$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/f680e58e-08a9-311e-a5b9-345ea2f35813.roa File: f680e58e-08a9-311e-a5b9-345ea2f35813.roa (raw, json) Hash identifier: GqkDcXMYT9+j2n14Xi1p8RQ6ZebgrxmLPBa60ftaUj8= Subject key identifier: 01:CA:23:D3:FB:B9:06:03:6D:5B:F6:B8:4B:7F:51:44:FC:A3:7E:8F Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584F27F252435F2CB5CCD035CD40 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/f680e58e-08a9-311e-a5b9-345ea2f35813.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 7352 IP address blocks: 104.166.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:52:43:5f:2c:b5:cc:d0:35:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=e9bdcac5-9583-4d4f-b545-f8937e345f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:11:d1:90:42:a1:69:1f:c8:69:a1:a2:1d: 3f:f2:0b:fb:71:91:f3:44:35:a6:75:53:e8:fd:0c: ba:ab:27:7f:af:1e:6d:fd:9b:39:19:f4:86:d9:f9: 1b:8e:8c:96:5b:cc:fd:98:43:a1:7e:e5:fa:9f:db: 95:e0:30:26:b8:59:0b:f9:b5:ae:cb:d1:71:de:e6: 19:87:5e:ae:49:64:77:55:55:64:8a:c1:92:89:52: 10:c2:ba:84:f4:50:9f:a4:c0:dd:ce:68:ef:bd:34: f7:14:62:64:5c:e5:4f:9a:95:85:da:32:63:76:55: 02:29:95:8c:76:c4:a9:5b:66:6c:b9:c6:f2:66:59: 4b:4a:5f:ce:ac:94:7b:5e:d6:18:a6:b8:43:cc:5f: 75:df:67:f8:58:33:d5:64:79:0c:71:c4:83:77:1d: a6:66:62:e8:e2:b1:d2:af:f0:c9:19:1d:c3:41:5f: 4d:e2:d0:90:b9:dd:1b:fb:a3:5c:7d:04:68:92:2a: 63:52:b2:61:06:d5:e0:09:13:f7:17:33:b2:e2:3f: a4:34:8e:4d:82:b2:8c:75:72:85:95:2c:26:42:f8: 51:e3:21:40:24:c2:83:00:91:02:09:90:18:a8:a0: f6:d9:ca:33:a1:d1:b3:ef:62:fa:71:2f:1e:4e:7f: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CA:23:D3:FB:B9:06:03:6D:5B:F6:B8:4B:7F:51:44:FC:A3:7E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/f680e58e-08a9-311e-a5b9-345ea2f35813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv4: 104.166.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b3:b5:6b:9e:b6:57:de:d0:9e:3e:62:fa:94:54:4d:df:73: ec:69:13:46:21:64:f8:fe:e0:4e:88:5d:14:45:42:f9:7e:a7: 30:27:57:94:66:88:a4:fa:fc:c8:50:44:b6:8e:fa:c9:72:41: fb:62:83:aa:53:3e:57:3e:c4:c5:37:91:ea:63:28:bb:53:c9: 6e:19:f2:dd:b8:75:0f:c5:0d:05:ff:e4:31:72:7a:dd:87:bc: 87:52:b3:82:86:da:c7:4c:79:d4:48:ad:4b:dc:8a:45:fc:c4: 99:31:5c:03:fc:00:49:ad:fe:a8:d7:15:07:84:75:ac:9f:ca: 76:d8:25:e6:51:f3:a5:0e:33:9f:db:b0:20:57:cd:f3:05:8d: 67:df:d8:ce:3b:62:6e:a1:f1:1f:de:64:4a:7b:c6:b4:0d:1d: 22:b4:62:7a:33:51:76:87:17:4e:45:8a:1c:b8:9b:bd:07:6f: 11:95:ec:52:77:1d:2d:1b:09:d0:89:c7:71:00:4f:68:00:7b: 19:85:69:8c:ac:9b:94:7c:76:58:07:30:ad:17:90:7d:d5:98: 1a:6b:7d:8f:93:31:5c:72:69:35:62:8b:66:cd:65:d7:28:8c: 97:57:1a:2b:8e:4b:cd:84:a3:4b:03:0d:7c:3c:82:79:ef:68: c1:80:f2:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lJDXyy1zNA1zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTliZGNhYzUtOTU4My00ZDRmLWI1NDUtZjg5MzdlMzQ1ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxUR0ZBCoWkfyGmhoh0/8gv7cZHzRDWmdVPo /Qy6qyd/rx5t/Zs5GfSG2fkbjoyWW8z9mEOhfuX6n9uV4DAmuFkL+bWuy9Fx3uYZ h16uSWR3VVVkisGSiVIQwrqE9FCfpMDdzmjvvTT3FGJkXOVPmpWF2jJjdlUCKZWM dsSpW2ZsucbyZllLSl/OrJR7XtYYprhDzF9132f4WDPVZHkMccSDdx2mZmLo4rHS r/DJGR3DQV9N4tCQud0b+6NcfQRokipjUrJhBtXgCRP3FzOy4j+kNI5NgrKMdXKF lSwmQvhR4yFAJMKDAJECCZAYqKD22cozodGz72L6cS8eTn+/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHKI9P7uQYDbVv2uEt/UUT8o36PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvZjY4MGU1OGUtMDhhOS0z MTFlLWE1YjktMzQ1ZWEyZjM1ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaztWuetlfe0J4+YvqUVE3fc+xpE0YhZPj+4E6IXRRFQvl+pzAnV5Rm iKT6/MhQRLaO+slyQftig6pTPlc+xMU3kepjKLtTyW4Z8t24dQ/FDQX/5DFyet2H vIdSs4KG2sdMedRIrUvcikX8xJkxXAP8AEmt/qjXFQeEdayfynbYJeZR86UOM5/b sCBXzfMFjWff2M47Ym6h8R/eZEp7xrQNHSK0YnozUXaHF05Fihy4m70HbxGV7FJ3 HS0bCdCJx3EAT2gAexmFaYysm5R8dlgHMK0XkH3VmBprfY+TMVxyaTVii2bNZdco jJdXGiuOS82Eo0sDDXw8gnnvaMGA8nU= -----END CERTIFICATE-----Generated at Tue Sep 22 04:15:08 2026 by rpki-client