$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa File: 8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa (raw, json) Hash identifier: 8giodRS/GK96R3v90d8JnmVAG0DNDb32jmRYM/wS/uw= Subject key identifier: 9C:46:AE:BD:AF:4A:A4:BE:52:02:5F:47:F5:F9:9A:52:0B:1D:47:EE Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F498494BA172AD53DE18A2380 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.132.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:94:ba:17:2a:d5:3d:e1:8a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d01446e-5c27-4a61-8b06-a062b0a8356a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:59:2c:b9:a7:16:72:90:0b:54:71:81:28: 8f:0d:f4:19:90:97:57:c6:e9:c1:32:48:67:7b:d4: bf:d3:e9:c5:ac:17:06:c3:82:07:a2:f5:52:6f:02: a7:50:98:80:68:7c:89:1c:7c:2a:3b:76:e7:1d:79: c0:93:aa:8d:d8:09:4f:81:94:ed:2a:ce:35:69:df: af:b1:b3:ea:af:04:c8:da:95:77:09:2d:a8:09:fc: eb:c6:3c:28:e8:91:78:e6:9b:f5:60:95:96:0f:fa: d4:e7:bc:f4:e4:9a:ee:cc:85:52:7a:67:40:85:12: dc:7b:0c:c0:15:04:b0:35:22:0d:31:d5:e7:bb:a2: 02:48:27:3d:a4:c3:6a:4d:12:3b:28:0b:c4:7a:3a: 0d:98:9a:ce:0d:f3:00:3a:fd:aa:59:69:eb:12:97: 9e:00:d2:ac:f3:2d:09:9b:4a:1c:69:ba:4a:bd:f7: cf:84:09:1e:9f:80:a0:c1:89:c7:bd:42:ed:62:64: 15:27:28:02:5d:78:e4:41:db:19:3d:c6:04:b2:30: 98:c5:b6:20:3a:37:e4:b8:66:df:68:7e:e3:61:cf: ca:1f:b0:e6:34:10:18:5b:06:6b:eb:d2:7a:45:f4: 00:c3:80:ea:19:6a:ca:7d:57:55:19:11:2d:a1:ef: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:46:AE:BD:AF:4A:A4:BE:52:02:5F:47:F5:F9:9A:52:0B:1D:47:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:cf:9e:d0:c5:0d:9e:82:d2:45:91:46:18:ab:26:b9:a8:12: 79:51:78:30:23:29:db:84:4a:aa:5e:02:75:cc:ee:3a:5b:03: b8:35:52:62:b1:97:cc:d7:94:12:cb:3f:39:dc:b2:b6:d5:23: 9c:2c:8a:03:50:0f:f3:ca:49:84:89:78:f5:db:67:55:16:3d: fe:1f:f0:c5:f5:fe:65:8b:93:ee:3c:b6:77:a6:06:5e:52:bb: d3:25:fa:f4:10:a5:34:e8:22:d3:47:3e:6d:2c:77:9c:26:98: b8:77:8f:f4:35:e1:22:23:d1:95:fb:87:d3:58:b0:c9:bc:e6: 58:59:c6:61:09:51:94:27:d4:5d:97:17:31:a0:13:90:3c:d9: 8e:11:67:eb:3c:26:d0:ee:73:7e:2c:81:65:c6:91:51:11:a0: 18:02:4f:bb:81:08:fb:1c:cc:75:39:c0:4a:e2:a5:03:e6:79: 2f:02:a2:a9:62:f3:3f:1b:70:f6:2e:2a:4a:65:28:99:82:87: 56:ce:01:86:be:61:fa:07:8b:6e:1f:b2:2b:f6:c6:4a:f6:4e: ff:5c:98:49:c7:31:71:5a:ea:54:45:91:06:a8:d5:89:3d:00: 80:1d:52:13:00:8f:b4:08:31:39:18:a2:89:4e:e5:dd:62:97: 4e:f8:e9:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhJS6FyrVPeGKI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2QwMTQ0NmUtNWMyNy00YTYxLThiMDYtYTA2MmIwYTgzNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21lZLLmnFnKQC1RxgSiPDfQZkJdXxunBMkhn e9S/0+nFrBcGw4IHovVSbwKnUJiAaHyJHHwqO3bnHXnAk6qN2AlPgZTtKs41ad+v sbPqrwTI2pV3CS2oCfzrxjwo6JF45pv1YJWWD/rU57z05JruzIVSemdAhRLcewzA FQSwNSINMdXnu6ICSCc9pMNqTRI7KAvEejoNmJrODfMAOv2qWWnrEpeeANKs8y0J m0ocabpKvffPhAken4CgwYnHvULtYmQVJygCXXjkQdsZPcYEsjCYxbYgOjfkuGbf aH7jYc/KH7DmNBAYWwZr69J6RfQAw4DqGWrKfVdVGREtoe+3WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxGrr2vSqS+UgJfR/X5mlILHUfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGNhNzNlMDQtNDJlOC0z YzZkLWI4MDMtYWE1ODg3N2FmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzPntDFDZ6C0kWRRhirJrmoEnlReDAjKduESqpeAnXM7jpbA7g1UmKx l8zXlBLLPzncsrbVI5wsigNQD/PKSYSJePXbZ1UWPf4f8MX1/mWLk+48tnemBl5S u9Ml+vQQpTToItNHPm0sd5wmmLh3j/Q14SIj0ZX7h9NYsMm85lhZxmEJUZQn1F2X FzGgE5A82Y4RZ+s8JtDuc34sgWXGkVERoBgCT7uBCPsczHU5wEripQPmeS8Coqli 8z8bcPYuKkplKJmCh1bOAYa+YfoHi24fsiv2xkr2Tv9cmEnHMXFa6lRFkQao1Yk9 AIAdUhMAj7QIMTkYoolO5d1il0746dc= -----END CERTIFICATE-----Generated at Fri Sep 25 14:23:27 2026 by rpki-client