$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/d5493c6b-4472-3b6d-b455-daa43223af73.roa File: d5493c6b-4472-3b6d-b455-daa43223af73.roa (raw, json) Hash identifier: n2rmik1lqJMsqyXzU03IRAXpWqfER8koldLXLRZpEnE= Subject key identifier: 25:F8:44:D1:79:91:D3:36:EE:9A:2E:90:57:34:29:FD:0E:C7:31:B9 Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584F2ABD01A2CBB32BCD6FA9CA50 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/d5493c6b-4472-3b6d-b455-daa43223af73.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 7352 IP address blocks: 104.166.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:01:a2:cb:b3:2b:cd:6f:a9:ca:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=60fd6f54-8920-44ad-8e83-157eba0769e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:90:1e:a4:3b:45:2d:64:25:f5:c9:f3:30:b4: 42:8d:5c:87:ed:c9:55:8b:58:bb:64:47:b7:27:f9: e0:ac:28:b2:fc:68:06:f5:f7:b5:8c:14:06:c2:7d: b3:4d:c6:f8:e4:59:b7:63:6e:fd:9d:43:d1:aa:78: 85:8b:c8:41:96:44:7e:ce:05:13:dc:1d:aa:b8:d1: e2:0c:02:46:0e:2b:67:30:d9:73:93:19:42:e1:8f: 49:4b:78:73:be:a1:ee:44:b1:a4:ab:65:b8:a2:00: 22:5a:57:3d:41:6a:19:96:d8:9d:00:c6:cf:5d:ba: 86:2e:c2:28:e6:13:c4:d7:ef:e2:be:d5:be:07:50: 7c:8b:f3:48:7b:0c:2a:de:82:7c:93:07:96:7f:a3: f4:56:80:c9:e1:4a:89:15:91:ad:3b:60:f9:da:e9: 20:b1:f7:98:23:d4:41:ee:6d:66:0c:35:c2:bd:7e: 84:3f:0a:bf:4d:4b:b3:bc:ce:ea:0d:4e:89:77:0f: e4:3c:b7:ac:8c:ea:a9:15:33:19:18:be:37:b6:1c: 21:b5:0a:2c:89:e0:8c:00:dd:ad:b7:aa:9d:eb:93: 28:9a:f4:d3:67:9f:40:05:75:f0:65:b6:44:36:fb: dd:39:5c:59:91:c0:9e:9d:de:38:8a:4c:6d:11:26: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F8:44:D1:79:91:D3:36:EE:9A:2E:90:57:34:29:FD:0E:C7:31:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/d5493c6b-4472-3b6d-b455-daa43223af73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv4: 104.166.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:9a:96:0e:01:82:5d:40:37:44:5f:43:d1:f7:9c:ac:33:cc: f7:27:78:02:ae:da:3f:75:42:05:f7:2f:ab:96:5f:84:3d:7f: 1d:10:e1:41:5e:2a:cb:5b:a0:50:fa:be:21:51:a5:19:3f:2d: 6c:c1:77:5e:5f:29:66:37:dc:63:14:a5:49:d9:3b:52:46:f4: 38:d8:c6:a8:bd:72:a6:28:78:26:60:2b:ac:eb:1d:f6:7f:ef: ac:85:09:c6:c5:36:00:dd:25:ab:bb:10:aa:01:f2:07:2e:77: bb:89:2d:5a:a4:87:8c:8e:40:cd:dd:94:54:9b:c9:23:27:10: 28:f9:5a:89:eb:06:c3:d7:02:2a:54:f9:30:b9:04:ea:48:a8: a5:f6:8c:f3:2d:7b:e5:89:0f:a1:ab:34:79:b1:20:b7:e8:4d: 7c:6d:bb:c1:d6:05:b4:05:8a:53:9a:25:d3:c3:54:25:e7:24: 83:21:ef:67:41:ee:62:a5:a2:a1:29:f2:4c:21:92:04:ae:25: 09:1f:c6:ab:bb:3e:e7:6e:09:6a:ca:1a:74:ba:95:09:65:2b: e8:dc:19:87:68:65:66:b9:87:5b:35:86:61:44:79:c8:b2:4c: 90:18:d5:d0:71:61:6d:00:15:85:f0:2a:05:a3:cd:b8:91:84: fa:12:17:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQGiy7MrzW+pylAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NjBmZDZmNTQtODkyMC00NGFkLThlODMtMTU3ZWJhMDc2OWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5AepDtFLWQl9cnzMLRCjVyH7clVi1i7ZEe3 J/ngrCiy/GgG9fe1jBQGwn2zTcb45Fm3Y279nUPRqniFi8hBlkR+zgUT3B2quNHi DAJGDitnMNlzkxlC4Y9JS3hzvqHuRLGkq2W4ogAiWlc9QWoZltidAMbPXbqGLsIo 5hPE1+/ivtW+B1B8i/NIewwq3oJ8kweWf6P0VoDJ4UqJFZGtO2D52ukgsfeYI9RB 7m1mDDXCvX6EPwq/TUuzvM7qDU6Jdw/kPLesjOqpFTMZGL43thwhtQosieCMAN2t t6qd65MomvTTZ59ABXXwZbZENvvdOVxZkcCend44ikxtESbnSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX4RNF5kdM27poukFc0Kf0OxzG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvZDU0OTNjNmItNDQ3Mi0z YjZkLWI0NTUtZGFhNDMyMjNhZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaKYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOalg4Bgl1AN0RfQ9H3nKwzzPcneAKu2j91QgX3L6uWX4Q9fx0Q4UFe KstboFD6viFRpRk/LWzBd15fKWY33GMUpUnZO1JG9DjYxqi9cqYoeCZgK6zrHfZ/ 76yFCcbFNgDdJau7EKoB8gcud7uJLVqkh4yOQM3dlFSbySMnECj5WonrBsPXAipU +TC5BOpIqKX2jPMte+WJD6GrNHmxILfoTXxtu8HWBbQFilOaJdPDVCXnJIMh72dB 7mKloqEp8kwhkgSuJQkfxqu7PuduCWrKGnS6lQllK+jcGYdoZWa5h1s1hmFEeciy TJAY1dBxYW0AFYXwKgWjzbiRhPoSF54= -----END CERTIFICATE-----Generated at Thu Sep 24 07:21:40 2026 by rpki-client