$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa File: 2bc43a93-0030-3c39-8b64-3f0f629703a2.roa (raw, json) Hash identifier: 4zPdThqrFlI56TwwknHd2ULIwTCfG04Fn0eaCAKTxDc= Subject key identifier: EC:40:80:FA:8D:2E:9D:41:77:BD:07:60:F1:11:A4:F2:23:AA:B3:19 Certificate issuer: /CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Certificate serial: 010D0C9F4328584F13023568E33649530EFCD500 Authority key identifier: 5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 397942 IP address blocks: 104.171.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:35:68:e3:36:49:53:0e:fc:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85ff82e4-cd37-45c6-b714-ab0a04927964 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=32e21ae7-e0e5-44bf-9585-66b474e9fe2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:bf:e8:9a:28:8e:ee:9d:17:92:cd:86:e4: b7:18:3d:a1:4c:61:f9:a1:db:48:d1:fa:1a:62:0c: f8:41:cf:cf:2b:77:09:b4:63:ce:50:c7:77:a7:11: 46:7e:e5:dc:da:0b:86:a5:f8:5e:b2:b1:ef:d4:46: 15:47:9b:16:8a:9f:e0:9c:8a:c9:e9:1b:3d:d1:75: c5:05:01:e7:1c:e1:0f:e3:56:92:db:41:37:36:9c: 38:21:b4:c6:e2:65:e1:49:15:92:bd:fd:89:c0:e7: 0a:e0:6f:23:22:b8:d6:e4:12:09:76:8f:32:33:14: e5:73:dc:8f:1d:a5:e8:64:d9:5c:f3:ad:50:db:36: 78:bc:21:0c:dc:9d:83:17:da:39:2d:7a:38:25:8f: c5:cc:6e:0a:1a:6c:cc:e5:8f:1d:6a:2c:35:f1:10: ea:85:54:81:70:87:74:89:11:79:57:67:b3:0e:e3: 53:c5:ab:5f:5e:52:ae:c0:5d:0b:bd:0e:cd:e7:e9: da:85:67:4e:a3:40:6e:af:46:8e:f0:ad:f5:b6:b8: 9a:be:59:0b:e8:04:0d:36:07:3d:a1:2b:1a:7e:f2: 6a:c9:8c:ea:c5:ad:30:6c:83:ae:9c:92:a2:5f:95: f5:84:cc:a5:9a:e5:75:5c:7b:bf:28:2b:c6:7a:6b: 10:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:40:80:FA:8D:2E:9D:41:77:BD:07:60:F1:11:A4:F2:23:AA:B3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/2bc43a93-0030-3c39-8b64-3f0f629703a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964/85ff82e4-cd37-45c6-b714-ab0a04927964.crl X509v3 Authority Key Identifier: keyid:5E:4B:BF:18:60:91:10:DF:CE:16:25:9B:8B:08:65:A9:1C:62:50:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85ff82e4-cd37-45c6-b714-ab0a04927964.cer sbgp-ipAddrBlock: critical IPv4: 104.171.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f2:59:a4:c6:19:c7:15:1b:39:01:dc:21:c5:c5:0d:08:99: 92:36:6a:5d:0d:7a:dd:1b:ba:cb:3b:d5:ec:54:a0:c6:60:e3: 3d:de:40:61:c2:c1:62:b5:4b:9b:d1:6d:83:f5:55:d7:fd:b0: 88:5d:f9:ae:72:ed:5f:51:b4:5e:b9:85:f5:fc:9b:5d:e3:e5: c7:fb:7c:1a:0a:25:c2:f4:73:c2:20:32:52:de:61:22:44:98: 1e:23:d8:e4:9f:d5:ee:13:13:07:01:00:51:01:93:b2:5f:3a: 74:89:08:27:f9:c1:aa:f4:32:5f:db:60:db:b5:6a:c4:86:f2: 7d:be:91:ae:79:88:c4:15:47:91:c4:36:1f:c3:10:66:fc:0e: ca:c4:f0:fb:7b:17:4c:0c:f7:cc:b6:9f:7a:5d:b3:b6:09:5b: 7e:87:48:84:98:4b:7f:43:ad:04:78:63:57:05:33:a1:fe:cf: 21:29:9b:22:4b:81:dc:31:2b:05:a3:71:2b:69:a2:55:ea:95: 14:8d:c8:01:17:bd:90:e0:ca:f1:89:18:00:58:6d:0b:59:19: d2:2b:28:c4:10:95:5c:21:ef:f9:a6:3a:3e:c6:58:87:2f:a7: 4d:19:93:5b:e4:de:2f:d3:fc:9d:43:35:c7:b3:5e:8a:ba:a9: 6f:39:f9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjVo4zZJUw781QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVmZjgyZTQtY2QzNy00NWM2LWI3MTQtYWIwYTA0OTI3 OTY0MB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MzJlMjFhZTctZTBlNS00NGJmLTk1ODUtNjZiNDc0ZTlmZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsye/6Jooju6dF5LNhuS3GD2hTGH5odtI0foa Ygz4Qc/PK3cJtGPOUMd3pxFGfuXc2guGpfhesrHv1EYVR5sWip/gnIrJ6Rs90XXF BQHnHOEP41aS20E3Npw4IbTG4mXhSRWSvf2JwOcK4G8jIrjW5BIJdo8yMxTlc9yP HaXoZNlc861Q2zZ4vCEM3J2DF9o5LXo4JY/FzG4KGmzM5Y8daiw18RDqhVSBcId0 iRF5V2ezDuNTxatfXlKuwF0LvQ7N5+nahWdOo0Bur0aO8K31triavlkL6AQNNgc9 oSsafvJqyYzqxa0wbIOunJKiX5X1hMylmuV1XHu/KCvGemsQiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxAgPqNLp1Bd70HYPERpPIjqrMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84NWZm ODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBhMDQ5Mjc5NjQvMmJjNDNhOTMtMDAzMC0z YzM5LThiNjQtM2YwZjYyOTcwM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODVmZjgyZTQtY2QzNy00NWM2LWI3 MTQtYWIwYTA0OTI3OTY0Lzg1ZmY4MmU0LWNkMzctNDVjNi1iNzE0LWFiMGEwNDky Nzk2NC5jcmwwHwYDVR0jBBgwFoAUXku/GGCREN/OFiWbiwhlqRxiUBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84NWZmODJlNC1jZDM3LTQ1YzYtYjcxNC1hYjBh MDQ5Mjc5NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDyWaTGGccVGzkB3CHFxQ0ImZI2al0Net0buss71exUoMZg4z3eQGHC wWK1S5vRbYP1Vdf9sIhd+a5y7V9RtF65hfX8m13j5cf7fBoKJcL0c8IgMlLeYSJE mB4j2OSf1e4TEwcBAFEBk7JfOnSJCCf5war0Ml/bYNu1asSG8n2+ka55iMQVR5HE Nh/DEGb8DsrE8Pt7F0wM98y2n3pds7YJW36HSISYS39DrQR4Y1cFM6H+zyEpmyJL gdwxKwWjcStpolXqlRSNyAEXvZDgyvGJGABYbQtZGdIrKMQQlVwh7/mmOj7GWIcv p00Zk1vk3i/T/J1DNcezXoq6qW85+RU= -----END CERTIFICATE-----Generated at Mon Sep 28 22:36:39 2026 by rpki-client