$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/0b331785-22e9-33c4-88e6-e1ac36a14c88.roa File: 0b331785-22e9-33c4-88e6-e1ac36a14c88.roa (raw, json) Hash identifier: wVabz2QLcNXPI1JZw3TgC4AqX0iw3dhtP5DTMvEarfg= Subject key identifier: 42:D6:F0:93:E0:55:B8:98:74:4C:F7:20:21:9A:2F:6C:BC:79:7F:DF Certificate issuer: /CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Certificate serial: 010D0C9F4328584F4C3D5C26FACCDA0FEF91E900 Authority key identifier: 8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/0b331785-22e9-33c4-88e6-e1ac36a14c88.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 14618 IP address blocks: 104.166.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5c:26:fa:cc:da:0f:ef:91:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d25f3fa9-8b52-4f17-8aca-6740ded73683 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0fa14bb8-4fd7-46d1-a80d-4d1b91db5984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:e1:0d:13:58:33:68:50:f4:41:7e:3c:b9: b4:39:73:c4:61:8c:19:a0:69:42:8e:27:ff:73:46: 99:24:b5:ec:34:28:bc:f2:9b:bd:bc:c5:86:dd:98: a0:b7:b3:98:b2:8b:f0:33:4b:83:5c:0a:04:c7:0e: 15:c3:04:49:06:dc:8f:dd:74:d5:94:50:d8:b1:aa: 78:a3:51:8e:44:21:ad:4e:f5:29:5d:1d:20:27:6a: fe:0e:49:2a:a0:6e:be:86:03:6c:5c:2f:dd:0c:de: ef:f9:5f:ad:2c:7c:80:56:25:17:67:0d:73:68:71: c9:cd:33:9b:ad:42:3a:18:f0:ea:e3:b5:e9:2e:37: 15:64:fe:29:f3:57:bd:fe:7d:9a:25:64:38:24:f9: bf:a2:3f:14:de:38:30:77:58:07:68:0b:29:06:2f: 29:2d:23:f1:b4:35:6a:b9:af:e1:bb:92:97:94:5b: 2a:96:dd:ef:4e:03:49:f5:bc:8e:08:75:a3:75:34: 25:31:85:23:8e:b2:90:91:1b:29:0b:4b:f3:32:fa: a1:6a:21:95:cf:3b:6a:c2:a1:11:3a:21:47:f7:e0: 5c:ca:85:c2:0b:57:c2:d0:9f:53:36:37:27:3d:2c: 37:4b:5c:57:44:53:7e:12:05:90:66:45:cf:9a:8c: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D6:F0:93:E0:55:B8:98:74:4C:F7:20:21:9A:2F:6C:BC:79:7F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/0b331785-22e9-33c4-88e6-e1ac36a14c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683/d25f3fa9-8b52-4f17-8aca-6740ded73683.crl X509v3 Authority Key Identifier: keyid:8E:B5:84:9A:70:4E:11:B0:46:6B:AD:9D:D3:5B:7B:FC:11:F0:B1:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d25f3fa9-8b52-4f17-8aca-6740ded73683.cer sbgp-ipAddrBlock: critical IPv4: 104.166.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:62:ad:17:62:67:6f:93:76:c4:90:d1:79:4b:b6:c3:35:d2: 00:e4:1e:78:b2:3b:9b:2a:9d:a8:a6:ba:f2:20:fb:e2:40:33: 60:c8:a5:79:35:dd:e2:f2:7c:da:32:0f:df:ef:14:64:e2:4c: f0:43:72:da:71:af:40:f2:99:e4:24:3f:43:b8:b2:b2:c7:ca: 34:f8:fc:33:07:a3:02:fb:07:8d:38:7b:a9:04:63:8a:09:12: a5:9f:c1:a6:51:a9:80:ca:95:8a:21:51:bb:bc:dc:a8:80:6a: ab:96:29:f5:d6:76:d7:2b:37:40:c1:37:a8:04:96:71:03:59: ea:4f:4a:93:a0:f7:fb:a6:ff:01:87:ed:cd:d7:a5:e6:3a:4e: 02:9b:cb:a6:80:a6:96:ff:48:88:2b:d0:bc:c9:17:c5:59:68: 53:c4:0c:cc:1e:1a:0f:cd:0e:be:33:4d:ce:97:e4:82:7d:6b: f9:79:26:95:5f:8a:29:7c:3f:81:e7:0f:07:30:d2:65:cf:db: c8:d6:2e:a0:26:f3:ec:64:68:90:06:fe:87:38:22:53:6e:8f: 47:23:0c:f0:15:63:0e:c4:7d:d4:65:85:2f:22:89:b3:da:76: 74:d1:af:24:2f:cb:f3:be:26:e9:57:da:09:e9:6e:b2:1f:fb: e4:34:ee:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVwm+szaD++R6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ZjNmYTktOGI1Mi00ZjE3LThhY2EtNjc0MGRlZDcz NjgzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGZhMTRiYjgtNGZkNy00NmQxLWE4MGQtNGQxYjkxZGI1OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyrhDRNYM2hQ9EF+PLm0OXPEYYwZoGlCjif/ c0aZJLXsNCi88pu9vMWG3Zigt7OYsovwM0uDXAoExw4VwwRJBtyP3XTVlFDYsap4 o1GORCGtTvUpXR0gJ2r+DkkqoG6+hgNsXC/dDN7v+V+tLHyAViUXZw1zaHHJzTOb rUI6GPDq47XpLjcVZP4p81e9/n2aJWQ4JPm/oj8U3jgwd1gHaAspBi8pLSPxtDVq ua/hu5KXlFsqlt3vTgNJ9byOCHWjdTQlMYUjjrKQkRspC0vzMvqhaiGVzztqwqER OiFH9+BcyoXCC1fC0J9TNjcnPSw3S1xXRFN+EgWQZkXPmow5EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELW8JPgVbiYdEz3ICGaL2y8eX/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVm M2ZhOS04YjUyLTRmMTctOGFjYS02NzQwZGVkNzM2ODMvMGIzMzE3ODUtMjJlOS0z M2M0LTg4ZTYtZTFhYzM2YTE0Yzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDI1ZjNmYTktOGI1Mi00ZjE3LThh Y2EtNjc0MGRlZDczNjgzL2QyNWYzZmE5LThiNTItNGYxNy04YWNhLTY3NDBkZWQ3 MzY4My5jcmwwHwYDVR0jBBgwFoAUjrWEmnBOEbBGa62d01t7/BHwsTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjVmM2ZhOS04YjUyLTRmMTctOGFjYS02NzQw ZGVkNzM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKZtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJirRdiZ2+TdsSQ0XlLtsM10gDkHniyO5sqnaimuvIg++JAM2DIpXk1 3eLyfNoyD9/vFGTiTPBDctpxr0DymeQkP0O4srLHyjT4/DMHowL7B404e6kEY4oJ EqWfwaZRqYDKlYohUbu83KiAaquWKfXWdtcrN0DBN6gElnEDWepPSpOg9/um/wGH 7c3XpeY6TgKby6aAppb/SIgr0LzJF8VZaFPEDMweGg/NDr4zTc6X5IJ9a/l5JpVf iil8P4HnDwcw0mXP28jWLqAm8+xkaJAG/oc4IlNuj0cjDPAVYw7EfdRlhS8iibPa dnTRryQvy/O+JulX2gnpbrIf++Q07uM= -----END CERTIFICATE-----Generated at Sun Sep 27 08:46:07 2026 by rpki-client