$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa File: 0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa (raw, json) Hash identifier: 2VM6GFxnHv1BknO/0/tq89IQaaVJM2HZPwr94oxntsU= Subject key identifier: 1B:A9:A2:4A:D2:A9:94:5F:21:6B:6A:21:DF:E2:D7:33:5D:2B:6B:72 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F2957BDB75CFC609DDD98FF00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 137409 IP address blocks: 104.37.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bd:b7:5c:fc:60:9d:dd:98:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=74cb442f-ff17-427d-a913-709077854a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:53:d1:2e:e7:4f:c1:ce:7d:40:81:59:f4:e8: a2:05:09:3c:8a:71:16:cc:77:bf:8f:9c:0d:c3:a5: d8:31:7b:06:21:16:c9:2d:64:fb:32:32:78:dd:fe: ee:f2:d1:40:a9:a8:6a:5f:ef:7e:55:86:b0:95:6b: 0e:1f:f2:42:72:b6:d5:53:a8:e7:73:2d:8e:e1:03: 35:57:81:6b:58:ff:f3:02:ae:b8:6c:5c:30:51:37: f8:3b:b6:8d:22:d5:47:3a:88:b5:a5:a4:84:b3:95: 50:af:77:db:94:bc:37:ac:97:f7:81:4e:c4:e0:10: a5:ef:77:05:49:ac:98:2e:50:83:c5:de:a8:be:a4: b3:48:44:6b:8f:58:25:a7:c5:b4:0f:3f:35:4e:01: 9a:85:c0:a6:a7:98:4a:d5:82:87:82:78:41:64:31: 96:42:29:c4:0b:50:9d:f9:11:71:21:63:09:dd:51: 10:9b:81:0a:03:40:53:14:cb:c9:80:78:3d:79:83: 53:34:84:19:d4:b6:c9:79:7b:38:14:5d:01:1f:3f: 6f:b0:93:5a:08:41:78:61:4e:2b:59:10:d7:1c:67: 9b:95:b6:3e:b1:6a:9c:a7:e1:38:97:c1:7c:8d:64: f2:5a:2b:fa:49:f4:31:b3:42:c7:c6:19:ad:9d:65: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A9:A2:4A:D2:A9:94:5F:21:6B:6A:21:DF:E2:D7:33:5D:2B:6B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b177fcd-3efc-3067-95d3-f423a4e6e7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:91:87:17:ca:ab:5a:90:a1:5c:88:18:dc:2a:a1:56:85:6b: 3b:b3:45:f0:8e:40:91:15:f0:2e:96:79:32:45:b2:df:0f:71: 20:ed:04:fa:ee:b3:4c:0a:e5:f5:bb:5b:fb:84:86:25:55:44: 92:ee:2c:5c:8f:5f:5e:7c:88:43:54:f8:16:d6:d7:21:58:02: 03:19:16:a6:3a:d0:87:62:69:7c:5d:1b:cf:95:3c:69:b5:27: cd:bc:d5:34:2f:e9:87:a9:9c:43:49:ca:85:83:f6:e4:56:7e: 6b:1e:a9:1b:22:87:db:7f:67:ee:27:46:11:8b:0f:38:10:26: c6:d3:a8:49:3e:9e:88:d5:fb:1b:fd:c5:fd:fc:a2:2e:a0:1b: 36:89:33:28:47:7e:b0:c7:1a:d9:b8:40:0c:c4:c2:09:6c:7a: 49:26:e6:a9:29:1d:b2:76:a2:cb:d0:20:e1:6a:a4:37:f5:9e: 62:6b:3e:5f:54:cb:b8:f0:f0:1f:72:ba:54:59:b9:9e:92:f2: 0c:f1:f4:de:90:5b:f5:6a:8e:0d:d7:72:7d:b2:d7:21:20:d9: 18:0e:24:07:25:08:dc:9b:70:fc:63:c7:22:29:df:e0:81:f3: 50:90:b6:47:28:25:13:77:60:53:de:41:b6:6e:9f:50:6a:c4: ec:33:bc:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV723XPxgnd2Y/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NzRjYjQ0MmYtZmYxNy00MjdkLWE5MTMtNzA5MDc3ODU0YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVPRLudPwc59QIFZ9OiiBQk8inEWzHe/j5wN w6XYMXsGIRbJLWT7MjJ43f7u8tFAqahqX+9+VYawlWsOH/JCcrbVU6jncy2O4QM1 V4FrWP/zAq64bFwwUTf4O7aNItVHOoi1paSEs5VQr3fblLw3rJf3gU7E4BCl73cF SayYLlCDxd6ovqSzSERrj1glp8W0Dz81TgGahcCmp5hK1YKHgnhBZDGWQinEC1Cd +RFxIWMJ3VEQm4EKA0BTFMvJgHg9eYNTNIQZ1LbJeXs4FF0BHz9vsJNaCEF4YU4r WRDXHGeblbY+sWqcp+E4l8F8jWTyWiv6SfQxs0LHxhmtnWUjGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBupokrSqZRfIWtqId/i1zNdK2tyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGIxNzdmY2QtM2VmYy0z MDY3LTk1ZDMtZjQyM2E0ZTZlN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2RhxfKq1qQoVyIGNwqoVaFazuzRfCOQJEV8C6WeTJFst8PcSDtBPru s0wK5fW7W/uEhiVVRJLuLFyPX158iENU+BbW1yFYAgMZFqY60IdiaXxdG8+VPGm1 J8281TQv6YepnENJyoWD9uRWfmseqRsih9t/Z+4nRhGLDzgQJsbTqEk+nojV+xv9 xf38oi6gGzaJMyhHfrDHGtm4QAzEwglsekkm5qkpHbJ2osvQIOFqpDf1nmJrPl9U y7jw8B9yulRZuZ6S8gzx9N6QW/Vqjg3Xcn2y1yEg2RgOJAclCNybcPxjxyIp3+CB 81CQtkcoJRN3YFPeQbZun1BqxOwzvAY= -----END CERTIFICATE-----Generated at Tue Sep 22 10:34:06 2026 by rpki-client