$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/664a68a3-3f19-3cd6-8b80-959dcdcec5cd.roa File: 664a68a3-3f19-3cd6-8b80-959dcdcec5cd.roa (raw, json) Hash identifier: wSrCc6E+dsIIBgWGAv8sJnCCcJrDujScz5uyPVCObdg= Subject key identifier: A9:23:7B:8D:AB:C1:8B:8A:A3:E0:EC:69:5E:10:7A:F3:E5:0C:C8:FF Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F1CC7BCF59999A7C071B16E80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/664a68a3-3f19-3cd6-8b80-959dcdcec5cd.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 62904 IP address blocks: 104.206.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:bc:f5:99:99:a7:c0:71:b1:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=5601e257-dc25-44fe-82b2-d2606a01b7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3c:b5:8a:b9:09:f1:fd:50:16:01:a3:8e:34: d7:32:05:fb:ea:02:75:6d:92:8e:09:92:8b:5b:42: 7a:3e:d5:ff:8f:7c:17:de:aa:cf:b8:96:f7:09:fc: 6c:64:39:14:31:50:8e:aa:0c:aa:bf:75:2d:12:55: 2e:15:86:4a:f1:3b:63:91:49:9c:f8:c3:35:5e:c7: 26:ce:67:02:a5:73:59:85:31:41:80:fb:46:37:25: c1:de:80:64:bd:33:8f:af:5a:b7:d2:bd:d9:4d:f7: 0a:6c:64:f4:b2:e5:7f:d6:31:10:a9:48:d4:08:58: a6:b9:c4:ea:6a:af:2d:07:fb:fc:0b:76:7a:86:ab: 35:11:62:23:f5:62:d1:b8:8f:cc:21:6d:77:e8:0b: 06:b2:b7:f0:5b:3f:e3:a2:55:12:97:ca:a8:24:24: 28:7b:32:3d:42:88:fa:d7:a3:25:c8:43:7f:25:04: c7:fe:89:d6:7a:5a:98:65:a7:cc:a0:07:af:db:6c: 6f:49:9a:d6:c4:27:aa:b3:d9:ce:ca:89:df:5b:c7: c7:f0:e4:75:cc:89:40:bf:f7:4f:04:f7:13:67:f1: 60:8f:05:03:15:fc:b5:3a:02:bc:6b:02:82:f8:3b: c5:74:b8:e7:df:1a:08:0f:ca:40:43:b8:0c:a6:5d: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:7B:8D:AB:C1:8B:8A:A3:E0:EC:69:5E:10:7A:F3:E5:0C:C8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/664a68a3-3f19-3cd6-8b80-959dcdcec5cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fc:f5:30:f6:b8:ef:d2:01:15:f9:23:ec:0b:85:9c:61:88: fa:38:8d:32:28:e9:b9:d7:6c:98:15:fa:6f:d9:cb:72:2b:ed: b2:a1:70:16:f4:2e:81:c9:33:32:97:11:04:49:ec:47:c0:57: bb:10:ac:84:a5:47:9f:8f:c3:79:28:a2:27:31:ad:48:aa:44: 16:dd:c7:66:b7:00:5f:1a:de:ce:22:21:96:af:4a:54:77:f5: 43:6d:0e:4d:87:d8:b4:18:1e:ad:ab:9d:2b:2b:b3:5c:55:8b: b8:9d:26:08:c4:13:8e:72:c9:9f:18:5a:5e:31:51:54:b4:16: 87:1d:53:0a:7a:be:d2:7e:af:e1:fb:eb:74:57:2c:36:6e:a3: 40:ac:81:3a:fa:33:bd:13:ce:7e:65:d9:77:c2:cb:9e:da:4c: c4:7e:3d:26:23:c6:4e:57:e9:eb:f0:67:d5:8b:cf:28:35:1e: 3a:02:75:38:7b:75:29:b3:64:51:c2:c5:07:4a:e8:04:39:3f: 07:c2:cf:86:72:10:2c:7e:d3:42:e4:fc:20:71:50:ba:59:3c: 95:f3:8e:fa:a0:0f:c2:f1:d4:9d:d8:12:8c:c3:e6:ce:c3:f4: dc:36:4a:4b:76:61:d0:98:fa:c1:e9:18:de:74:ae:4c:82:7c: 24:31:46:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx7z1mZmnwHGxboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NTYwMWUyNTctZGMyNS00NGZlLTgyYjItZDI2MDZhMDFiN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Dy1irkJ8f1QFgGjjjTXMgX76gJ1bZKOCZKL W0J6PtX/j3wX3qrPuJb3CfxsZDkUMVCOqgyqv3UtElUuFYZK8TtjkUmc+MM1Xscm zmcCpXNZhTFBgPtGNyXB3oBkvTOPr1q30r3ZTfcKbGT0suV/1jEQqUjUCFimucTq aq8tB/v8C3Z6hqs1EWIj9WLRuI/MIW136AsGsrfwWz/jolUSl8qoJCQoezI9Qoj6 16MlyEN/JQTH/onWelqYZafMoAev22xvSZrWxCeqs9nOyonfW8fH8OR1zIlAv/dP BPcTZ/FgjwUDFfy1OgK8awKC+DvFdLjn3xoID8pAQ7gMpl1NTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkje42rwYuKo+DsaV4QevPlDMj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNjY0YTY4YTMtM2YxOS0z Y2Q2LThiODAtOTU5ZGNkY2VjNWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaM7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX89TD2uO/SARX5I+wLhZxhiPo4jTIo6bnXbJgV+m/Zy3Ir7bKhcBb0 LoHJMzKXEQRJ7EfAV7sQrISlR5+Pw3kooicxrUiqRBbdx2a3AF8a3s4iIZavSlR3 9UNtDk2H2LQYHq2rnSsrs1xVi7idJgjEE45yyZ8YWl4xUVS0FocdUwp6vtJ+r+H7 63RXLDZuo0CsgTr6M70Tzn5l2XfCy57aTMR+PSYjxk5X6evwZ9WLzyg1HjoCdTh7 dSmzZFHCxQdK6AQ5PwfCz4ZyECx+00Lk/CBxULpZPJXzjvqgD8Lx1J3YEozD5s7D 9Nw2Skt2YdCY+sHpGN50rkyCfCQxRuQ= -----END CERTIFICATE-----Generated at Sun Sep 20 16:02:39 2026 by rpki-client