$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114a5f61-3d18-3ff1-aad9-a676da1183c1.roa File: 114a5f61-3d18-3ff1-aad9-a676da1183c1.roa (raw, json) Hash identifier: 9nbqqQx7HV1sVWnSNLq+aPCkcQFMPaAtHe0w6gYnqlc= Subject key identifier: 99:7E:ED:79:77:64:7F:57:DC:42:F5:15:2B:E7:C4:85:C1:37:EE:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1CC7B670FDC9A0765A8360C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114a5f61-3d18-3ff1-aad9-a676da1183c1.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 104.125.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:b6:70:fd:c9:a0:76:5a:83:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=d12ae71e-1822-4313-81a7-7cdfda35d435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:4a:71:57:9a:d1:4f:00:8b:87:a4:64:91: 1f:4e:c3:54:45:52:dc:ab:24:0b:de:6d:42:b5:df: 95:b4:73:d8:55:2d:a9:0d:52:97:2d:a3:33:6f:f0: 73:2b:68:14:2b:de:f8:cd:e1:2a:e8:53:4a:a4:52: 78:98:41:ff:7f:02:45:81:a6:85:ad:cd:7c:5b:0d: 68:b9:24:12:f2:31:7a:d7:c2:aa:12:a7:ac:bb:ae: f5:ed:33:40:78:a9:fd:50:03:90:24:55:89:e8:f3: dc:83:c8:74:c2:a5:dc:0f:2a:49:90:f8:43:0a:7f: c3:0e:35:d1:88:3d:9e:6a:41:24:13:3e:66:24:9b: 3d:2a:0f:7d:00:4c:d8:eb:c8:9e:04:e1:fe:4c:7a: 36:90:1b:8e:b8:8b:f3:76:e1:fd:17:5c:d3:dd:02: 35:29:2f:c3:4f:f8:b5:9a:4e:29:45:fe:f6:5a:f6: 4f:e3:3e:6b:42:5d:28:f3:44:af:01:07:96:3e:bf: c6:74:aa:ca:79:b1:d0:a8:cb:9f:b0:60:7e:7b:9b: 25:ce:39:dd:a6:31:fd:00:66:b1:dd:69:6c:a2:3e: 10:60:ec:77:b1:1a:2e:10:7c:85:e4:e3:9c:73:eb: 00:11:1e:15:b6:3d:66:92:e1:63:49:e9:c1:3e:59: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7E:ED:79:77:64:7F:57:DC:42:F5:15:2B:E7:C4:85:C1:37:EE:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114a5f61-3d18-3ff1-aad9-a676da1183c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:71:13:60:1c:a5:93:49:a0:2c:3c:60:71:d6:5b:bd:dd:66: ae:e1:5a:60:21:51:b1:47:1e:88:0e:72:46:08:aa:05:be:79: fd:68:5d:4e:09:2d:ee:9d:99:a1:11:c8:6c:21:23:21:87:7c: 93:25:92:86:64:d4:ca:98:3b:32:20:11:c4:81:89:0e:de:81: 58:65:ee:86:7b:e9:76:01:0e:88:bf:d7:8d:f7:51:47:ce:81: 3a:d7:71:cd:2f:67:d5:2e:f4:59:c6:57:b9:90:5f:04:a7:14: 47:81:8f:11:8c:b2:f7:94:15:ff:a5:f3:90:ce:3d:ef:bb:d7: a6:0b:ae:00:88:9d:85:a3:58:3e:ae:2e:e8:64:b5:59:0e:0c: eb:48:6d:d8:70:0d:fe:a0:c4:5a:62:db:85:05:32:d1:0f:fa: cd:c8:35:41:17:f3:8d:79:e2:b9:cc:b8:73:d7:04:77:1a:3e: 4a:64:42:4f:6d:64:fa:87:58:e2:4e:44:58:6b:6e:57:ef:9f: 78:e3:b8:6d:73:6e:f5:04:8c:39:72:53:72:6e:eb:57:48:22: 5a:77:b8:5f:3c:15:dc:8f:eb:1f:bc:27:7a:aa:30:f8:1b:bc: d8:7f:01:c0:30:d5:bc:f3:dc:2e:64:92:44:b6:d6:3b:a0:81: 48:bc:a3:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx7Zw/cmgdlqDYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk ZDEyYWU3MWUtMTgyMi00MzEzLTgxYTctN2NkZmRhMzVkNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaVKcVea0U8Ai4ekZJEfTsNURVLcqyQL3m1C td+VtHPYVS2pDVKXLaMzb/BzK2gUK974zeEq6FNKpFJ4mEH/fwJFgaaFrc18Ww1o uSQS8jF618KqEqesu6717TNAeKn9UAOQJFWJ6PPcg8h0wqXcDypJkPhDCn/DDjXR iD2eakEkEz5mJJs9Kg99AEzY68ieBOH+THo2kBuOuIvzduH9F1zT3QI1KS/DT/i1 mk4pRf72WvZP4z5rQl0o80SvAQeWPr/GdKrKebHQqMufsGB+e5slzjndpjH9AGax 3Wlsoj4QYOx3sRouEHyF5OOcc+sAER4Vtj1mkuFjSenBPll21wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl+7Xl3ZH9X3EL1FSvnxIXBN+5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTE0YTVmNjEtM2QxOC0z ZmYxLWFhZDktYTY3NmRhMTE4M2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVxE2AcpZNJoCw8YHHWW73dZq7hWmAhUbFHHogOckYIqgW+ef1oXU4J Le6dmaERyGwhIyGHfJMlkoZk1MqYOzIgEcSBiQ7egVhl7oZ76XYBDoi/1433UUfO gTrXcc0vZ9Uu9FnGV7mQXwSnFEeBjxGMsveUFf+l85DOPe+716YLrgCInYWjWD6u LuhktVkODOtIbdhwDf6gxFpi24UFMtEP+s3INUEX84154rnMuHPXBHcaPkpkQk9t ZPqHWOJORFhrblfvn3jjuG1zbvUEjDlyU3Ju61dIIlp3uF88FdyP6x+8J3qqMPgb vNh/AcAw1bzz3C5kkkS21juggUi8ox4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:39:02 2026 by rpki-client