$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa File: 169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa (raw, json) Hash identifier: a915+wcjDtc+qtcUvI/so+sHsvu7JXzIS0PrKFNT1hY= Subject key identifier: C3:C7:8B:60:DB:D0:AA:75:03:45:BB:4C:33:3F:DB:84:B3:A3:73:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B506C95B4CC9B178CF60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.97.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b5:06:c9:5b:4c:c9:b1:78:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=29d50a89-08d0-44f9-b52d-0b7339fc2683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:1a:c2:86:82:2c:67:28:f2:ad:f2:cb:66: a2:eb:e4:9c:ac:43:e5:fd:be:54:ee:e2:41:f3:7a: aa:5a:34:79:6b:46:f0:3e:d8:88:ce:50:29:d4:ff: a6:d7:47:7a:68:e8:a3:f5:5f:35:58:49:e3:7a:11: 71:4e:88:c6:30:08:96:b9:26:81:97:95:13:d2:ec: ff:60:0f:96:ff:b3:bd:27:51:fc:16:e9:d6:19:15: 76:64:4a:2b:a4:4c:dd:eb:97:c0:09:5f:38:75:1f: 3c:c8:5e:a6:67:d3:da:59:12:6f:4c:74:8f:45:e5: a1:7b:57:24:a8:f6:7c:da:d5:e8:70:73:31:eb:cd: b3:06:1d:47:25:bc:9e:5b:32:a8:8c:80:a9:71:7e: 6b:42:45:57:34:2f:49:92:14:49:45:b2:12:66:f2: 49:57:77:79:b2:af:6f:e4:cb:ba:85:34:5e:72:74: a0:da:13:87:85:30:65:72:ff:61:8d:24:d3:c8:d9: f6:d6:48:12:b5:76:21:b4:92:fc:b3:19:02:82:f5: 93:41:aa:77:e9:cb:ee:39:53:ea:ab:d7:78:33:03: 38:6b:93:f0:5b:aa:c6:6f:80:30:e0:d9:0c:02:ee: e9:f9:c5:8a:31:ce:85:b2:ec:30:4b:64:47:86:7f: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C7:8B:60:DB:D0:AA:75:03:45:BB:4C:33:3F:DB:84:B3:A3:73:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169e68fd-e9e4-3a73-baad-afb0efa4b6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.97.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6d:3c:56:e7:40:04:49:8f:12:d0:5f:54:ad:49:1c:ef:dc: 42:8a:4c:1f:3f:5b:c9:87:86:a0:27:36:45:f6:13:ca:3d:de: 46:0f:5d:14:f7:05:ff:2a:f4:23:a5:a9:c0:f1:3b:52:2f:3a: 55:e8:6a:9d:b3:05:c8:4e:81:15:44:2d:ec:1c:6a:de:74:89: f0:79:ba:5c:4a:30:e8:ea:a2:5b:e9:93:a2:91:d8:93:46:a5: 45:f2:6d:bb:3f:c8:fe:ff:10:3b:24:3d:88:e2:f3:fd:1c:6b: f9:30:0d:95:49:1e:3c:f9:b2:6f:95:18:98:f8:a5:29:c9:5c: 36:db:0e:df:71:d4:78:1e:e7:af:e4:c0:50:7a:55:27:37:4c: 5b:28:cb:ed:08:96:b1:de:bf:f2:d9:0c:20:9e:c1:76:28:f2: 41:f9:fc:a4:d6:be:32:04:65:23:28:55:bc:57:93:85:e4:c7: 30:6f:1e:21:3f:34:96:2b:eb:79:76:81:e4:6c:f3:ed:8d:0f: 89:d0:d7:cf:de:64:82:8f:cb:1c:25:5b:2c:fd:e8:36:68:ac: 7a:ed:10:0c:78:35:69:71:80:52:d0:bd:5b:ce:0a:bf:8c:8b: 6d:5d:6d:c9:48:5e:3f:d0:c2:ef:75:dc:69:7f:ae:92:68:eb: 97:35:5a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7UGyVtMybF4z2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MjlkNTBhODktMDhkMC00NGY5LWI1MmQtMGI3MzM5ZmMyNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkowawoaCLGco8q3yy2ai6+ScrEPl/b5U7uJB 83qqWjR5a0bwPtiIzlAp1P+m10d6aOij9V81WEnjehFxTojGMAiWuSaBl5UT0uz/ YA+W/7O9J1H8FunWGRV2ZEorpEzd65fACV84dR88yF6mZ9PaWRJvTHSPReWhe1ck qPZ82tXocHMx682zBh1HJbyeWzKojICpcX5rQkVXNC9JkhRJRbISZvJJV3d5sq9v 5Mu6hTRecnSg2hOHhTBlcv9hjSTTyNn21kgStXYhtJL8sxkCgvWTQap36cvuOVPq q9d4MwM4a5PwW6rGb4Aw4NkMAu7p+cWKMc6FsuwwS2RHhn+t8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPHi2Db0Kp1A0W7TDM/24Szo3N9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY5ZTY4ZmQtZTllNC0z YTczLWJhYWQtYWZiMGVmYTRiNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5tPFbnQARJjxLQX1StSRzv3EKKTB8/W8mHhqAnNkX2E8o93kYPXRT3 Bf8q9COlqcDxO1IvOlXoap2zBchOgRVELewcat50ifB5ulxKMOjqolvpk6KR2JNG pUXybbs/yP7/EDskPYji8/0ca/kwDZVJHjz5sm+VGJj4pSnJXDbbDt9x1Hge56/k wFB6VSc3TFsoy+0IlrHev/LZDCCewXYo8kH5/KTWvjIEZSMoVbxXk4XkxzBvHiE/ NJYr63l2geRs8+2ND4nQ18/eZIKPyxwlWyz96DZorHrtEAx4NWlxgFLQvVvOCr+M i21dbclIXj/Qwu913Gl/rpJo65c1Wqs= -----END CERTIFICATE-----Generated at Tue Sep 22 16:55:15 2026 by rpki-client