$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebc2758-b603-32c5-9747-b17a76c1576a.roa File: cebc2758-b603-32c5-9747-b17a76c1576a.roa (raw, json) Hash identifier: Nbrf3W7mTaqRFJZNNLuwFdMO8A5ErM8wMhPCzoCP1+I= Subject key identifier: 4E:7D:7E:4B:3E:EE:6A:BA:24:7F:66:53:6B:02:F7:10:27:8C:C2:32 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F0672969C2B9F1596E9DDF940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebc2758-b603-32c5-9747-b17a76c1576a.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19905 IP address blocks: 104.166.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:96:9c:2b:9f:15:96:e9:dd:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=22d57bb7-d764-4d64-b5b9-c896bfa55355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:7b:29:41:9d:ed:3e:67:6c:e8:02:b4:ff: f3:1c:40:b8:8f:e7:fa:8d:93:ac:d9:77:ba:29:12: a4:57:3f:fa:3a:97:f2:85:07:94:d3:be:28:ab:d4: 72:5e:47:65:ff:a1:dd:f4:5b:e3:21:55:d2:b9:ea: 18:cd:62:6e:aa:b9:e7:71:cc:7b:cd:88:fa:96:70: 17:e3:d7:3d:c7:a2:a2:cf:bd:5d:da:48:78:fe:65: 03:4a:22:bb:a2:f4:c4:04:cd:9a:2d:83:a1:02:46: 6e:83:79:be:21:b1:73:b4:c4:ea:31:e1:4c:2a:a1: 33:53:e0:b5:a5:ec:ae:f4:96:50:00:e7:30:9a:bc: 53:7e:7d:ea:bb:a8:96:68:a8:5b:24:52:a5:aa:15: 41:66:a1:74:25:e6:fe:cd:a7:ce:c6:45:c6:db:25: fd:46:b1:72:42:dd:36:d9:2f:72:d1:54:f2:c4:19: 02:25:74:b9:31:ae:7b:53:d0:15:d6:f7:19:8b:87: dd:d9:00:b2:91:de:43:f7:dd:43:00:a1:b9:b6:8e: b3:28:84:56:0a:24:0c:55:11:2d:4f:54:4b:ad:7c: f3:41:e4:52:03:9c:b5:cf:9f:37:cc:77:15:a5:65: 90:62:cc:b4:09:b4:e6:35:9d:c0:64:59:88:8a:72: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7D:7E:4B:3E:EE:6A:BA:24:7F:66:53:6B:02:F7:10:27:8C:C2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebc2758-b603-32c5-9747-b17a76c1576a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 104.166.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:66:a0:76:fc:01:08:36:4d:e0:b4:02:ea:d4:f3:0e:c1:2a: 44:3b:7c:16:2c:b7:82:10:6e:e8:56:8a:72:db:4b:12:4c:6e: 36:12:7e:33:f8:c6:81:83:42:09:e2:d0:0d:2a:5c:ee:93:70: 53:43:21:9b:ec:3e:18:2b:af:53:59:45:45:26:83:c9:c6:e5: 5e:1c:bd:21:67:69:cb:55:a8:95:41:ef:2b:83:ac:88:7f:e1: be:f4:f3:b4:5a:d7:63:ea:13:56:07:64:c9:fe:df:37:08:9b: 1a:24:3c:65:d8:b9:aa:70:dd:66:70:b5:39:90:3a:5a:82:4a: 29:2f:de:e6:51:8c:af:ba:85:c9:3e:d6:32:cb:15:18:b7:4d: ef:7c:1b:84:20:e4:f1:24:13:6f:07:64:2d:01:cc:a5:93:21: 59:cc:ae:8b:2a:1b:8e:40:8a:9e:54:c3:ac:37:37:b2:2d:01: de:7e:4c:47:58:17:60:b1:06:e0:d9:4d:a5:f2:da:4b:76:5f: 4f:03:0b:c1:4d:9a:a3:f4:cf:05:f7:2b:4a:bc:a7:8f:0b:1f: f0:b5:49:4a:8d:85:ec:22:17:aa:9b:9d:20:45:33:5c:43:d8: e0:30:43:ba:e0:f6:e3:89:65:84:de:e7:70:1b:da:2e:2c:d0: ae:30:38:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcpacK58Vlund+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjJkNTdiYjctZDc2NC00ZDY0LWI1YjktYzg5NmJmYTU1MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttx7KUGd7T5nbOgCtP/zHEC4j+f6jZOs2Xe6 KRKkVz/6OpfyhQeU074oq9RyXkdl/6Hd9FvjIVXSueoYzWJuqrnnccx7zYj6lnAX 49c9x6Kiz71d2kh4/mUDSiK7ovTEBM2aLYOhAkZug3m+IbFztMTqMeFMKqEzU+C1 peyu9JZQAOcwmrxTfn3qu6iWaKhbJFKlqhVBZqF0Jeb+zafOxkXG2yX9RrFyQt02 2S9y0VTyxBkCJXS5Ma57U9AV1vcZi4fd2QCykd5D991DAKG5to6zKIRWCiQMVREt T1RLrXzzQeRSA5y1z583zHcVpWWQYsy0CbTmNZ3AZFmIinLFzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE59fks+7mq6JH9mU2sC9xAnjMIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ViYzI3NTgtYjYwMy0z MmM1LTk3NDctYjE3YTc2YzE1NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhmoHb8AQg2TeC0AurU8w7BKkQ7fBYst4IQbuhWinLbSxJMbjYSfjP4 xoGDQgni0A0qXO6TcFNDIZvsPhgrr1NZRUUmg8nG5V4cvSFnactVqJVB7yuDrIh/ 4b7087Ra12PqE1YHZMn+3zcImxokPGXYuapw3WZwtTmQOlqCSikv3uZRjK+6hck+ 1jLLFRi3Te98G4Qg5PEkE28HZC0BzKWTIVnMrosqG45Aip5Uw6w3N7ItAd5+TEdY F2CxBuDZTaXy2kt2X08DC8FNmqP0zwX3K0q8p48LH/C1SUqNhewiF6qbnSBFM1xD 2OAwQ7rg9uOJZYTe53Ab2i4s0K4wOP8= -----END CERTIFICATE-----Generated at Sat Sep 26 16:25:27 2026 by rpki-client