$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/db0aea73-2726-3172-98d5-6aa0f2b18513.roa File: db0aea73-2726-3172-98d5-6aa0f2b18513.roa (raw, json) Hash identifier: hIq2QfUh0l3FMwEZZJ3ngNEjDNpy5bV5AcmwKV9qhlQ= Subject key identifier: 7F:D5:FC:23:A0:31:A1:D9:E0:CD:8D:14:AB:57:36:69:92:4E:FD:5E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F30526504615897EFB111BE80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/db0aea73-2726-3172-98d5-6aa0f2b18513.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 54858 IP address blocks: 104.152.104.0/22 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:65:04:61:58:97:ef:b1:11:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=41867714-b159-4c21-bf0b-fa84cba2ac50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d3:bf:6b:e6:11:ad:ee:e9:6e:c7:f8:61:a3: c3:91:40:c0:eb:36:6e:1d:5f:7f:56:fa:33:0d:22: d7:ea:0a:6c:60:04:cc:cb:b7:a4:7b:62:35:ac:34: 0e:c0:23:c0:e0:f7:60:48:f2:7d:8a:bf:9c:39:99: 32:22:8c:3f:50:5f:30:06:a4:ee:b0:1d:10:ba:fb: 0e:7f:71:73:32:f2:1a:fa:f3:0c:2f:66:d0:b9:55: 06:3e:c8:06:51:42:62:2f:4c:71:58:93:04:1c:e6: 5d:ff:7a:3f:3b:38:11:17:95:eb:28:90:d9:62:9d: 3b:82:6a:e3:88:d4:71:7a:32:c2:b2:b9:11:f5:9b: 0a:63:31:03:74:2d:20:c2:f7:fb:3e:1e:cc:24:00: f7:52:67:03:92:d3:53:2a:e2:47:d2:7f:98:db:39: ab:2e:14:d8:92:70:2d:9a:87:e2:a9:cc:8c:18:f0: f6:1b:0b:d1:48:e3:54:a5:91:d7:51:54:8d:7f:4d: 3c:f0:43:5a:48:9f:1e:ef:4e:01:3c:2a:3e:6e:21: eb:cd:58:9d:df:17:04:6c:80:4a:ed:a7:06:65:c4: 02:04:f9:14:a5:2a:c6:dc:54:82:a4:c3:43:94:14: 36:8d:78:a7:75:7a:54:8a:de:29:2d:29:3b:ea:24: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D5:FC:23:A0:31:A1:D9:E0:CD:8D:14:AB:57:36:69:92:4E:FD:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/db0aea73-2726-3172-98d5-6aa0f2b18513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 104.152.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:78:75:3b:fe:08:00:52:b2:fe:1b:19:b4:65:6b:66:cc:a6: 8c:a9:78:b0:48:f4:10:2e:09:7d:7a:b5:9c:cb:79:87:69:81: 21:94:d8:4b:fa:de:38:2c:67:94:9f:fe:9b:58:52:f2:fc:b7: d5:a7:ad:f1:4c:bf:70:20:f1:82:91:6e:38:e0:69:16:da:11: 34:88:82:9a:b6:36:31:eb:ba:d4:38:d4:48:2f:a5:65:06:32: 55:54:3a:b7:94:93:59:82:c1:01:dc:ef:25:e1:c4:3b:78:ae: a8:49:71:ef:ac:41:4b:e2:33:31:99:12:0f:35:ae:7d:01:73: e8:16:90:4e:9e:db:42:61:e9:76:29:e6:d4:15:41:6f:9b:d4: 53:7f:ad:a2:78:62:0e:aa:a8:eb:8f:ea:2c:f9:0d:31:eb:30: 33:42:ed:d8:41:28:38:25:33:3d:84:8e:19:b7:8c:8e:19:0b: de:fa:46:5b:e9:96:c5:50:55:73:a8:b5:f9:05:d8:7b:18:f2: aa:df:8d:3b:ba:30:dc:8f:61:f6:18:68:1b:02:54:e8:da:b8: f8:58:56:3d:37:c2:94:35:f3:50:89:dd:4f:b6:18:63:1b:fb: ad:22:85:11:b1:88:38:a8:19:ff:38:5e:1e:7a:be:31:c2:d7: 73:6b:4c:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmUEYViX77ERvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NDE4Njc3MTQtYjE1OS00YzIxLWJmMGItZmE4NGNiYTJhYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tO/a+YRre7pbsf4YaPDkUDA6zZuHV9/Vvoz DSLX6gpsYATMy7eke2I1rDQOwCPA4PdgSPJ9ir+cOZkyIow/UF8wBqTusB0QuvsO f3FzMvIa+vMML2bQuVUGPsgGUUJiL0xxWJMEHOZd/3o/OzgRF5XrKJDZYp07gmrj iNRxejLCsrkR9ZsKYzEDdC0gwvf7Ph7MJAD3UmcDktNTKuJH0n+Y2zmrLhTYknAt mofiqcyMGPD2GwvRSONUpZHXUVSNf0088ENaSJ8e704BPCo+biHrzVid3xcEbIBK 7acGZcQCBPkUpSrG3FSCpMNDlBQ2jXindXpUit4pLSk76iQLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/V/COgMaHZ4M2NFKtXNmmSTv1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGIwYWVhNzMtMjcyNi0z MTcyLTk4ZDUtNmFhMGYyYjE4NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC14dTv+CABSsv4bGbRla2bMpoypeLBI9BAuCX16tZzLeYdpgSGU2Ev6 3jgsZ5Sf/ptYUvL8t9WnrfFMv3Ag8YKRbjjgaRbaETSIgpq2NjHrutQ41EgvpWUG MlVUOreUk1mCwQHc7yXhxDt4rqhJce+sQUviMzGZEg81rn0Bc+gWkE6e20Jh6XYp 5tQVQW+b1FN/raJ4Yg6qqOuP6iz5DTHrMDNC7dhBKDglMz2Ejhm3jI4ZC976Rlvp lsVQVXOotfkF2HsY8qrfjTu6MNyPYfYYaBsCVOjauPhYVj03wpQ181CJ3U+2GGMb +60ihRGxiDioGf84Xh56vjHC13NrTMo= -----END CERTIFICATE-----Generated at Tue Sep 22 19:42:15 2026 by rpki-client