$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa File: 4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa (raw, json) Hash identifier: nqLxLZ8EAjj9Atbamrx7TXVleycTT6t6FQH3ZTTd9g0= Subject key identifier: E4:B5:9C:E9:B2:19:47:F4:B6:6F:DA:A3:C9:1C:67:B8:77:F4:47:8E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052652EA7B07F194E0EEAC0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 54858 IP address blocks: 104.220.0.0/16 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:65:2e:a7:b0:7f:19:4e:0e:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=989059d2-cd2b-42e3-8424-c44372aa967b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:00:be:ba:bb:18:4d:e2:8e:2e:b3:92:a4: 5c:81:4a:ac:b1:46:8b:3f:21:3d:ed:44:9e:ce:45: 3f:53:86:13:44:20:29:4d:a6:b3:f2:19:58:a3:d9: b8:07:8d:d5:c8:f9:4a:c3:6d:53:da:6e:45:50:f1: da:bc:cc:e9:21:96:da:62:cd:22:23:4b:3d:70:c7: 46:ab:af:36:0e:bf:39:5d:75:f1:39:0b:3d:df:42: af:f5:75:50:3d:53:ea:17:6f:33:07:6e:23:0d:0d: ea:06:6b:35:0d:93:42:b0:9e:fb:ed:b7:7a:c8:b8: 6d:fa:bc:b8:7f:b3:95:07:12:49:90:ad:0f:e1:1a: b9:43:1c:ad:ca:38:37:8c:30:15:9d:bb:4c:b5:3c: 3d:68:af:5b:07:a0:18:f5:39:6f:04:6c:60:a8:0c: 29:76:8c:e0:b9:b3:37:7f:e6:10:67:4d:e3:be:99: 12:e8:92:4f:86:0b:23:27:c6:20:88:59:52:4f:b4: 09:e9:55:d4:c1:a7:a3:18:b2:5c:d6:97:d1:35:56: 36:75:f4:50:6a:04:ae:21:44:41:02:bf:5f:ee:39: 62:35:56:3a:af:08:9d:48:e8:bb:4e:26:8c:ba:88: fc:42:64:a6:e1:87:e0:48:02:c2:7d:79:45:b2:95: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B5:9C:E9:B2:19:47:F4:B6:6F:DA:A3:C9:1C:67:B8:77:F4:47:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4bd70481-a99e-3e31-a2d0-135a2da0b7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b5:dc:6e:99:b5:b7:02:2c:7a:31:96:52:ab:f3:58:bb:e7: 59:2b:47:a5:cf:f0:36:c0:18:68:fb:d9:80:c0:fd:73:99:13: 65:5d:96:17:27:d1:e5:74:6b:ac:2c:b7:05:17:da:36:3b:0e: 7b:2f:3f:ca:19:5a:56:77:3e:b6:24:f9:1f:7b:fe:59:d3:95: 02:5d:0e:19:9e:54:f4:dd:2f:a9:d0:1c:34:67:9b:2b:a7:21: cf:fa:e3:b8:31:e9:4f:f2:85:b7:e5:72:ae:9b:9e:02:6d:d5: 7e:d4:85:ac:f3:c7:50:ed:d4:40:81:81:1c:54:f8:7f:ab:c6: db:92:5a:ed:b0:2f:3c:4a:9a:7e:41:3c:58:06:63:75:9b:af: e9:26:8f:0e:17:dd:60:cc:f9:8f:3c:2d:c6:fc:5e:b1:9e:d6: 40:80:b5:c9:b1:e7:e7:f3:4d:1a:15:56:30:c2:34:0e:51:c0: 82:97:32:c5:5d:79:62:15:fb:5b:5e:fc:49:2c:bf:02:28:c0: 62:f9:3b:3c:64:f2:a3:38:aa:5d:bd:76:fe:7d:76:d7:f2:72: 71:14:48:72:c4:71:25:17:78:83:55:47:f7:a7:48:ca:75:19: 04:94:7a:77:be:f9:8f:26:3e:42:6e:69:88:c0:f8:d8:ed:d4: 34:ad:53:bb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8wUmUup7B/GU4O6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk OTg5MDU5ZDItY2QyYi00MmUzLTg0MjQtYzQ0MzcyYWE5NjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr60Avrq7GE3iji6zkqRcgUqssUaLPyE97USe zkU/U4YTRCApTaaz8hlYo9m4B43VyPlKw21T2m5FUPHavMzpIZbaYs0iI0s9cMdG q682Dr85XXXxOQs930Kv9XVQPVPqF28zB24jDQ3qBms1DZNCsJ777bd6yLht+ry4 f7OVBxJJkK0P4Rq5Qxytyjg3jDAVnbtMtTw9aK9bB6AY9TlvBGxgqAwpdozgubM3 f+YQZ03jvpkS6JJPhgsjJ8YgiFlST7QJ6VXUwaejGLJc1pfRNVY2dfRQagSuIURB Ar9f7jliNVY6rwidSOi7TiaMuoj8QmSm4YfgSALCfXlFspVCUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOS1nOmyGUf0tm/ao8kcZ7h39EeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGJkNzA0ODEtYTk5ZS0z ZTMxLWEyZDAtMTM1YTJkYTBiN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaNwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHrXcbpm1twIsejGWUqvzWLvnWStHpc/wNsAYaPvZgMD9c5kTZV2WFyfR 5XRrrCy3BRfaNjsOey8/yhlaVnc+tiT5H3v+WdOVAl0OGZ5U9N0vqdAcNGebK6ch z/rjuDHpT/KFt+VyrpueAm3VftSFrPPHUO3UQIGBHFT4f6vG25Ja7bAvPEqafkE8 WAZjdZuv6SaPDhfdYMz5jzwtxvxesZ7WQIC1ybHn5/NNGhVWMMI0DlHAgpcyxV15 YhX7W178SSy/AijAYvk7PGTyoziqXb12/n121/JycRRIcsRxJRd4g1VH96dIynUZ BJR6d775jyY+Qm5piMD42O3UNK1Tuw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:09:44 2026 by rpki-client