$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa File: a76a38d7-efa4-3450-9774-2046e431cfb8.roa (raw, json) Hash identifier: 5l2lwvxwvDgh17Ax+P+m0CkgbT4Swe356hvpAnCQLNU= Subject key identifier: 3A:3B:32:D5:EB:BF:7E:8E:EB:55:2F:AF:7C:D6:6A:40:FF:83:12:37 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F49774CE7F15E1BA35FB1AAA0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 931 IP address blocks: 104.249.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:4c:e7:f1:5e:1b:a3:5f:b1:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=373a5802-4744-48af-a320-ba3f548077c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:b1:7f:3f:c4:2a:cf:d3:99:14:1d:81:05: f3:4e:d5:f8:71:22:4b:24:60:5b:d1:39:1a:ba:9e: 5d:09:cf:c2:8c:a8:b2:0f:47:c6:d5:bf:e2:e1:60: cd:8a:a5:cf:d1:fe:b8:85:08:a4:a0:53:42:01:d4: b7:39:b0:0a:48:0b:c0:b3:67:34:b3:db:0d:fb:81: 3f:b1:0c:bd:28:14:18:b7:8f:12:23:a5:47:dc:4a: ee:92:f0:3c:d3:fd:91:d6:3e:89:84:c4:2c:66:66: fb:f6:e0:39:50:56:98:04:33:40:29:ba:f8:ed:61: 06:f2:fd:40:73:e6:ec:fa:17:bc:2a:87:e2:62:43: ef:a0:b6:e7:d2:dd:01:4d:69:57:64:d4:a8:89:40: 36:00:7c:ae:e6:58:03:66:9b:21:06:02:89:e8:01: 90:08:80:2c:39:1a:c2:3d:c6:3d:dd:06:a2:87:de: 24:38:91:81:90:22:24:25:53:9e:31:f2:9c:e9:a1: 5b:82:d6:87:23:88:e2:65:ff:73:51:07:83:54:e7: 08:be:5a:7f:3b:7d:8a:66:4f:8c:43:29:71:3d:00: 65:37:97:07:3f:60:40:10:1a:2d:3d:f3:df:79:62: 98:cc:d2:b7:d3:01:2d:50:a1:33:43:4c:b0:55:73: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:32:D5:EB:BF:7E:8E:EB:55:2F:AF:7C:D6:6A:40:FF:83:12:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a76a38d7-efa4-3450-9774-2046e431cfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.249.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:08:47:51:17:6d:f9:5b:bc:be:6d:59:c8:1d:9d:7e:b1:e7: b0:4a:6d:77:eb:a8:bf:45:05:9b:5c:b2:3b:9c:24:15:33:00: 34:f5:f3:42:7d:82:d5:00:d3:28:31:79:c4:e5:79:dd:de:5a: 6a:17:9e:ca:a2:3a:19:fc:79:3d:68:0b:d6:de:4b:e2:10:0f: 49:2b:cb:1b:bb:fc:c7:e7:cf:71:46:92:2b:ff:bf:c7:df:7c: 50:aa:af:ac:84:b8:fa:f5:e7:6d:cf:6c:dc:56:c7:49:0d:41: 41:6c:e3:bb:ca:ef:23:54:98:5f:46:5a:fb:e9:ec:11:c3:0d: 37:43:9a:de:d5:01:40:04:7e:30:dd:04:ff:71:ec:77:79:8e: 99:f3:82:e2:4a:fe:95:88:50:b6:46:f2:2a:5f:05:14:2d:6f: ef:c4:c2:6d:cf:13:12:69:3b:a5:db:33:02:93:15:eb:a7:9b: 21:45:2a:60:84:6e:e7:42:57:9c:5e:fb:5f:96:20:5d:c4:80: fe:81:d7:ed:79:68:59:c6:af:0a:c3:3b:2b:e5:8f:4f:f4:37: fb:8f:6a:b0:bc:72:98:fd:35:e0:8c:e8:41:d3:1a:e3:3b:09: f6:22:e8:88:00:07:15:cb:d7:ea:e4:7c:07:6b:b6:4c:51:fc: 7b:9b:b2:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0zn8V4bo1+xqqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzczYTU4MDItNDc0NC00OGFmLWEzMjAtYmEzZjU0ODA3N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T2xfz/EKs/TmRQdgQXzTtX4cSJLJGBb0Tka up5dCc/CjKiyD0fG1b/i4WDNiqXP0f64hQikoFNCAdS3ObAKSAvAs2c0s9sN+4E/ sQy9KBQYt48SI6VH3ErukvA80/2R1j6JhMQsZmb79uA5UFaYBDNAKbr47WEG8v1A c+bs+he8KofiYkPvoLbn0t0BTWlXZNSoiUA2AHyu5lgDZpshBgKJ6AGQCIAsORrC PcY93Qaih94kOJGBkCIkJVOeMfKc6aFbgtaHI4jiZf9zUQeDVOcIvlp/O32KZk+M QylxPQBlN5cHP2BAEBotPfPfeWKYzNK30wEtUKEzQ0ywVXPfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo7MtXrv36O61Uvr3zWakD/gxI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTc2YTM4ZDctZWZhNC0z NDUwLTk3NzQtMjA0NmU0MzFjZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAIR1EXbflbvL5tWcgdnX6x57BKbXfrqL9FBZtcsjucJBUzADT180J9 gtUA0ygxecTled3eWmoXnsqiOhn8eT1oC9beS+IQD0kryxu7/Mfnz3FGkiv/v8ff fFCqr6yEuPr1523PbNxWx0kNQUFs47vK7yNUmF9GWvvp7BHDDTdDmt7VAUAEfjDd BP9x7Hd5jpnzguJK/pWIULZG8ipfBRQtb+/Ewm3PExJpO6XbMwKTFeunmyFFKmCE budCV5xe+1+WIF3EgP6B1+15aFnGrwrDOyvlj0/0N/uParC8cpj9NeCM6EHTGuM7 CfYi6IgABxXL1+rkfAdrtkxR/Hubsuo= -----END CERTIFICATE-----Generated at Sun Sep 27 11:24:18 2026 by rpki-client