$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa File: 1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa (raw, json) Hash identifier: WdzvFVdamVXaDeTje463AKU3ql7eHi9XQGSBNHQQCu4= Subject key identifier: C3:DD:70:C5:FA:1E:12:F4:F6:03:CF:35:E8:88:95:91:AB:62:1D:F1 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584FB0BDE69D7B14DC742FDD3898 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 62874 IP address blocks: 104.37.24.0/22 maxlen: 22 104.37.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:e6:9d:7b:14:dc:74:2f:dd:38:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=f8701157-b6a8-49f9-b628-ba98826a05e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:64:b8:8d:44:9c:d4:fe:2d:30:0c:44:9e: 03:f9:ec:7e:61:d6:02:6f:88:82:ad:64:a2:9e:b0: 81:fa:77:bd:c6:b0:d7:0f:be:06:06:c5:b8:d8:63: 6d:46:4f:4e:e6:f5:48:74:1a:78:b0:7b:c6:d8:24: 58:78:aa:f5:77:e3:dd:cb:c6:9a:e0:a4:f1:93:e8: 36:78:f7:72:07:d6:40:02:39:f4:dc:e1:7f:f5:5f: e7:09:3f:39:b9:9b:65:96:fd:23:67:05:ac:29:4f: f9:4f:2a:cb:a5:d7:0d:7b:9e:2e:7d:1c:5c:69:2e: 43:0b:86:d4:4c:b2:dc:a3:11:e3:48:bb:ec:b1:6d: 7c:31:a3:5c:13:40:d6:4c:72:51:4c:64:00:a9:ca: 22:ed:71:92:9f:d0:73:96:a0:ec:f5:0b:52:ea:64: 8c:76:48:d6:ed:6d:14:de:be:76:9b:92:9a:ac:9c: 48:66:d7:5b:3f:10:75:39:2b:2b:53:bf:b0:e6:16: af:85:10:59:11:4f:90:d0:18:58:f9:de:c9:29:71: 5f:84:5b:91:e3:87:d8:c8:7e:fa:c1:44:ce:dd:f4: 30:63:24:be:2c:43:a5:10:67:25:f6:7e:69:a5:b3: a9:d1:16:49:c4:2d:21:a4:1b:05:ec:76:29:48:91: f9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DD:70:C5:FA:1E:12:F4:F6:03:CF:35:E8:88:95:91:AB:62:1D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/1b1c32ff-a887-37e9-9ce2-b282e57df7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 104.37.24.0-104.37.28.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:04:c0:c6:e5:50:16:94:c5:66:7d:a1:d9:a5:75:69:50:21: 50:54:5a:a0:77:8b:7d:a4:51:09:8e:63:cb:5d:9a:82:36:ba: ba:d1:00:04:03:6b:c7:10:ba:65:7f:92:46:15:93:d5:ed:bd: 3b:d2:7a:47:57:4d:70:05:3a:ff:07:cb:b9:69:22:1a:1b:5e: 2f:94:94:4f:7f:85:8f:e7:3d:47:a7:17:20:5c:99:c8:ea:c8: 29:7d:f5:ee:09:d1:a5:08:ca:06:06:8c:ad:3d:98:b4:20:e7: f5:85:e6:b9:56:26:35:75:f3:7a:35:e2:81:1b:3b:54:1d:1b: 3a:32:85:32:65:db:81:68:a5:b1:ce:50:25:54:9f:37:2f:4c: 8a:43:54:16:2a:52:5f:f7:81:4e:6a:1f:36:f5:1e:c7:ca:a2: c9:01:d2:68:41:28:70:86:ad:4e:8f:d9:4d:f1:39:71:fc:b9: 6c:82:48:8e:be:b2:51:50:2d:0d:88:08:7e:b6:ff:8a:69:f1: cd:4f:b8:a3:5f:5b:32:05:a6:20:af:81:22:2e:66:d5:25:1a: 20:50:5b:bc:2d:82:4f:35:d3:85:f9:51:3d:c8:df:af:d8:a8: c8:ac:dd:60:20:06:8f:71:b9:9c:83:fc:42:ce:fd:bb:1f:f5: ae:47:ac:09 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE+wveadexTcdC/dOJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk Zjg3MDExNTctYjZhOC00OWY5LWI2MjgtYmE5ODgyNmEwNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LtkuI1EnNT+LTAMRJ4D+ex+YdYCb4iCrWSi nrCB+ne9xrDXD74GBsW42GNtRk9O5vVIdBp4sHvG2CRYeKr1d+Pdy8aa4KTxk+g2 ePdyB9ZAAjn03OF/9V/nCT85uZtllv0jZwWsKU/5TyrLpdcNe54ufRxcaS5DC4bU TLLcoxHjSLvssW18MaNcE0DWTHJRTGQAqcoi7XGSn9BzlqDs9QtS6mSMdkjW7W0U 3r52m5KarJxIZtdbPxB1OSsrU7+w5havhRBZEU+Q0BhY+d7JKXFfhFuR44fYyH76 wUTO3fQwYyS+LEOlEGcl9n5ppbOp0RZJxC0hpBsF7HYpSJH5QQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMPdcMX6HhL09gPPNeiIlZGrYh3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvMWIxYzMyZmYtYTg4Ny0z N2U5LTljZTItYjI4MmU1N2RmN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANoJRgD BABoJRwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAvQTAxuVQFpTFZn2h2aV1aVAhUFRaoHeLfaRRCY5jy12a gja6utEABANrxxC6ZX+SRhWT1e29O9J6R1dNcAU6/wfLuWkiGhteL5SUT3+Fj+c9 R6cXIFyZyOrIKX317gnRpQjKBgaMrT2YtCDn9YXmuVYmNXXzejXigRs7VB0bOjKF MmXbgWilsc5QJVSfNy9MikNUFipSX/eBTmofNvUex8qiyQHSaEEocIatTo/ZTfE5 cfy5bIJIjr6yUVAtDYgIfrb/imnxzU+4o19bMgWmIK+BIi5m1SUaIFBbvC2CTzXT hflRPcjfr9ioyKzdYCAGj3G5nIP8Qs79ux/1rkesCQ== -----END CERTIFICATE-----Generated at Tue Nov 10 06:33:04 2026 by rpki-client