$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa File: d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa (raw, json) Hash identifier: qM9gCIAC3NKe9/vo665yJ6mh44aZ1NsyM7820+Zj4uc= Subject key identifier: CF:23:4F:FE:FD:38:69:80:D9:11:EB:39:17:18:9A:E4:91:B1:42:05 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584F497C991957C2E522C0F45BC0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 41264 IP address blocks: 104.133.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:99:19:57:c2:e5:22:c0:f4:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d5fc7bc0-35b1-4efb-ab34-371ac497a8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:b1:e9:d2:7b:b7:83:f7:4a:4f:e0:1d:50: f4:cd:96:f9:38:31:16:e8:fe:e8:a1:b3:9e:c6:50: bf:f9:cf:a6:a2:79:36:aa:4d:04:17:46:9c:ae:55: 3a:14:33:6a:38:f4:fd:21:22:d9:a4:de:89:a8:7d: f2:a9:40:b6:ce:7c:6a:e3:32:d8:24:1a:03:1d:06: a2:ac:b0:7c:3f:64:d5:e1:9c:0d:db:35:47:5c:fe: 24:4d:dd:61:bc:f3:f7:ae:de:67:ca:4b:3d:0d:0c: 63:86:69:4c:0b:cf:11:50:22:4f:86:49:e0:8e:95: 19:69:08:c3:7e:66:19:83:15:ee:7e:c5:8e:10:0b: 5d:c2:de:39:ad:0e:01:37:56:87:a9:81:d9:3f:e0: 53:c1:b6:63:42:1f:f0:6d:a9:a0:a5:1b:62:7e:df: ac:3f:e2:8c:e0:e5:36:6b:a7:4b:07:06:ea:31:1b: 54:45:8d:c4:a4:75:4b:83:00:1a:a8:fc:40:7d:2b: 24:8c:82:a5:3d:fb:99:4a:7f:53:7a:f1:3d:b4:eb: fb:b6:21:7f:eb:a3:86:a4:14:6f:5d:5e:65:7d:c6: aa:d7:0e:40:7f:4b:e5:2b:2a:0e:a4:f8:59:77:20: 3e:5e:ee:65:ce:44:4f:0c:7f:ab:e5:9d:f6:7a:93: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:23:4F:FE:FD:38:69:80:D9:11:EB:39:17:18:9A:E4:91:B1:42:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:37:fb:3d:0f:d6:bb:d1:7c:ae:d4:b4:18:17:6f:74:5f:f3: e8:5b:b9:83:9a:95:f4:97:9e:db:87:7d:9a:5d:03:a8:d7:54: ce:d0:fb:ae:02:c0:91:90:11:d1:7e:ba:f6:8d:5a:74:c8:2f: 8a:5f:d3:80:dd:1a:ae:67:f9:a9:cc:be:16:8b:fc:78:5e:fe: 62:8c:fd:a6:67:45:d9:bb:e7:99:28:30:fe:77:29:46:1f:68: 59:29:53:d3:ac:14:57:ec:c0:75:9b:15:8d:b9:18:52:80:27: 83:42:78:92:66:c0:a7:25:39:e9:43:43:67:2b:92:1b:d9:2b: 80:78:3d:2c:ae:9f:b4:a0:b5:66:57:bf:f0:e9:c9:55:6b:2e: 6f:2c:8c:04:c1:50:27:6d:8b:68:ac:6d:a2:ed:36:df:46:70: 7f:9e:2b:7c:0e:27:88:47:2a:a6:f3:f9:5f:f0:fb:a0:3e:66: 9b:2f:8a:74:95:ea:97:07:1d:ca:de:ca:a6:7f:18:ec:20:4d: 87:d2:27:65:f9:59:8f:46:81:7c:7c:38:b4:d8:8d:f5:10:83: 08:15:c7:28:2b:f6:b9:5d:cb:24:49:65:c0:c4:d1:e0:d1:ae: a5:52:ac:57:15:ed:25:33:9a:3b:1a:be:a1:69:73:db:49:16: 40:76:7b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfJkZV8LlIsD0W8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDVmYzdiYzAtMzViMS00ZWZiLWFiMzQtMzcxYWM0OTdhOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBWx6dJ7t4P3Sk/gHVD0zZb5ODEW6P7oobOe xlC/+c+monk2qk0EF0acrlU6FDNqOPT9ISLZpN6JqH3yqUC2znxq4zLYJBoDHQai rLB8P2TV4ZwN2zVHXP4kTd1hvPP3rt5nyks9DQxjhmlMC88RUCJPhkngjpUZaQjD fmYZgxXufsWOEAtdwt45rQ4BN1aHqYHZP+BTwbZjQh/wbamgpRtift+sP+KM4OU2 a6dLBwbqMRtURY3EpHVLgwAaqPxAfSskjIKlPfuZSn9TevE9tOv7tiF/66OGpBRv XV5lfcaq1w5Af0vlKyoOpPhZdyA+Xu5lzkRPDH+r5Z32epPyXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8jT/79OGmA2RHrORcYmuSRsUIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDFjOGI0YmUtMmM1YS0z OGEzLWI1NmMtZTYzZWQ2NDJmOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ3+z0P1rvRfK7UtBgXb3Rf8+hbuYOalfSXntuHfZpdA6jXVM7Q+64C wJGQEdF+uvaNWnTIL4pf04DdGq5n+anMvhaL/Hhe/mKM/aZnRdm755koMP53KUYf aFkpU9OsFFfswHWbFY25GFKAJ4NCeJJmwKclOelDQ2crkhvZK4B4PSyun7SgtWZX v/DpyVVrLm8sjATBUCdti2isbaLtNt9GcH+eK3wOJ4hHKqbz+V/w+6A+ZpsvinSV 6pcHHcreyqZ/GOwgTYfSJ2X5WY9GgXx8OLTYjfUQgwgVxygr9rldyyRJZcDE0eDR rqVSrFcV7SUzmjsavqFpc9tJFkB2e0k= -----END CERTIFICATE-----Generated at Sat Sep 26 03:04:26 2026 by rpki-client