$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa File: 823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa (raw, json) Hash identifier: BeObLxoAwwB+MQcQplq2+dhCMEOU8xZFkL/7dO2SAos= Subject key identifier: 59:21:D1:D9:66:4E:5F:05:DB:FE:23:0C:38:21:87:C9:59:DF:CA:F4 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F49848889C0FDD2EB9489E0C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:88:89:c0:fd:d2:eb:94:89:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd8181b2-b1e2-42a2-9d39-3d9c48b17d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:f2:78:e6:00:d7:82:c9:9e:0f:6e:24:a3: 66:f6:de:b6:12:0e:04:82:71:de:10:7b:17:03:a4: e1:45:5c:99:4c:97:66:70:e1:34:a5:3e:d9:b7:bb: eb:16:96:c6:0b:32:67:a4:33:b7:44:e9:a9:e7:d6: fa:00:c7:11:2f:51:b9:98:2a:a2:c0:13:f4:e6:da: a8:24:3e:b3:76:72:9f:d0:e1:cd:3e:dc:7d:d1:71: 4e:1d:d1:02:30:3e:89:6f:38:39:d4:a3:da:d1:79: 2f:6d:a6:e7:7e:39:8b:c5:6c:e1:19:78:e6:6e:06: aa:23:9a:d8:b1:d3:f5:1e:23:fb:5f:aa:0a:f9:c6: 25:c5:20:d8:dd:65:80:44:3c:c8:88:e9:b8:d5:12: dd:18:4f:11:37:9b:92:5a:c8:83:dd:58:e0:b2:51: ad:1a:b2:e7:7b:bf:17:08:2b:ec:00:76:bf:87:ee: 79:17:12:7c:94:41:48:99:1f:56:3f:68:ff:19:8b: 0e:a9:2a:90:aa:48:9e:4f:7e:53:88:8d:ee:06:9b: 71:62:2f:7a:9e:b7:28:ea:a6:28:3d:23:c5:8f:70: 4a:ba:44:a6:47:d3:02:0f:97:38:30:a1:e2:02:0b: 1b:f4:1c:40:d2:77:18:ae:31:79:2b:a2:74:49:fe: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:D1:D9:66:4E:5F:05:DB:FE:23:0C:38:21:87:C9:59:DF:CA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/823afc20-a669-3d8a-a98c-dfff1a0e5f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:af:9b:c1:8a:f1:cd:e5:84:f9:d6:b1:50:1e:db:16:49:fc: 2c:34:b1:7b:b8:95:46:d7:e0:ae:d8:21:1a:9b:bc:29:a7:98: bd:ca:d3:06:74:20:f5:7a:6c:7a:13:c0:31:eb:ae:f2:fd:ba: 1f:91:0d:19:3d:ad:58:9e:9b:60:29:e4:07:16:37:8f:05:a5: 74:2c:6f:3c:f6:f2:eb:ff:3d:61:ac:56:ee:11:2a:ff:eb:a0: 26:e9:1a:59:05:85:b1:18:e2:3e:a5:95:a5:2f:2f:27:6d:3f: a5:ae:68:ce:84:5a:79:8f:1f:97:94:a8:91:26:0a:9b:4f:b2: f3:cc:b1:9b:c9:d8:f0:1a:77:36:3e:51:d1:58:22:29:73:d3: c2:c3:b4:28:f9:0b:4e:01:ea:38:bf:d5:bd:5f:61:6e:a8:8c: 1f:83:7f:d9:0b:7d:aa:fb:10:00:b6:c5:0e:8f:13:ea:b2:52: 68:21:85:e9:b8:b3:d2:77:bf:75:70:60:a8:85:08:4e:53:d9: f4:c1:5f:02:7d:ce:f6:4f:b5:a0:18:8c:3b:21:85:2a:9b:6f: eb:1e:0c:74:f1:cb:1e:79:9f:00:c4:6d:09:69:61:7c:07:dc: e8:dd:c8:19:16:e8:b3:fa:c0:ad:71:1e:97:db:f0:9d:17:61: 41:f7:c0:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhIiJwP3S65SJ4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ4MTgxYjItYjFlMi00MmEyLTlkMzktM2Q5YzQ4YjE3ZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspDyeOYA14LJng9uJKNm9t62Eg4EgnHeEHsX A6ThRVyZTJdmcOE0pT7Zt7vrFpbGCzJnpDO3ROmp59b6AMcRL1G5mCqiwBP05tqo JD6zdnKf0OHNPtx90XFOHdECMD6Jbzg51KPa0XkvbabnfjmLxWzhGXjmbgaqI5rY sdP1HiP7X6oK+cYlxSDY3WWARDzIiOm41RLdGE8RN5uSWsiD3VjgslGtGrLne78X CCvsAHa/h+55FxJ8lEFImR9WP2j/GYsOqSqQqkieT35TiI3uBptxYi96nrco6qYo PSPFj3BKukSmR9MCD5c4MKHiAgsb9BxA0ncYrjF5K6J0Sf4yOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkh0dlmTl8F2/4jDDghh8lZ38r0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODIzYWZjMjAtYTY2OS0z ZDhhLWE5OGMtZGZmZjFhMGU1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIS1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+vm8GK8c3lhPnWsVAe2xZJ/Cw0sXu4lUbX4K7YIRqbvCmnmL3K0wZ0 IPV6bHoTwDHrrvL9uh+RDRk9rViem2Ap5AcWN48FpXQsbzz28uv/PWGsVu4RKv/r oCbpGlkFhbEY4j6llaUvLydtP6WuaM6EWnmPH5eUqJEmCptPsvPMsZvJ2PAadzY+ UdFYIilz08LDtCj5C04B6ji/1b1fYW6ojB+Df9kLfar7EAC2xQ6PE+qyUmghhem4 s9J3v3VwYKiFCE5T2fTBXwJ9zvZPtaAYjDshhSqbb+seDHTxyx55nwDEbQlpYXwH 3OjdyBkW6LP6wK1xHpfb8J0XYUH3wMw= -----END CERTIFICATE-----Generated at Sat Sep 26 08:47:46 2026 by rpki-client