$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/c85a1cfa-772f-3935-89df-7562541d252d.roa File: c85a1cfa-772f-3935-89df-7562541d252d.roa (raw, json) Hash identifier: qYoXMc+MSiCle1i7Tk05+/EWRAqVarGqCUPjyj04j+Y= Subject key identifier: 07:BD:B5:33:7D:CC:AF:3E:4B:40:EF:FC:EB:C5:64:A7:07:60:46:7C Certificate issuer: /CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Certificate serial: 010D0C9F4328584F596B24B67EBCED082BA95000 Authority key identifier: 71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/c85a1cfa-772f-3935-89df-7562541d252d.roa Signing time: Wed 30 Sep 2026 18:18:16 +0000 ROA not before: Wed 30 Sep 2026 18:18:16 +0000 ROA not after: Tue 29 Dec 2026 19:18:16 +0000 asID: 30406 IP address blocks: 104.153.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:6b:24:b6:7e:bc:ed:08:2b:a9:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Validity Not Before: Sep 30 18:18:16 2026 GMT Not After : Dec 29 19:18:16 2026 GMT Subject: CN=91d11d22-9134-4a5c-bc1d-44a9fabc8115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:cd:08:54:72:1b:0f:88:37:0e:2f:5c:2d: 07:5e:ad:73:02:1a:71:f7:ec:1e:7d:b5:17:77:a6: 77:be:1c:a6:ca:34:99:e0:35:db:f7:5f:d6:7e:71: 60:4f:c0:18:88:05:1b:c9:4a:b6:fd:75:e2:bf:e1: aa:d1:d9:f0:c7:05:37:83:14:f1:37:70:83:d2:17: a6:b9:6d:18:f9:65:f2:cd:f3:84:7a:89:9d:b5:81: b9:22:3d:7e:8c:ad:a7:1a:da:cb:26:87:67:1c:19: c6:f6:ae:76:17:f0:a3:ef:73:29:58:d9:eb:0c:85: 25:c4:92:f7:57:90:92:38:09:55:08:76:50:8b:37: 1e:77:08:5b:c4:e4:e8:81:99:1f:9e:91:7e:83:92: 50:8c:f4:0a:25:80:c2:c6:aa:fc:58:a9:a0:ff:06: 57:73:29:7b:a1:3c:88:aa:a2:0d:32:be:be:69:8c: d3:0d:b9:95:a8:d5:90:7a:84:d1:ab:74:62:66:af: 1c:22:c8:8f:6b:9a:b9:8f:9d:b6:80:23:92:a4:2a: 7b:e2:64:e8:3d:e4:3f:65:13:3e:33:6b:5d:07:93: 2c:04:c6:52:47:7c:88:fa:60:24:df:d6:d0:38:b2: 91:9f:e1:61:1c:96:d0:b0:7f:11:33:ae:bf:ad:a4: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:B5:33:7D:CC:AF:3E:4B:40:EF:FC:EB:C5:64:A7:07:60:46:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/c85a1cfa-772f-3935-89df-7562541d252d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl X509v3 Authority Key Identifier: keyid:71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer sbgp-ipAddrBlock: critical IPv4: 104.153.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c4:d9:1b:7d:de:02:01:03:a1:37:04:80:99:8f:e4:23:58: 48:28:c6:28:1a:8a:ef:57:d8:ca:51:ce:36:b4:0e:e2:b4:e9: 04:00:be:6d:db:34:2c:83:7e:45:93:a8:72:e2:a1:61:4c:39: 50:1a:82:ab:c4:4c:18:11:b3:a9:35:1a:78:0b:09:b5:37:b3: 44:08:b8:ee:64:f7:c4:d8:32:45:04:b7:bd:35:26:3b:7a:55: b3:28:7d:e7:22:9e:9f:c3:24:f9:f8:72:e9:1c:cb:74:fc:02: aa:3a:f3:f3:93:f3:06:86:b2:4a:e8:d6:54:f7:9f:a1:30:1a: 66:26:89:26:c1:b8:c0:d9:e0:7e:1b:f7:9c:2d:1f:94:52:1a: a1:ef:13:bd:e6:ae:2e:a0:1b:9e:2d:96:93:8b:2b:b5:6c:71: fa:52:c2:cd:20:25:ea:01:38:cc:a3:a3:31:93:fa:d8:9c:50: fb:a4:e2:a1:f9:69:e1:94:f1:b6:e8:fa:61:91:b9:bc:22:90: 6a:ce:04:f6:b7:f8:da:6d:1c:29:b7:bd:cb:07:ec:e8:29:f3: 0c:c2:74:ce:ff:d4:fb:53:2a:f6:aa:6a:d3:2f:6e:4d:3d:1c: 0e:1c:e4:c9:7f:a8:d1:d2:44:28:64:76:9e:17:33:c2:0d:40: 5c:af:9f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZayS2frztCCupUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRkMDNmNzAtOGUwYy00YWI0LWFlYTAtNGYzMjc2NWEy ODZiMB4XDTI2MDkzMDE4MTgxNloXDTI2MTIyOTE5MTgxNlowLzEtMCsGA1UEAxMk OTFkMTFkMjItOTEzNC00YTVjLWJjMWQtNDRhOWZhYmM4MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimvNCFRyGw+INw4vXC0HXq1zAhpx9+wefbUX d6Z3vhymyjSZ4DXb91/WfnFgT8AYiAUbyUq2/XXiv+Gq0dnwxwU3gxTxN3CD0hem uW0Y+WXyzfOEeomdtYG5Ij1+jK2nGtrLJodnHBnG9q52F/Cj73MpWNnrDIUlxJL3 V5CSOAlVCHZQizcedwhbxOTogZkfnpF+g5JQjPQKJYDCxqr8WKmg/wZXcyl7oTyI qqINMr6+aYzTDbmVqNWQeoTRq3RiZq8cIsiPa5q5j522gCOSpCp74mToPeQ/ZRM+ M2tdB5MsBMZSR3yI+mAk39bQOLKRn+FhHJbQsH8RM66/raRX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe9tTN9zK8+S0Dv/OvFZKcHYEZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NGQw M2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMyNzY1YTI4NmIvYzg1YTFjZmEtNzcyZi0z OTM1LTg5ZGYtNzU2MjU0MWQyNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODRkMDNmNzAtOGUwYy00YWI0LWFl YTAtNGYzMjc2NWEyODZiLzg0ZDAzZjcwLThlMGMtNGFiNC1hZWEwLTRmMzI3NjVh Mjg2Yi5jcmwwHwYDVR0jBBgwFoAUcTjDrLuva/9yFIKovR6L6P0aFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NGQwM2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMy NzY1YTI4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaJk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXE2Rt93gIBA6E3BICZj+QjWEgoxigaiu9X2MpRzja0DuK06QQAvm3b NCyDfkWTqHLioWFMOVAagqvETBgRs6k1GngLCbU3s0QIuO5k98TYMkUEt701Jjt6 VbMofecinp/DJPn4cukcy3T8Aqo68/OT8waGskro1lT3n6EwGmYmiSbBuMDZ4H4b 95wtH5RSGqHvE73mri6gG54tlpOLK7VscfpSws0gJeoBOMyjozGT+ticUPuk4qH5 aeGU8bbo+mGRubwikGrOBPa3+NptHCm3vcsH7Ogp8wzCdM7/1PtTKvaqatMvbk09 HA4c5Ml/qNHSRChkdp4XM8INQFyvn78= -----END CERTIFICATE-----Generated at Tue Oct 13 04:06:46 2026 by rpki-client