$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa File: a2820430-cffa-3a28-865a-d2bff6b67e7e.roa (raw, json) Hash identifier: S99exz0kCy4hvf06dj7M2DfbSBN6TN/mTGfKd/AnvXc= Subject key identifier: B4:0E:1A:C5:61:90:E7:87:35:AA:AB:A6:17:E4:85:04:3E:DD:B3:40 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584F374D2C47DA8739BE81D5CC00 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 140042 IP address blocks: 104.251.224.0/20 maxlen: 24 172.81.102.0/23 maxlen: 24 172.81.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2c:47:da:87:39:be:81:d5:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=aa83bb10-2996-4756-a4cc-584a2fc70917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:1f:a0:f7:d0:dc:01:b7:c1:08:8b:ee:df: ef:c6:ae:f3:7e:52:99:e3:b8:ee:61:e5:54:86:82: 14:b8:39:3e:a2:46:63:28:42:3b:ca:1d:7c:d3:90: 0f:00:3e:e7:93:e4:b4:bb:bb:cd:cd:e5:72:b5:fc: 2f:3b:4d:bc:f6:e4:24:91:81:60:dd:4a:78:68:88: 50:7f:3c:17:18:35:5c:f5:9c:32:a8:d3:76:d4:f4: 65:f6:58:b4:8a:0c:15:2f:44:30:24:c5:55:a9:f0: 65:b0:b7:69:18:60:78:5b:70:1e:b6:27:59:95:d4: a4:af:fe:eb:77:7a:5b:2c:92:d5:e5:8f:ab:b1:0d: a0:44:1b:d3:e9:e5:a3:b0:a1:3c:a0:e6:cb:af:be: 3a:30:ed:b0:07:09:53:8c:8b:28:72:5c:a2:54:4a: 8a:2d:b3:4c:29:88:61:ac:5e:0c:f7:eb:06:33:20: f2:c5:27:b7:6e:9f:f8:82:0e:34:3f:f4:f1:fe:99: e4:86:1f:bc:39:76:a7:6f:7c:8c:69:da:ca:4a:5e: 65:a4:23:ed:3a:6b:5d:ba:5a:12:cd:0a:22:73:99: ed:23:1e:a2:38:5a:79:d1:e5:9a:98:a9:d8:57:55: ef:b5:bc:cc:58:ee:ac:7b:54:9b:41:c5:b3:09:a1: 0a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0E:1A:C5:61:90:E7:87:35:AA:AB:A6:17:E4:85:04:3E:DD:B3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/a2820430-cffa-3a28-865a-d2bff6b67e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 104.251.224.0/20 172.81.102.0-172.81.111.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:31:20:74:10:6a:2b:4f:2c:21:c8:e5:78:59:0f:cd:d8:77: dc:3e:3b:69:b5:8e:72:13:0c:6b:78:aa:7e:d0:dc:95:d8:01: ae:88:f3:8d:b0:66:98:95:ff:46:e3:ec:cf:e9:23:ee:93:d2: b4:cf:c0:5a:e4:39:82:1f:c8:3c:cb:dd:d5:39:e0:a2:bd:bd: fe:0b:c1:29:49:dc:70:32:14:ef:ee:9f:9b:d6:bc:0a:e1:ae: b3:53:1f:bc:8d:2c:ae:68:2e:f9:67:7c:a2:87:29:43:9e:1a: e4:ab:93:44:3b:ad:6c:98:2b:f1:65:67:32:f3:08:5c:d9:b3: 4b:2f:6a:17:e2:4b:8c:e7:31:64:c4:ef:db:a7:61:5b:ef:68: 69:ed:18:4e:7d:a3:18:1d:4a:60:b8:7c:d4:d4:19:19:9b:15: e3:72:ea:db:ce:a3:a6:44:68:83:ec:47:2d:87:29:86:9e:2d: ec:ff:95:88:81:a9:d9:a5:2b:75:a8:7b:49:70:ed:d4:b6:1d: ef:ab:7f:a5:6c:bb:ad:49:2e:5a:1e:16:63:a1:c2:56:5b:84: bc:33:55:5c:64:d2:e4:d3:9a:95:b1:f2:6f:09:63:47:65:a7: 31:89:9c:01:e3:93:e6:d3:d4:c5:53:fc:96:46:1e:35:78:72: 40:f8:09:23 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE83TSxH2oc5voHVzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YWE4M2JiMTAtMjk5Ni00NzU2LWE0Y2MtNTg0YTJmYzcwOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8IfoPfQ3AG3wQiL7t/vxq7zflKZ47juYeVU hoIUuDk+okZjKEI7yh1805APAD7nk+S0u7vNzeVytfwvO0289uQkkYFg3Up4aIhQ fzwXGDVc9ZwyqNN21PRl9li0igwVL0QwJMVVqfBlsLdpGGB4W3AetidZldSkr/7r d3pbLJLV5Y+rsQ2gRBvT6eWjsKE8oObLr746MO2wBwlTjIsoclyiVEqKLbNMKYhh rF4M9+sGMyDyxSe3bp/4gg40P/Tx/pnkhh+8OXanb3yMadrKSl5lpCPtOmtduloS zQoic5ntIx6iOFp50eWamKnYV1XvtbzMWO6se1SbQcWzCaEKUQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFLQOGsVhkOeHNaqrphfkhQQ+3bNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvYTI4MjA0MzAtY2ZmYS0z YTI4LTg2NWEtZDJiZmY2YjY3ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEaPvgMAwD BAGsUWYDBASsUWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAHDEgdBBqK08sIcjleFkPzdh33D47abWOchMM a3iqftDcldgBrojzjbBmmJX/RuPsz+kj7pPStM/AWuQ5gh/IPMvd1Tngor29/gvB KUnccDIU7+6fm9a8CuGus1MfvI0srmgu+Wd8oocpQ54a5KuTRDutbJgr8WVnMvMI XNmzSy9qF+JLjOcxZMTv26dhW+9oae0YTn2jGB1KYLh81NQZGZsV43Lq286jpkRo g+xHLYcphp4t7P+ViIGp2aUrdah7SXDt1LYd76t/pWy7rUkuWh4WY6HCVluEvDNV XGTS5NOalbHybwljR2WnMYmcAeOT5tPUxVP8lkYeNXhyQPgJIw== -----END CERTIFICATE-----Generated at Mon Sep 21 20:10:24 2026 by rpki-client