$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/485a4304-d5de-343c-969d-5641796f6864.roa File: 485a4304-d5de-343c-969d-5641796f6864.roa (raw, json) Hash identifier: 0yNK79nGEzt9l8knf9rJvUaWDOzfdBL5LlSVUdsDQnM= Subject key identifier: D7:0C:98:A9:12:F2:41:24:FC:19:47:19:4A:40:2E:05:F8:88:23:6B Certificate issuer: /CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Certificate serial: 010D0C9F4328584F74B824EF40A98E365DE81B80 Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/485a4304-d5de-343c-969d-5641796f6864.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 19523 IP address blocks: 104.167.252.0/23 maxlen: 23 104.167.252.0/24 maxlen: 24 104.167.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:24:ef:40:a9:8e:36:5d:e8:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=ebbe087d-953c-4498-aa2c-71f9528ea5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:40:39:03:22:ba:14:3b:12:2d:15:85:f6: 41:8a:6a:6f:f8:ed:75:03:30:d9:2c:ac:cc:a1:80: eb:3c:0b:f4:eb:76:fa:03:51:40:d0:4f:60:5e:49: 1b:0a:22:91:5f:54:c7:5e:9a:ae:9e:45:f1:27:db: 4d:75:fd:9a:dc:8f:c1:74:d7:4f:69:06:d4:77:37: db:30:fb:2d:42:dd:5b:4d:bf:cc:9a:d5:02:d6:42: 6c:cb:c1:75:45:2a:58:1d:83:c7:ea:af:0a:d3:33: ae:f9:09:05:ca:53:ee:23:ca:00:17:04:78:9a:ca: 75:57:07:a6:59:01:52:5f:20:d6:82:c1:f5:8f:80: 58:75:a3:3b:28:96:c3:f2:15:ab:67:c7:3d:64:89: 5b:30:be:1e:e5:f9:19:3a:e1:5b:e7:4a:fa:6e:52: ca:ab:f2:98:55:5b:ab:f6:cf:05:16:38:23:9e:a3: ff:7f:dc:1c:72:a0:47:69:82:2e:f4:01:99:9a:f9: 1d:d9:b9:f4:67:09:7c:65:56:0a:da:95:73:c7:de: 73:9e:96:52:19:6f:8e:93:ed:12:a3:e0:39:93:aa: 22:2e:b2:73:7f:fd:2d:40:cc:cb:7a:a1:d6:6d:df: 8a:50:b7:15:3c:5b:58:b5:d0:8b:bb:53:c8:0c:ff: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0C:98:A9:12:F2:41:24:FC:19:47:19:4A:40:2E:05:F8:88:23:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/485a4304-d5de-343c-969d-5641796f6864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl X509v3 Authority Key Identifier: keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer sbgp-ipAddrBlock: critical IPv4: 104.167.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5f:a9:36:48:29:ef:89:37:3c:e0:22:5e:40:e6:a6:c3:80: 01:f9:84:0d:14:8a:9f:7c:2f:46:1a:5d:80:59:7c:61:aa:8f: c6:df:34:24:84:9c:6a:13:70:d1:49:43:1b:9f:59:bf:65:ea: 9a:e0:94:b8:da:9f:3b:35:f7:3a:43:b4:bb:50:78:67:37:c9: 8d:aa:41:c4:87:86:9b:b6:87:f3:9e:9a:d3:71:e7:5b:90:7b: c2:2b:06:d3:1b:51:5c:d3:2a:83:1e:81:42:f5:ed:76:7c:83: de:2e:dd:0c:5e:68:70:8b:b9:75:91:d7:85:ef:42:f4:75:fd: 55:b9:9a:36:e2:04:d9:a2:13:17:10:0d:68:88:16:79:61:c4: 91:b1:5b:c4:d3:ce:2a:09:50:c3:ac:49:44:d0:55:91:fb:65: 05:80:c1:7b:a2:bb:0a:b7:7f:34:63:5b:da:b0:7d:db:2f:37: 47:10:6b:01:0c:1e:c4:42:d7:b1:de:c6:31:6e:18:88:65:cd: 65:da:bc:c3:84:b9:65:90:fc:45:f4:12:e7:9f:23:d2:93:dd: af:45:97:86:34:ff:58:b6:8e:96:50:2b:b5:78:fc:f8:92:23: 1a:28:0d:c7:d1:33:09:a9:3b:3f:b7:17:f0:e1:7e:65:32:56: a6:74:dd:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCTvQKmONl3oG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk YzQ1MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk ZWJiZTA4N2QtOTUzYy00NDk4LWFhMmMtNzFmOTUyOGVhNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HBAOQMiuhQ7Ei0VhfZBimpv+O11AzDZLKzM oYDrPAv063b6A1FA0E9gXkkbCiKRX1THXpqunkXxJ9tNdf2a3I/BdNdPaQbUdzfb MPstQt1bTb/MmtUC1kJsy8F1RSpYHYPH6q8K0zOu+QkFylPuI8oAFwR4msp1Vwem WQFSXyDWgsH1j4BYdaM7KJbD8hWrZ8c9ZIlbML4e5fkZOuFb50r6blLKq/KYVVur 9s8FFjgjnqP/f9wccqBHaYIu9AGZmvkd2bn0Zwl8ZVYK2pVzx95znpZSGW+Ok+0S o+A5k6oiLrJzf/0tQMzLeqHWbd+KULcVPFtYtdCLu1PIDP+rUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcMmKkS8kEk/BlHGUpALgX4iCNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvNDg1YTQzMDQtZDVkZS0z NDNjLTk2OWQtNTY0MTc5NmY2ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1 MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaKf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1fqTZIKe+JNzzgIl5A5qbDgAH5hA0Uip98L0YaXYBZfGGqj8bfNCSE nGoTcNFJQxufWb9l6prglLjanzs19zpDtLtQeGc3yY2qQcSHhpu2h/OemtNx51uQ e8IrBtMbUVzTKoMegUL17XZ8g94u3QxeaHCLuXWR14XvQvR1/VW5mjbiBNmiExcQ DWiIFnlhxJGxW8TTzioJUMOsSUTQVZH7ZQWAwXuiuwq3fzRjW9qwfdsvN0cQawEM HsRC17HexjFuGIhlzWXavMOEuWWQ/EX0EuefI9KT3a9Fl4Y0/1i2jpZQK7V4/PiS IxooDcfRMwmpOz+3F/DhfmUyVqZ03SU= -----END CERTIFICATE-----Generated at Tue Oct 13 21:23:00 2026 by rpki-client