$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa File: 94da6f54-9255-374b-a408-2e35886a522d.roa (raw, json) Hash identifier: wlW9nqC9WBFYG8xtD/p/iaA4tBzJCGlagBBy3GKwdiQ= Subject key identifier: B7:D7:42:3B:35:17:BA:BA:11:87:33:D3:ED:06:E9:D9:C2:EB:2D:B5 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584F6F2302B9E6776E1E586B6600 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 40948 IP address blocks: 104.152.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:02:b9:e6:77:6e:1e:58:6b:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=f41ad03a-07d6-4334-a9bf-a4e805aba890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:21:40:94:ed:04:64:ef:80:a9:e3:5e:f3: 06:f5:59:61:71:83:f5:2d:9a:df:eb:8a:b1:b1:ed: b0:93:c1:70:80:e4:c1:7b:4f:dd:4d:ef:0f:77:fa: 9d:32:7a:08:9d:45:25:93:19:ef:c1:de:1b:fe:2b: 04:8c:b4:46:af:e4:7e:01:8c:14:a4:a4:f2:89:76: 14:e4:48:02:6d:1b:bc:a6:5f:12:e8:59:5f:61:de: ea:c3:84:c9:85:23:2a:bd:77:c7:ce:4f:15:de:b1: 4f:c5:af:88:7d:e8:d1:7f:99:22:5a:00:d6:72:26: a4:35:34:32:8c:af:a8:cd:3b:da:71:b9:88:5b:d4: 12:79:46:37:29:4c:45:91:eb:f4:3a:d8:14:1a:e9: 41:18:98:d9:ec:90:6c:46:b1:ba:9e:56:0f:ab:8c: 02:31:72:2d:99:87:83:7a:04:e3:23:42:5d:bc:2b: 9e:de:4f:9b:53:9a:a7:6f:76:7f:06:c7:b3:e8:09: 7c:78:fb:8f:96:18:a4:4f:25:33:ae:d8:17:d7:db: ee:d9:77:0c:ba:cc:59:c3:b4:c6:70:49:c8:16:3a: ac:5d:82:2d:9c:38:2c:45:9e:40:75:b4:df:56:17: e7:8c:36:cb:35:17:19:7e:07:00:66:c6:fa:53:b0: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D7:42:3B:35:17:BA:BA:11:87:33:D3:ED:06:E9:D9:C2:EB:2D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:97:1b:47:80:7b:5c:f4:ed:8b:ca:44:43:68:26:35:3b:26: d6:4d:ea:b9:64:77:8c:d8:e2:48:c7:59:9c:28:51:f6:91:79: d1:9b:dd:d9:83:cc:f0:6d:ad:90:e6:79:33:42:78:a7:64:34: 09:91:8e:bb:5c:e0:cc:c9:db:46:9b:1f:72:7f:0d:6e:18:24: 81:d4:dd:a1:6b:56:98:93:cb:73:e3:77:0b:da:9f:53:7f:3a: c7:21:99:ca:40:a1:3c:e3:83:cb:a0:c2:a8:5f:57:a9:e1:a4: a9:8b:f6:4c:01:21:ff:65:12:5b:ab:8a:8a:d8:9f:81:d7:7e: 9a:0d:75:9c:cf:b8:e2:0f:8c:7c:7b:a5:40:26:72:9c:5d:5e: 9f:59:dc:97:68:e8:18:bd:39:a3:5d:1d:f8:3e:ac:55:f8:f7: c0:ab:39:1a:16:f2:6c:21:09:c8:35:2f:27:ea:3f:1f:32:f1: 60:bb:62:e8:b8:de:7b:53:b9:26:a0:45:32:d8:dc:78:b9:2d: 3d:2a:27:d5:8f:03:fc:a1:65:fa:48:7f:47:e0:35:66:52:38: c9:70:e1:91:ac:5d:e6:f3:f6:4e:31:a0:39:87:ab:ae:cc:c7: ea:72:fc:79:97:98:8c:ec:75:28:a2:9b:4d:4d:6b:80:3f:58: 0e:50:aa:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwK55nduHlhrZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjQxYWQwM2EtMDdkNi00MzM0LWE5YmYtYTRlODA1YWJhODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF4hQJTtBGTvgKnjXvMG9VlhcYP1LZrf64qx se2wk8FwgOTBe0/dTe8Pd/qdMnoInUUlkxnvwd4b/isEjLRGr+R+AYwUpKTyiXYU 5EgCbRu8pl8S6FlfYd7qw4TJhSMqvXfHzk8V3rFPxa+IfejRf5kiWgDWciakNTQy jK+ozTvacbmIW9QSeUY3KUxFkev0OtgUGulBGJjZ7JBsRrG6nlYPq4wCMXItmYeD egTjI0JdvCue3k+bU5qnb3Z/Bsez6Al8ePuPlhikTyUzrtgX19vu2XcMusxZw7TG cEnIFjqsXYItnDgsRZ5AdbTfVhfnjDbLNRcZfgcAZsb6U7Ar9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfXQjs1F7q6EYcz0+0G6dnC6y21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvOTRkYTZmNTQtOTI1NS0z NzRiLWE0MDgtMmUzNTg4NmE1MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmXG0eAe1z07YvKRENoJjU7JtZN6rlkd4zY4kjHWZwoUfaRedGb3dmD zPBtrZDmeTNCeKdkNAmRjrtc4MzJ20abH3J/DW4YJIHU3aFrVpiTy3Pjdwvan1N/ OschmcpAoTzjg8ugwqhfV6nhpKmL9kwBIf9lEluriorYn4HXfpoNdZzPuOIPjHx7 pUAmcpxdXp9Z3Jdo6Bi9OaNdHfg+rFX498CrORoW8mwhCcg1LyfqPx8y8WC7Yui4 3ntTuSagRTLY3Hi5LT0qJ9WPA/yhZfpIf0fgNWZSOMlw4ZGsXebz9k4xoDmHq67M x+py/HmXmIzsdSiim01Na4A/WA5Qqlg= -----END CERTIFICATE-----Generated at Sat Oct 10 12:55:28 2026 by rpki-client