$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa File: dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa (raw, json) Hash identifier: rnUjpRL2t3uo78sUEoIYYRlS8VptfkfLwHpIVuc/WRQ= Subject key identifier: 20:72:B0:34:A4:B7:DB:FA:B9:AB:15:9A:2D:FE:89:88:6B:9E:84:2F Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F4976B180C846197E40216580 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398478 IP address blocks: 104.233.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:b1:80:c8:46:19:7e:40:21:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5b9159fe-169a-4018-825f-313a5da0bf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:06:64:30:e9:17:e4:28:94:01:27:6e:31:e6: d8:0c:ac:48:9f:b0:29:73:32:d0:50:78:a3:02:36: d4:b7:01:68:1b:bb:f2:67:5b:bc:89:75:98:41:b5: e0:0f:e1:6f:a1:a6:61:98:88:9d:d5:91:f0:4d:06: a7:27:2c:fa:41:66:f8:39:2b:ec:4e:5a:49:f2:e5: 4d:74:6d:da:36:60:9e:16:7f:f7:db:6f:5a:c8:f1: 76:eb:f5:0c:66:75:b9:f2:d0:19:16:6c:a1:b6:03: 97:c7:4c:3e:f7:40:cd:a3:c2:80:22:65:ff:74:80: a8:5c:26:98:16:1d:a4:46:10:d8:6c:c2:35:a5:1b: 8a:33:e6:0b:2a:85:7d:86:4b:e3:71:3f:99:1a:cf: 79:4f:b5:e5:f7:52:28:48:49:c2:2e:4b:37:5e:7e: 33:8b:8b:c7:9a:6d:67:72:14:9d:7e:af:2e:9e:06: ec:79:38:d5:52:2d:58:ff:20:59:ed:7e:84:5a:74: 81:f7:c2:6f:60:8d:3d:04:b3:bc:cb:f7:ea:50:dc: 89:0a:91:12:ba:a0:80:da:bb:d1:4b:be:0c:23:3e: fe:24:27:91:8d:92:b8:3b:dc:dc:19:33:34:63:b8: 78:5a:83:98:8f:95:2e:40:fe:f2:b1:12:32:73:fc: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:B0:34:A4:B7:DB:FA:B9:AB:15:9A:2D:FE:89:88:6B:9E:84:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcfab806-7448-3e2f-bb1a-7e1efbfcc23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:db:5c:b2:dd:36:bc:a0:ad:26:3b:7e:9e:46:77:46:b1:c5: 5d:5b:18:ea:b2:cc:ee:69:65:82:eb:85:90:2f:6e:fe:f4:08: 03:a8:de:8b:30:43:53:98:0d:76:2b:26:0f:5a:0f:eb:43:7c: 59:ee:1c:81:b3:1a:5b:6b:dc:20:76:10:cb:a5:40:e2:b8:b9: 1d:7a:b0:c7:d6:48:fa:0d:91:77:1b:8c:22:57:0b:9c:51:94: 54:44:a3:96:68:45:97:5c:76:b0:3f:22:67:94:8e:65:7b:d9: 3f:8c:e7:7b:c9:92:0f:2c:db:dd:3e:f5:9a:2a:88:3b:49:2a: c1:c3:ae:cf:de:f9:07:60:cf:17:38:7f:b1:db:a0:e0:70:68: 25:ab:9d:13:df:99:bc:17:d6:9b:09:30:bb:01:2b:3c:17:f7: 18:09:1c:4e:7e:08:b6:92:e4:af:86:29:bf:04:f2:1c:aa:59: d5:65:07:c9:99:07:53:e8:8a:1d:26:23:b9:48:c0:b7:31:ad: 94:8b:cc:61:b1:7d:fc:5f:67:bc:fd:79:7f:c9:40:60:65:95: 88:e5:3a:7c:cd:60:52:6f:74:8e:0b:eb:88:0b:96:6c:9b:8a: eb:c8:94:d7:58:d1:4b:f4:c5:5c:94:9d:fd:2d:90:6e:a5:c0: 2b:a7:4d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdrGAyEYZfkAhZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWI5MTU5ZmUtMTY5YS00MDE4LTgyNWYtMzEzYTVkYTBiZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigZkMOkX5CiUASduMebYDKxIn7ApczLQUHij AjbUtwFoG7vyZ1u8iXWYQbXgD+FvoaZhmIid1ZHwTQanJyz6QWb4OSvsTlpJ8uVN dG3aNmCeFn/3229ayPF26/UMZnW58tAZFmyhtgOXx0w+90DNo8KAImX/dICoXCaY Fh2kRhDYbMI1pRuKM+YLKoV9hkvjcT+ZGs95T7Xl91IoSEnCLks3Xn4zi4vHmm1n chSdfq8ungbseTjVUi1Y/yBZ7X6EWnSB98JvYI09BLO8y/fqUNyJCpESuqCA2rvR S74MIz7+JCeRjZK4O9zcGTM0Y7h4WoOYj5UuQP7ysRIyc/yWvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBysDSkt9v6uasVmi3+iYhrnoQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGNmYWI4MDYtNzQ0OC0z ZTJmLWJiMWEtN2UxZWZiZmNjMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3bXLLdNrygrSY7fp5Gd0axxV1bGOqyzO5pZYLrhZAvbv70CAOo3osw Q1OYDXYrJg9aD+tDfFnuHIGzGltr3CB2EMulQOK4uR16sMfWSPoNkXcbjCJXC5xR lFREo5ZoRZdcdrA/ImeUjmV72T+M53vJkg8s290+9ZoqiDtJKsHDrs/e+Qdgzxc4 f7HboOBwaCWrnRPfmbwX1psJMLsBKzwX9xgJHE5+CLaS5K+GKb8E8hyqWdVlB8mZ B1Poih0mI7lIwLcxrZSLzGGxffxfZ7z9eX/JQGBllYjlOnzNYFJvdI4L64gLlmyb iuvIlNdY0Uv0xVyUnf0tkG6lwCunTSE= -----END CERTIFICATE-----Generated at Sun Sep 27 12:29:26 2026 by rpki-client