$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/db8ebdea-1fcd-3b48-ac17-c04707fbc563.roa File: db8ebdea-1fcd-3b48-ac17-c04707fbc563.roa (raw, json) Hash identifier: 1sCpjR5DZ5aTA7hNLtoVcIPz32BM8+cjOpK1Qo09+3o= Subject key identifier: 62:5C:E7:47:63:C9:A9:7A:28:E2:DA:56:3A:55:5B:AF:2B:03:92:8E Certificate issuer: /CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Certificate serial: 010D0C9F4328584F58D35499C816C20B69E19A58 Authority key identifier: 71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/db8ebdea-1fcd-3b48-ac17-c04707fbc563.roa Signing time: Wed 30 Sep 2026 13:12:23 +0000 ROA not before: Wed 30 Sep 2026 13:12:23 +0000 ROA not after: Tue 29 Dec 2026 14:12:23 +0000 asID: 30406 IP address blocks: 104.153.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:d3:54:99:c8:16:c2:0b:69:e1:9a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Validity Not Before: Sep 30 13:12:23 2026 GMT Not After : Dec 29 14:12:23 2026 GMT Subject: CN=d8bfd2d4-fc7c-40e2-88ae-cd1dfacec3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d1:c1:09:03:6e:35:9e:77:7d:0b:65:dd:4f: 19:a5:6d:f8:93:cc:55:7f:3f:0a:18:e4:f7:fe:ab: 03:43:6a:a3:c5:07:8a:a0:48:f7:f6:32:b8:19:d7: ce:76:43:79:16:9b:dd:64:a4:6c:45:c8:e7:8a:63: 2c:57:cc:bc:ce:b2:b5:dc:c5:e3:d0:a2:77:40:f8: 53:40:f1:9b:95:e2:bb:5a:10:0b:7c:91:b3:67:96: 77:00:a4:95:8d:28:0a:fa:2a:2a:a0:ff:a0:ec:94: fa:27:b8:ab:f1:82:83:3a:33:09:ad:5e:3f:2d:38: c0:1b:6d:46:c9:be:2b:98:38:de:3e:f7:52:b6:32: d1:92:04:09:be:1e:05:bb:67:9a:aa:01:07:90:fb: 8a:14:c6:4b:71:4b:a2:04:53:fb:32:48:3e:9b:a2: 0d:2d:08:33:52:db:15:80:53:75:c5:37:23:d7:a0: f8:b2:5f:1c:ad:77:92:34:62:dd:16:21:f3:17:75: af:49:1e:13:ca:af:a4:85:33:22:19:bb:ac:13:eb: 07:47:3a:93:87:0a:fa:60:58:ea:99:ea:ed:11:d3: df:45:a5:4b:91:b9:f8:88:dd:dd:82:c5:30:04:7b: 69:49:bf:3e:a2:22:63:d4:46:ae:cc:5c:61:c2:20: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5C:E7:47:63:C9:A9:7A:28:E2:DA:56:3A:55:5B:AF:2B:03:92:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/db8ebdea-1fcd-3b48-ac17-c04707fbc563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl X509v3 Authority Key Identifier: keyid:71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer sbgp-ipAddrBlock: critical IPv4: 104.153.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0a:3d:1c:d9:fe:c3:eb:2e:07:ef:5e:c0:26:26:3e:a8:cb: 05:2b:7b:61:45:a7:ea:dd:1b:74:73:0d:2d:a1:e7:c5:dc:c0: 7c:8e:98:0b:02:47:f5:ae:45:89:db:2a:b0:45:2b:1b:a6:fe: 9c:c3:68:c9:88:9f:a4:48:56:7e:c2:6c:96:17:81:74:01:d5: 4b:ac:8c:14:4e:26:07:a7:71:f3:c8:9a:b1:1f:fa:32:e5:f4: 1a:14:2c:04:eb:3b:20:ae:fc:a8:60:d8:94:60:a0:00:82:c6: 91:9b:3b:8a:0f:63:2b:3c:47:f7:03:9a:75:8c:07:ab:b5:4b: db:98:91:71:f0:fc:88:a5:77:fb:a0:50:eb:35:04:a3:73:1e: 50:bd:8f:ea:8d:4b:6b:d5:d2:49:48:22:31:32:14:df:22:58: 3e:d8:fe:39:c2:98:94:a3:ad:12:a3:4e:8f:03:40:d5:9f:71: 1e:2b:3f:3e:a2:58:22:65:cd:f4:e9:6d:5d:e2:17:3d:88:b3: 05:8f:38:30:c0:f4:c6:39:66:30:14:53:9f:65:21:f6:74:06: 9d:db:c8:00:4d:0a:ab:fc:f7:4f:bc:4f:ed:6e:bf:a5:ff:bd: 36:e6:9f:08:a2:dc:7c:fd:9e:3b:7b:9d:07:b1:13:de:91:a5: 74:08:05:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Y01SZyBbCC2nhmlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRkMDNmNzAtOGUwYy00YWI0LWFlYTAtNGYzMjc2NWEy ODZiMB4XDTI2MDkzMDEzMTIyM1oXDTI2MTIyOTE0MTIyM1owLzEtMCsGA1UEAxMk ZDhiZmQyZDQtZmM3Yy00MGUyLTg4YWUtY2QxZGZhY2VjM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNHBCQNuNZ53fQtl3U8ZpW34k8xVfz8KGOT3 /qsDQ2qjxQeKoEj39jK4GdfOdkN5FpvdZKRsRcjnimMsV8y8zrK13MXj0KJ3QPhT QPGbleK7WhALfJGzZ5Z3AKSVjSgK+ioqoP+g7JT6J7ir8YKDOjMJrV4/LTjAG21G yb4rmDjePvdStjLRkgQJvh4Fu2eaqgEHkPuKFMZLcUuiBFP7Mkg+m6INLQgzUtsV gFN1xTcj16D4sl8crXeSNGLdFiHzF3WvSR4Tyq+khTMiGbusE+sHRzqThwr6YFjq mertEdPfRaVLkbn4iN3dgsUwBHtpSb8+oiJj1EauzFxhwiBdoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJc50djyal6KOLaVjpVW68rA5KOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NGQw M2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMyNzY1YTI4NmIvZGI4ZWJkZWEtMWZjZC0z YjQ4LWFjMTctYzA0NzA3ZmJjNTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODRkMDNmNzAtOGUwYy00YWI0LWFl YTAtNGYzMjc2NWEyODZiLzg0ZDAzZjcwLThlMGMtNGFiNC1hZWEwLTRmMzI3NjVh Mjg2Yi5jcmwwHwYDVR0jBBgwFoAUcTjDrLuva/9yFIKovR6L6P0aFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NGQwM2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMy NzY1YTI4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMKPRzZ/sPrLgfvXsAmJj6oywUre2FFp+rdG3RzDS2h58XcwHyOmAsC R/WuRYnbKrBFKxum/pzDaMmIn6RIVn7CbJYXgXQB1UusjBROJgencfPImrEf+jLl 9BoULATrOyCu/Khg2JRgoACCxpGbO4oPYys8R/cDmnWMB6u1S9uYkXHw/Iild/ug UOs1BKNzHlC9j+qNS2vV0klIIjEyFN8iWD7Y/jnCmJSjrRKjTo8DQNWfcR4rPz6i WCJlzfTpbV3iFz2IswWPODDA9MY5ZjAUU59lIfZ0Bp3byABNCqv890+8T+1uv6X/ vTbmnwii3Hz9njt7nQexE96RpXQIBco= -----END CERTIFICATE-----Generated at Tue Oct 13 04:06:42 2026 by rpki-client