$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa File: bcd23307-1769-3883-b749-7320ac4ef80d.roa (raw, json) Hash identifier: OvTScm1ZEm9RDmpJi2NyB5lqnRgZQlTFfwslbS2tvWk= Subject key identifier: 98:30:94:AD:F7:28:25:68:16:8E:C1:53:E5:80:C5:B1:D3:14:C0:9B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C80F814AF509652DF8F68 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:80:f8:14:af:50:96:52:df:8f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8c1d7ed2-9ee9-4022-9b35-eca672eb0cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:0d:ac:0b:13:b2:27:c0:96:06:a0:b9:f7: cf:59:26:aa:80:80:a0:c9:df:f3:1d:21:a0:5a:4a: a3:92:8c:09:30:54:1c:48:da:0c:4a:4c:53:49:4d: 11:3b:ef:1c:27:ad:59:b4:13:be:2a:95:6b:35:88: 7e:a2:5a:f4:83:db:39:5b:0c:33:55:b5:45:64:fa: 3f:bd:47:26:9d:18:fd:d6:46:b6:23:08:91:26:87: fc:67:05:2f:b1:9f:42:72:c4:22:ea:4b:63:bc:70: c9:35:b7:2b:78:f6:1e:5d:fb:7f:39:7b:28:24:21: 6d:1e:7b:d3:7a:b3:d1:31:c0:37:96:7f:23:b9:98: 73:45:63:2b:ee:10:95:a5:93:07:30:0c:be:f2:46: fd:f3:0d:2f:d0:7a:d4:16:84:d7:81:24:85:b0:b9: 6a:ce:d0:60:e9:61:f9:5b:fb:df:e8:6f:7e:f1:42: d3:3b:b2:11:07:cc:61:eb:0d:0b:ff:fd:02:14:e0: fc:2c:11:80:62:3d:64:23:1d:c4:23:5d:15:91:e9: 48:8b:ab:32:bf:e9:8c:4e:38:9c:e9:77:d4:8a:77: c3:63:03:f0:74:22:55:65:1d:95:fd:50:5d:6b:8b: 0e:27:5b:7d:6e:ef:f9:a7:c7:c8:d3:3e:e3:17:0b: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:30:94:AD:F7:28:25:68:16:8E:C1:53:E5:80:C5:B1:D3:14:C0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c2:64:47:3b:b8:58:ed:82:e7:49:df:48:d7:4d:cb:28:e1: fd:a3:c8:b8:ba:ed:d1:23:49:5b:69:6f:ed:3c:c7:56:84:02: 31:24:c4:36:2d:41:80:bf:2e:b3:af:4c:a1:0a:b0:0b:b0:89: 91:17:14:2d:1e:d0:ce:02:c1:09:30:cb:9f:7c:30:d6:00:ff: 6a:9d:6d:3a:df:2f:0a:e3:85:55:68:b5:98:f2:83:23:65:99: 28:45:44:b4:f8:18:b2:55:11:fa:43:19:5f:f5:f6:83:76:dc: d6:b3:bb:12:5b:53:a1:ec:8e:ab:49:ac:d9:b7:98:67:70:24: ee:8a:88:54:33:77:f5:ef:47:de:8f:a0:7e:9a:cf:8b:0c:ba: 12:49:86:16:97:6a:f5:6e:a4:c3:e7:1f:15:24:6e:32:ad:ee: 59:1a:16:de:23:51:2e:cb:2d:2a:dd:a5:d2:97:66:0b:52:a4: 90:d8:12:c8:02:7f:05:7d:41:6e:d1:29:98:e4:c6:fa:71:a9: e8:dc:10:64:d3:27:63:db:ea:e8:bf:ab:52:bc:07:e3:43:58: f3:7a:8c:2f:af:a3:f2:12:83:fd:60:b3:c8:c3:88:a8:cd:cd: f9:c3:15:e2:14:4a:86:57:43:ec:91:58:6f:12:de:db:0a:3c: 84:97:5a:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfID4FK9QllLfj2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGMxZDdlZDItOWVlOS00MDIyLTliMzUtZWNhNjcyZWIwY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0sNrAsTsifAlgaguffPWSaqgICgyd/zHSGg WkqjkowJMFQcSNoMSkxTSU0RO+8cJ61ZtBO+KpVrNYh+olr0g9s5WwwzVbVFZPo/ vUcmnRj91ka2IwiRJof8ZwUvsZ9CcsQi6ktjvHDJNbcrePYeXft/OXsoJCFtHnvT erPRMcA3ln8juZhzRWMr7hCVpZMHMAy+8kb98w0v0HrUFoTXgSSFsLlqztBg6WH5 W/vf6G9+8ULTO7IRB8xh6w0L//0CFOD8LBGAYj1kIx3EI10VkelIi6syv+mMTjic 6XfUinfDYwPwdCJVZR2V/VBda4sOJ1t9bu/5p8fI0z7jFwuWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgwlK33KCVoFo7BU+WAxbHTFMCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmNkMjMzMDctMTc2OS0z ODgzLWI3NDktNzMyMGFjNGVmODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETCZEc7uFjtgudJ30jXTcso4f2jyLi67dEjSVtpb+08x1aEAjEkxDYt QYC/LrOvTKEKsAuwiZEXFC0e0M4CwQkwy598MNYA/2qdbTrfLwrjhVVotZjygyNl mShFRLT4GLJVEfpDGV/19oN23NazuxJbU6HsjqtJrNm3mGdwJO6KiFQzd/XvR96P oH6az4sMuhJJhhaXavVupMPnHxUkbjKt7lkaFt4jUS7LLSrdpdKXZgtSpJDYEsgC fwV9QW7RKZjkxvpxqejcEGTTJ2Pb6ui/q1K8B+NDWPN6jC+vo/ISg/1gs8jDiKjN zfnDFeIUSoZXQ+yRWG8S3tsKPISXWv0= -----END CERTIFICATE-----Generated at Sat Sep 26 15:46:42 2026 by rpki-client