9e:19:6e:58:f7:c4:5a:2d:37:78:d0: fd:f1:18:8e:0e:31:bd:f1:0a:8d:6c:c6:63:6c:5e: ed:1a:62:11:c0:f2:df:db:de:98:f9:ad:05:ea:0c: 34:03:a1:3a:55:8e:bd:6a:84:fe:08:68:4c:7b:aa: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:A9:2B:94:BD:71:68:9C:0E:CB:EC:EC:B6:18:F4:AA:E5:1B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71a7ba9c-8502-3515-8db2-433776b27f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:55:c2:ff:cb:02:02:57:c6:50:bc:93:f0:b2:23:e2:bf:1c: 50:0b:64:ed:c0:14:dd:e9:9b:ea:97:9d:43:ff:ca:fe:2f:30: 75:c8:f7:f4:05:4c:3d:8d:8d:39:d1:d1:1e:d4:fa:c4:51:13: 71:e2:d9:c8:ea:7e:0d:6a:36:dc:08:08:4c:f4:56:e0:b4:b4: 89:f0:82:df:b1:13:65:75:90:d4:91:5c:28:63:03:3f:29:43: a7:7d:7d:4a:6c:4f:3f:37:42:79:29:26:ac:5a:af:47:53:39: a2:60:bb:83:7b:4f:8d:b7:56:0f:63:34:87:44:72:93:5e:19: 41:3d:29:79:0c:5b:43:ae:2b:a8:59:60:a0:d7:e5:53:b8:96: 79:f4:44:e8:d1:73:8f:fb:e1:64:d2:1d:ac:21:b1:dd:64:95: 15:3c:5f:4d:7d:6a:0a:80:7e:10:60:94:15:a9:cf:ac:1a:85: 1e:e2:04:48:1a:3f:55:55:71:5f:ad:6f:9e:65:d9:fd:5c:0f: 2d:cb:21:d6:a0:a0:2c:ea:b2:48:c0:ba:ba:b6:89:5d:5f:41: 78:38:56:00:ce:29:56:2f:20:ed:40:fc:77:0a:24:92:42:3a: ca:53:df:4e:1e:40:95:58:b9:7b:b5:6e:80:26:a2:9e:c9:ea: 0a:60:32:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhI0onP8PUb5KP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGZjNGVlNDItOTZiNy00Y2YxLWE1M2MtZTMxMzY5N2I3ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEheB7XkiQp7DkMGFCbhBqfK1lBvq6a0ISu0 XQOdDRDC3RtPcDeaiIFk20wvetbf92VOOEhQwkMRNHgmUbU9PLrnsMmvFb+0zsbI JWLeJ5SYOqj4ENai1LI/VW8umnsro232ftx8rTLm9tfR07l3PsEFzTvH7s7aPVi/ /R03MvSdy5Sy4DB9jmeTfD2y0ehdjwyX6wz3QvCxJQ0nJlonAMFIMlM57ho5yW7g BtyR+Ihch+mKOCe+k902BF0aQ6o69T6X7jGsnhluWPfEWi03eND98RiODjG98QqN bMZjbF7tGmIRwPLf296Y+a0F6gw0A6E6VY69aoT+CGhMe6qwjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCfqSuUvXFonA7L7Oy2GPSq5Rt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzFhN2JhOWMtODUwMi0z NTE1LThkYjItNDMzNzc2YjI3ZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9Vwv/LAgJXxlC8k/CyI+K/HFALZO3AFN3pm+qXnUP/yv4vMHXI9/QF TD2NjTnR0R7U+sRRE3Hi2cjqfg1qNtwICEz0VuC0tInwgt+xE2V1kNSRXChjAz8p Q6d9fUpsTz83QnkpJqxar0dTOaJgu4N7T423Vg9jNIdEcpNeGUE9KXkMW0OuK6hZ YKDX5VO4lnn0ROjRc4/74WTSHawhsd1klRU8X019agqAfhBglBWpz6wahR7iBEga P1VVcV+tb55l2f1cDy3LIdagoCzqskjAurq2iV1fQXg4VgDOKVYvIO1A/HcKJJJC OspT304eQJVYuXu1boAmop7J6gpgMpg= -----END CERTIFICATE-----Generated at Sat Sep 26 13:04:12 2026 by rpki-client