$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa File: f1b53950-8f95-3608-896e-d18a018c60b7.roa (raw, json) Hash identifier: Y1agSMuRmeEBFDEhGcOvPr6un8U2IuxlI43xLrhlva8= Subject key identifier: DF:26:D1:2F:AF:99:3E:F6:4F:94:9A:78:BA:0A:1F:38:53:DC:96:53 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584F119D19CF83C15422EE53B638 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 401241 IP address blocks: 104.238.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:19:cf:83:c1:54:22:ee:53:b6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c7cf0aa0-255b-4487-a7df-5429db54d4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:0d:29:2a:4b:ad:de:e2:9d:bc:6a:16:bc: 97:ab:f8:cd:12:35:d4:23:3b:d8:0c:a9:a9:61:97: 62:4e:89:f4:f0:ac:8b:13:8c:ea:3d:ce:eb:53:18: 91:a5:62:8f:a1:49:91:39:66:38:12:4b:f7:a4:37: d3:b9:e8:87:a3:fe:06:9a:1c:15:dc:28:c3:09:bf: f7:53:85:4a:44:ba:6d:61:75:e4:45:d1:1a:69:42: ab:b6:47:d8:37:bc:07:2e:5f:ac:79:49:1c:d9:25: 7d:7a:c4:52:ff:ae:8a:4b:c9:bd:06:b5:b1:cd:24: 98:b4:f2:24:b3:7b:2c:b9:28:5f:b4:28:b8:ab:1b: 94:05:bc:22:f5:4b:ae:fc:8e:44:af:92:cb:c8:b1: 3e:df:bd:9b:a4:3e:0a:84:54:00:fe:69:be:97:ef: 53:b4:09:37:08:fd:8b:55:25:a3:e8:3f:ce:b5:60: 24:78:f2:74:ca:2f:0b:9f:30:37:36:cc:0a:22:93: 75:cf:6c:6d:c1:e3:16:61:45:d1:70:c4:ac:e8:ff: f2:a3:17:0f:98:23:0d:ef:7d:63:44:db:88:4e:e7: 1e:24:87:73:57:8e:6c:a5:8d:31:78:e5:ec:5b:fb: bf:15:32:10:ae:81:94:64:be:96:45:28:76:f1:24: 39:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:D1:2F:AF:99:3E:F6:4F:94:9A:78:BA:0A:1F:38:53:DC:96:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/f1b53950-8f95-3608-896e-d18a018c60b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 104.238.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:83:c3:a4:21:4b:bc:f2:85:df:8a:98:81:b8:71:96:fe:4e: 1b:1b:ba:bb:2d:25:69:b8:ac:6a:4d:71:f8:c8:96:9c:71:53: 60:b9:fb:3f:09:e6:a5:7f:0e:f8:20:4f:d0:6a:0d:af:7e:28: 9e:b7:f6:08:84:b4:2c:28:e7:44:e9:05:ab:29:ec:33:b7:3d: 3c:76:c4:12:b9:a3:b0:a1:d8:60:ac:1f:a1:74:53:95:da:c7: d5:4a:5d:a1:90:d9:80:20:20:15:27:f0:d8:32:ea:a3:5d:de: cf:f0:d9:93:80:e2:e6:eb:44:9f:c1:a6:5e:5b:4f:cf:09:8e: 76:68:25:dc:23:e7:b5:f2:5c:de:b7:ae:b3:56:e1:6a:37:6e: fd:1c:66:09:1b:2e:e3:dc:30:5c:c1:a9:fc:28:45:d4:df:81: 75:cc:28:3d:c4:18:9f:23:4f:01:70:2e:3f:1b:ba:d0:28:f4: 0a:3d:ea:37:80:8a:3b:08:5b:b1:54:a6:15:fe:25:b2:da:24: 62:fa:54:35:bd:95:0c:e9:57:a5:67:f0:01:e1:7a:92:00:33: 91:f5:5f:ae:d9:1d:0f:c5:92:31:a0:ce:b7:ef:9b:08:e0:41: cb:0b:ec:27:c8:b5:79:8c:00:a2:95:3e:2d:04:ca:e3:f8:22: 36:fe:5b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRnPg8FUIu5TtjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzdjZjBhYTAtMjU1Yi00NDg3LWE3ZGYtNTQyOWRiNTRkNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcQNKSpLrd7inbxqFryXq/jNEjXUIzvYDKmp YZdiTon08KyLE4zqPc7rUxiRpWKPoUmROWY4Ekv3pDfTueiHo/4GmhwV3CjDCb/3 U4VKRLptYXXkRdEaaUKrtkfYN7wHLl+seUkc2SV9esRS/66KS8m9BrWxzSSYtPIk s3ssuShftCi4qxuUBbwi9Uuu/I5Er5LLyLE+372bpD4KhFQA/mm+l+9TtAk3CP2L VSWj6D/OtWAkePJ0yi8LnzA3NswKIpN1z2xtweMWYUXRcMSs6P/yoxcPmCMN731j RNuITuceJIdzV45spY0xeOXsW/u/FTIQroGUZL6WRSh28SQ57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8m0S+vmT72T5SaeLoKHzhT3JZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZjFiNTM5NTAtOGY5NS0z NjA4LTg5NmUtZDE4YTAxOGM2MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSDw6QhS7zyhd+KmIG4cZb+ThsburstJWm4rGpNcfjIlpxxU2C5+z8J 5qV/DvggT9BqDa9+KJ639giEtCwo50TpBasp7DO3PTx2xBK5o7Ch2GCsH6F0U5Xa x9VKXaGQ2YAgIBUn8Ngy6qNd3s/w2ZOA4ubrRJ/Bpl5bT88JjnZoJdwj57XyXN63 rrNW4Wo3bv0cZgkbLuPcMFzBqfwoRdTfgXXMKD3EGJ8jTwFwLj8butAo9Ao96jeA ijsIW7FUphX+JbLaJGL6VDW9lQzpV6Vn8AHhepIAM5H1X67ZHQ/FkjGgzrfvmwjg QcsL7CfItXmMAKKVPi0EyuP4Ijb+WyQ= -----END CERTIFICATE-----Generated at Tue Oct 6 19:43:08 2026 by rpki-client