$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa File: fb966e1b-fa13-37b0-a49e-0b319577773b.roa (raw, json) Hash identifier: i3rXEDwqvi3SiRqy6YepmMx7DNGvFyOAqwY4+aFDb8c= Subject key identifier: B1:EE:6A:4E:C4:50:5B:E1:3B:C3:89:C3:A1:BF:AF:78:01:F0:E0:70 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F14679FC15138252B61757700 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 212238 IP address blocks: 104.250.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9f:c1:51:38:25:2b:61:75:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b354d264-f6c7-4a3a-8ce5-4970b4f7b2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a9:5f:f5:11:bd:f5:ec:26:4d:60:d7:a5:98: e9:6e:4a:07:89:6e:08:f7:4e:94:ed:f8:9a:92:ff: 9b:4e:07:46:95:e6:26:52:ee:cb:01:a2:4f:a6:ee: fb:ba:1b:cb:8c:15:a0:55:e3:99:ba:28:1d:d6:7b: f6:b5:7e:31:3a:53:20:c4:41:c3:0c:b5:fd:a0:6f: d2:4e:5b:3e:03:81:d1:0d:d9:06:55:e5:74:cc:ce: bd:99:be:60:fe:bd:61:55:9a:37:75:0b:84:d5:6a: c3:75:26:07:ab:f9:04:30:73:b0:7d:ef:fc:0b:de: 89:b5:97:99:ef:a5:2b:0e:96:9c:19:3d:8f:33:f9: cc:fd:a2:f8:4f:94:fa:42:57:ad:7b:ef:d1:a3:e0: 8d:8e:3e:b0:47:65:96:e3:3e:25:9d:33:2e:80:e3: be:72:d9:36:39:15:18:17:58:21:98:e8:c8:9c:bd: f1:fc:eb:e6:68:3f:79:12:3c:bf:83:c2:52:55:9e: 07:56:bb:c0:5c:a6:8b:41:3b:ff:8a:10:55:1a:a1: c1:51:34:9c:d4:bc:77:4c:a4:f3:ee:8b:02:8d:f8: 84:cb:78:6a:24:a1:b4:a2:d7:ee:14:3b:f0:a1:79: a8:8d:26:cf:00:28:44:86:66:93:f7:77:2a:c1:c3: 41:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EE:6A:4E:C4:50:5B:E1:3B:C3:89:C3:A1:BF:AF:78:01:F0:E0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1f:f1:80:48:23:01:44:ce:ea:cd:06:4d:a8:e7:13:35:30: e7:3a:ea:e1:ba:f9:6e:9e:20:40:7f:cb:2f:11:ec:a5:fa:79: eb:b6:5b:3b:8d:b8:48:d6:fb:cd:e8:bc:89:79:9d:0f:37:60: e1:51:10:ad:2f:4c:7e:ef:d0:b3:62:a1:14:10:a8:49:b2:e0: 75:fd:6c:86:64:7f:23:2b:11:90:81:f5:5b:f4:44:96:b9:7e: f1:b4:f9:44:e7:20:d8:d1:6d:3b:24:2c:98:36:42:74:1d:21: 74:63:68:71:75:74:da:95:31:b5:73:2c:34:2d:e5:e9:53:26: 79:12:41:d0:74:56:97:18:53:36:d0:84:98:00:cf:1c:c3:41: 73:03:d7:dc:12:4e:f0:5c:00:ad:5d:85:dc:1f:5a:d7:ca:b5: d5:9d:9c:1f:6c:17:c7:83:e0:02:4c:6e:c9:90:13:90:45:55: e2:29:e2:e6:88:2a:32:48:b1:ae:c7:02:eb:eb:95:78:27:e0: 2f:f4:1a:25:c3:4b:84:22:0a:7a:f3:96:74:27:f7:01:15:b3: 78:22:d9:59:61:e7:0a:34:b9:f0:86:87:dd:e4:c1:57:40:0e: 7b:91:73:ab:fa:c3:09:3a:20:31:37:5a:8a:14:4a:d1:8b:fa: 6e:0b:8f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5/BUTglK2F1dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YjM1NGQyNjQtZjZjNy00YTNhLThjZTUtNDk3MGI0ZjdiMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2alf9RG99ewmTWDXpZjpbkoHiW4I906U7fia kv+bTgdGleYmUu7LAaJPpu77uhvLjBWgVeOZuigd1nv2tX4xOlMgxEHDDLX9oG/S Tls+A4HRDdkGVeV0zM69mb5g/r1hVZo3dQuE1WrDdSYHq/kEMHOwfe/8C96JtZeZ 76UrDpacGT2PM/nM/aL4T5T6Qlete+/Ro+CNjj6wR2WW4z4lnTMugOO+ctk2ORUY F1ghmOjInL3x/OvmaD95Ejy/g8JSVZ4HVrvAXKaLQTv/ihBVGqHBUTSc1Lx3TKTz 7osCjfiEy3hqJKG0otfuFDvwoXmojSbPAChEhmaT93cqwcNBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHuak7EUFvhO8OJw6G/r3gB8OBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmI5NjZlMWItZmExMy0z N2IwLWE0OWUtMGIzMTk1Nzc3NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAof8YBIIwFEzurNBk2o5xM1MOc66uG6+W6eIEB/yy8R7KX6eeu2WzuN uEjW+83ovIl5nQ83YOFREK0vTH7v0LNioRQQqEmy4HX9bIZkfyMrEZCB9Vv0RJa5 fvG0+UTnINjRbTskLJg2QnQdIXRjaHF1dNqVMbVzLDQt5elTJnkSQdB0VpcYUzbQ hJgAzxzDQXMD19wSTvBcAK1dhdwfWtfKtdWdnB9sF8eD4AJMbsmQE5BFVeIp4uaI KjJIsa7HAuvrlXgn4C/0GiXDS4QiCnrzlnQn9wEVs3gi2Vlh5wo0ufCGh93kwVdA DnuRc6v6wwk6IDE3WooUStGL+m4Lj+Q= -----END CERTIFICATE-----Generated at Sun Sep 20 19:52:15 2026 by rpki-client