$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f841486-0558-38cb-82ba-05e882fa8a72.roa File: 0f841486-0558-38cb-82ba-05e882fa8a72.roa (raw, json) Hash identifier: Nfo8DvW2HW4HoiVxxBnipWBluUWE0VN1QaQLbhbzo0M= Subject key identifier: 85:D0:B4:08:2E:9A:52:AB:53:26:ED:E6:4B:49:5C:D8:5B:23:61:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897BC93F26620770810C000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f841486-0558-38cb-82ba-05e882fa8a72.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.97.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:bc:93:f2:66:20:77:08:10:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=5481747c-990c-458d-9374-e2c439149092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:06:7c:c9:ca:ef:19:f7:bd:6f:0d:30:1e: b1:80:ff:54:23:78:2f:b8:46:a3:63:c0:84:ed:4a: 6f:a4:c1:71:af:f4:38:f3:53:8a:6a:f8:45:cf:18: 6f:e6:51:81:51:a7:4a:75:c2:86:ff:ca:d0:62:69: ad:20:ce:3e:5c:b5:36:46:95:ea:64:68:87:e6:81: 3f:92:f0:19:e6:11:c4:20:01:e2:e6:4e:72:0f:f8: 68:97:36:13:c6:4f:d9:63:a7:6f:bc:47:3f:07:29: f9:69:94:83:b5:c3:44:64:f8:16:7e:29:0b:02:18: 55:17:23:47:56:30:bf:b1:33:6e:29:fc:3d:c8:91: 8f:68:82:71:7f:6b:a9:a3:5e:11:70:b3:5e:b6:5e: b8:44:ff:68:52:b3:2d:44:e1:e8:37:72:50:4d:27: 4b:38:ec:4e:34:75:54:ed:39:6f:b3:c0:64:45:f0: 5c:08:14:3a:f7:57:7b:06:d0:de:e0:68:8e:a1:89: 4e:03:ac:fb:d6:34:5f:39:bc:eb:c2:e7:ae:4d:86: b4:ce:f1:3b:af:76:0a:80:85:0f:9a:28:b0:dc:55: 14:70:10:bd:c8:d6:1e:bd:fe:e4:e9:37:fb:99:6a: db:5d:1d:38:66:4a:54:7d:5d:68:d7:21:73:6a:7b: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D0:B4:08:2E:9A:52:AB:53:26:ED:E6:4B:49:5C:D8:5B:23:61:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f841486-0558-38cb-82ba-05e882fa8a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.97.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9b:cd:a4:cd:bb:ef:80:4a:bd:0d:26:8f:78:de:81:83:90: 70:4a:c3:ad:fe:9c:db:5c:31:2c:45:6a:35:a8:19:5d:04:1f: 93:b1:af:82:d1:62:52:c2:c2:bc:65:25:d1:d1:6b:80:95:c4: b3:5c:82:09:8c:6d:41:04:58:e8:f0:67:49:ef:51:69:c3:e6: 39:6b:7e:cf:e5:5b:90:a2:23:71:36:5a:f4:da:b9:ff:dc:2f: 65:01:10:ce:f4:86:21:66:3b:96:73:12:d8:98:51:ce:76:62: 6c:b7:00:29:a8:3d:d2:f1:a2:07:98:cf:73:37:15:d0:f4:d7: 06:cb:90:28:12:55:0f:16:b4:f1:3d:58:ff:3f:82:48:c7:16: ef:29:25:3a:9f:cd:35:4c:a9:81:2f:b9:81:70:4c:9d:11:3a: be:7b:f4:c9:8c:ab:19:49:5b:89:0a:88:97:6a:a8:8c:76:b6: cd:26:b5:ec:49:71:6b:28:c7:e6:9f:5a:1e:10:7f:4c:9e:d2: 20:7f:17:ed:3a:af:b0:3f:5b:7b:59:a7:e3:b0:c0:9d:ca:82: 75:e6:57:48:b2:e7:b3:aa:d2:26:bb:c1:86:25:f8:9e:a1:d3: 0b:6f:f1:29:92:72:f6:88:ca:c5:6c:10:9c:a2:fa:92:51:ce: 6e:a4:49:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7yT8mYgdwgQwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NTQ4MTc0N2MtOTkwYy00NThkLTkzNzQtZTJjNDM5MTQ5MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xoGfMnK7xn3vW8NMB6xgP9UI3gvuEajY8CE 7UpvpMFxr/Q481OKavhFzxhv5lGBUadKdcKG/8rQYmmtIM4+XLU2RpXqZGiH5oE/ kvAZ5hHEIAHi5k5yD/holzYTxk/ZY6dvvEc/Byn5aZSDtcNEZPgWfikLAhhVFyNH VjC/sTNuKfw9yJGPaIJxf2upo14RcLNetl64RP9oUrMtROHoN3JQTSdLOOxONHVU 7Tlvs8BkRfBcCBQ691d7BtDe4GiOoYlOA6z71jRfObzrwueuTYa0zvE7r3YKgIUP miiw3FUUcBC9yNYevf7k6Tf7mWrbXR04ZkpUfV1o1yFzanuxXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXQtAgumlKrUybt5ktJXNhbI2ERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY4NDE0ODYtMDU1OC0z OGNiLTgyYmEtMDVlODgyZmE4YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqbzaTNu++ASr0NJo943oGDkHBKw63+nNtcMSxFajWoGV0EH5Oxr4LR YlLCwrxlJdHRa4CVxLNcggmMbUEEWOjwZ0nvUWnD5jlrfs/lW5CiI3E2WvTauf/c L2UBEM70hiFmO5ZzEtiYUc52Ymy3ACmoPdLxogeYz3M3FdD01wbLkCgSVQ8WtPE9 WP8/gkjHFu8pJTqfzTVMqYEvuYFwTJ0ROr579MmMqxlJW4kKiJdqqIx2ts0mtexJ cWsox+afWh4Qf0ye0iB/F+06r7A/W3tZp+OwwJ3KgnXmV0iy57Oq0ia7wYYl+J6h 0wtv8SmScvaIysVsEJyi+pJRzm6kSTU= -----END CERTIFICATE-----Generated at Tue Sep 22 20:04:18 2026 by rpki-client