$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/555009bc-5675-31a2-8d4e-e7e85868ba56.roa File: 555009bc-5675-31a2-8d4e-e7e85868ba56.roa (raw, json) Hash identifier: HDntV85aMKdomr+JeBKwO1A5Kn7pcTY0ojcIrY3boCA= Subject key identifier: 59:F5:77:F2:B5:35:0F:BA:63:AF:72:98:80:8B:7C:AA:70:F5:56:5D Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FB0BDE342CB62AB0558B1BB48 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/555009bc-5675-31a2-8d4e-e7e85868ba56.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 834 IP address blocks: 104.241.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:e3:42:cb:62:ab:05:58:b1:bb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=23f4c36a-da25-4a5e-9dc0-a32ca18851fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:d6:f0:ca:55:27:b3:f3:37:5a:49:cd:18: 94:98:b6:84:78:9a:1c:6a:0f:9f:68:fc:47:b0:60: c9:01:0e:b4:a0:ec:29:01:35:83:5f:76:40:2d:ba: 8a:23:45:73:4b:1e:e4:31:21:e4:09:b8:0e:e6:51: 86:d1:9c:e5:1b:56:74:5b:af:d1:73:da:58:c1:6e: c8:82:bd:cb:7f:1a:2a:2c:8d:ed:33:cd:bf:36:08: 9c:47:9d:62:07:b5:77:0c:b0:ef:7c:d6:14:b2:59: 51:e3:be:6c:48:17:95:b3:95:a8:37:d2:38:b4:7f: 2b:06:d2:44:f7:fc:19:84:f1:de:b0:e8:5f:3c:c0: 84:63:fd:c2:56:dc:70:b1:0b:b8:5f:6b:61:84:f4: a9:11:80:f4:b3:eb:6a:57:e9:c1:d1:91:2f:1d:91: 31:0b:07:e5:e8:ae:b0:45:7f:02:74:41:c7:57:ad: fe:7a:3f:8c:c5:0f:f8:c7:a4:af:3f:08:d7:f4:1c: 1f:64:7a:6f:5a:1a:7a:08:73:6b:6c:6a:ed:3c:02: d1:ed:04:bc:3f:c7:ad:d5:29:23:a2:71:45:ad:8d: 39:22:db:a7:22:7f:41:82:51:4d:20:6a:2e:db:cd: 46:72:70:3a:34:c0:eb:a6:25:4f:19:3a:6d:c0:cb: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:77:F2:B5:35:0F:BA:63:AF:72:98:80:8B:7C:AA:70:F5:56:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/555009bc-5675-31a2-8d4e-e7e85868ba56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:12:62:95:a1:3b:b9:0e:cb:e4:d2:0e:ec:5f:bf:10:af:52: 83:88:02:6d:79:1b:e0:f9:bf:66:e9:88:5b:c4:1e:7b:a7:8f: e8:28:22:1e:77:ff:13:18:ca:43:c5:0a:4e:98:9b:42:cc:0b: 65:80:dd:72:91:db:84:e4:28:5f:95:bd:df:89:f1:d1:3d:6b: 1e:6b:b3:a3:89:df:4e:44:db:06:e7:c0:65:8c:c8:d4:f4:40: f9:f3:0c:cc:9b:d8:97:ad:5b:d8:db:db:b3:67:c3:16:e0:60: 1b:48:1e:93:16:b0:ad:c9:ef:43:60:7f:35:e4:7a:5c:69:ff: 62:97:be:51:35:9c:16:a0:70:b3:cb:89:03:54:9c:fe:60:4c: 92:fc:03:0d:17:fa:df:0d:9b:f6:f8:f8:dd:36:da:f4:73:10: c4:5b:33:fb:29:52:e3:2e:12:93:58:c0:bd:8b:94:2b:e1:77: c0:1d:f2:2b:d9:5f:0a:51:0d:0b:20:25:c3:23:75:a6:ad:d0: 2b:9c:b1:d4:aa:71:bf:2c:33:94:73:52:85:3a:02:4f:04:39: b5:57:a7:82:5e:6f:e2:b2:a9:52:4a:5c:77:8f:72:03:cf:a4: ef:c9:b9:e6:8e:d4:64:04:30:f5:7a:4d:30:67:82:c4:1b:77: 9e:92:bd:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wveNCy2KrBVixu0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MjNmNGMzNmEtZGEyNS00YTVlLTlkYzAtYTMyY2ExODg1MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRDW8MpVJ7PzN1pJzRiUmLaEeJocag+faPxH sGDJAQ60oOwpATWDX3ZALbqKI0VzSx7kMSHkCbgO5lGG0ZzlG1Z0W6/Rc9pYwW7I gr3LfxoqLI3tM82/NgicR51iB7V3DLDvfNYUsllR475sSBeVs5WoN9I4tH8rBtJE 9/wZhPHesOhfPMCEY/3CVtxwsQu4X2thhPSpEYD0s+tqV+nB0ZEvHZExCwfl6K6w RX8CdEHHV63+ej+MxQ/4x6SvPwjX9BwfZHpvWhp6CHNrbGrtPALR7QS8P8et1Skj onFFrY05ItunIn9BglFNIGou281GcnA6NMDrpiVPGTptwMt5vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn1d/K1NQ+6Y69ymICLfKpw9VZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNTU1MDA5YmMtNTY3NS0z MWEyLThkNGUtZTdlODU4NjhiYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4SYpWhO7kOy+TSDuxfvxCvUoOIAm15G+D5v2bpiFvEHnunj+goIh53 /xMYykPFCk6Ym0LMC2WA3XKR24TkKF+Vvd+J8dE9ax5rs6OJ305E2wbnwGWMyNT0 QPnzDMyb2JetW9jb27NnwxbgYBtIHpMWsK3J70NgfzXkelxp/2KXvlE1nBagcLPL iQNUnP5gTJL8Aw0X+t8Nm/b4+N022vRzEMRbM/spUuMuEpNYwL2LlCvhd8Ad8ivZ XwpRDQsgJcMjdaat0CucsdSqcb8sM5RzUoU6Ak8EObVXp4Jeb+KyqVJKXHePcgPP pO/JueaO1GQEMPV6TTBngsQbd56SvdI= -----END CERTIFICATE-----Generated at Sun Nov 15 19:00:22 2026 by rpki-client