$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa File: b8da705a-5ddb-3f02-9da1-f521b654a46a.roa (raw, json) Hash identifier: GqNRsXJLVOJ2iDCw1emI6x9VUz+SYIFZa1dCtzORBKQ= Subject key identifier: 96:24:BA:3E:2A:1B:71:58:53:4D:5F:27:54:12:F7:31:D9:85:A1:38 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F58CD62B362DFE813C4110180 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 212238 IP address blocks: 104.164.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:62:b3:62:df:e8:13:c4:11:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=b9a623ed-57a3-4eff-b48f-150c50b2d4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:c3:0b:e5:07:ed:ae:b9:23:44:ca:50:db: 72:06:b5:8f:42:67:85:fd:61:2b:ef:59:63:ee:3e: 4d:3c:51:1a:b3:17:36:dd:f6:86:b6:a1:f6:69:65: 52:e5:f4:7c:01:ff:23:42:2d:b1:f5:48:88:8e:43: 2e:57:db:7f:a2:7b:63:1f:91:0d:3b:2d:d2:02:61: 8b:c5:50:a4:e8:15:26:dd:57:bc:62:29:2e:c1:dc: f4:0f:1a:4d:d8:df:47:96:22:bb:b7:83:41:d6:e0: 3b:3e:b3:a4:57:f4:90:e6:7d:f0:4d:19:be:3f:94: 08:34:b3:bf:3f:47:21:54:eb:79:86:a5:d5:d4:a3: d1:df:dc:2a:ee:15:b5:43:95:92:6d:7a:ff:f2:7f: 2d:e3:50:03:ac:cf:9c:e5:cd:c1:8f:f3:64:08:c9: 2b:03:52:af:ce:f0:ff:c7:ec:a1:0e:e2:ca:69:44: 63:35:1c:98:6e:71:20:09:ac:be:87:f2:36:a4:ac: e7:b6:75:d7:0e:5b:3d:39:cb:60:69:2d:ab:e2:38: f2:52:ca:70:cf:ed:e0:6b:89:2c:73:f6:f3:02:28: 79:aa:4c:95:4b:67:74:fb:a1:38:1c:b9:dc:61:ae: 95:4a:0e:7c:8e:cf:1e:f4:66:d1:98:96:87:1f:2b: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:24:BA:3E:2A:1B:71:58:53:4D:5F:27:54:12:F7:31:D9:85:A1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b8da705a-5ddb-3f02-9da1-f521b654a46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 104.164.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:10:c3:3e:ba:10:65:48:64:29:76:bd:4b:e4:cd:60:b0:a0: 31:e3:5b:90:11:cc:8f:08:3d:3c:a7:ec:09:d6:d8:36:c4:1e: 86:18:e9:2a:30:a4:e0:c9:c6:34:0a:ca:fb:0a:15:ad:5e:cc: 42:46:d7:d1:4b:95:44:f0:56:77:4f:32:44:97:13:d5:b0:b7: 78:18:e6:b4:97:cc:0f:da:fb:9b:ed:66:8a:eb:bb:05:56:09: dd:29:d1:7f:38:e1:b3:92:f3:54:f7:3c:7d:78:fa:be:54:d1: 43:d9:dd:ad:25:4f:ea:a1:16:07:db:d8:2c:d6:9c:9c:33:9b: 5f:d9:fa:55:70:fb:06:52:c6:84:37:d7:f3:d5:a4:1e:3c:2b: 40:dd:06:d1:10:2a:c6:a9:f5:8e:63:70:33:f0:5e:8b:6a:0c: 1d:d3:57:ab:14:4d:63:93:1e:3b:d0:e8:a1:0f:d2:b0:fa:44: 12:ff:0a:86:1b:ed:32:fa:f3:0d:6e:3f:ce:58:cf:72:b3:c2: d7:19:db:a2:14:0d:de:85:07:05:9f:7f:e3:28:0b:8b:9b:b0: bf:40:6f:e9:76:ea:b1:a1:59:47:95:25:4b:29:12:eb:2e:16: 4e:ad:6b:24:96:df:ea:5b:5c:86:93:0c:67:4a:73:8a:f2:c9: 90:16:83:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWKzYt/oE8QRAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk YjlhNjIzZWQtNTdhMy00ZWZmLWI0OGYtMTUwYzUwYjJkNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVvDC+UH7a65I0TKUNtyBrWPQmeF/WEr71lj 7j5NPFEasxc23faGtqH2aWVS5fR8Af8jQi2x9UiIjkMuV9t/ontjH5ENOy3SAmGL xVCk6BUm3Ve8Yikuwdz0DxpN2N9HliK7t4NB1uA7PrOkV/SQ5n3wTRm+P5QINLO/ P0chVOt5hqXV1KPR39wq7hW1Q5WSbXr/8n8t41ADrM+c5c3Bj/NkCMkrA1KvzvD/ x+yhDuLKaURjNRyYbnEgCay+h/I2pKzntnXXDls9OctgaS2r4jjyUspwz+3ga4ks c/bzAih5qkyVS2d0+6E4HLncYa6VSg58js8e9GbRmJaHHys9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYkuj4qG3FYU01fJ1QS9zHZhaE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjhkYTcwNWEtNWRkYi0z ZjAyLTlkYTEtZjUyMWI2NTRhNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsQwz66EGVIZCl2vUvkzWCwoDHjW5ARzI8IPTyn7AnW2DbEHoYY6Sow pODJxjQKyvsKFa1ezEJG19FLlUTwVndPMkSXE9Wwt3gY5rSXzA/a+5vtZorruwVW Cd0p0X844bOS81T3PH14+r5U0UPZ3a0lT+qhFgfb2CzWnJwzm1/Z+lVw+wZSxoQ3 1/PVpB48K0DdBtEQKsap9Y5jcDPwXotqDB3TV6sUTWOTHjvQ6KEP0rD6RBL/CoYb 7TL68w1uP85Yz3KzwtcZ26IUDd6FBwWff+MoC4ubsL9Ab+l26rGhWUeVJUspEusu Fk6taySW3+pbXIaTDGdKc4ryyZAWg9Y= -----END CERTIFICATE-----Generated at Sun Oct 11 22:09:08 2026 by rpki-client