$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa File: 25c1edc8-2393-33e5-9a57-416cf07a8189.roa (raw, json) Hash identifier: Fw9ko7+/FleQiIYertJI3nTvo2u7u5YuexcfKCYM7kw= Subject key identifier: 95:D1:C4:CA:71:E3:7E:87:08:44:67:6D:44:4F:6B:F9:FB:C8:DF:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B1BE84FAD49B607CE6D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.86.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b1:be:84:fa:d4:9b:60:7c:e6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=a29f63db-9065-42b8-bf03-98b388f67701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c6:5a:0f:05:04:26:ab:de:18:57:c9:4b:11: cb:8b:c0:fd:1e:e2:20:d7:08:08:d5:08:dd:ef:e3: 70:4a:d4:f3:86:1b:86:48:71:bc:be:2f:d6:da:e9: 6e:c4:51:67:6d:9c:9e:63:bf:b4:cd:37:2b:2b:31: b9:df:63:1c:90:0b:72:fa:c9:67:e3:52:36:46:12: c2:c4:6a:7e:5c:f6:66:3f:4f:fa:48:6c:f7:58:e8: a3:43:d1:4e:9a:c3:cd:2b:2d:42:0f:d3:72:83:8d: 30:db:5f:33:68:a4:9c:7d:0e:b7:fd:63:d2:85:ce: d0:26:b9:11:ba:bf:bc:c6:9e:11:b2:54:ff:f3:a9: e4:33:e1:61:15:1d:8e:38:34:4d:a5:e4:4a:97:8a: e2:92:1a:10:be:01:c5:4c:5a:02:7c:eb:17:83:4d: d6:10:de:40:b5:9b:71:b1:83:99:21:10:b8:6e:7b: 80:97:4e:0b:ba:54:6c:16:3d:16:56:59:02:22:c5: 65:7c:e5:32:8b:f1:69:5e:04:79:02:fa:5c:5a:7f: 6c:12:74:56:bd:38:94:8b:9f:fc:26:77:f4:31:6e: 92:8b:e7:65:f0:50:36:70:c4:1a:50:6f:69:2d:fd: 92:b5:74:dc:88:48:d0:0a:fa:6d:a4:c4:12:18:bb: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D1:C4:CA:71:E3:7E:87:08:44:67:6D:44:4F:6B:F9:FB:C8:DF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0c:84:d1:0c:c2:27:e2:f6:d8:e9:a7:d0:af:26:24:2d:a5: 20:97:45:21:47:e9:14:b7:0e:1c:0d:9a:77:cc:ad:b0:28:05: 2a:a8:d7:75:cd:98:29:7d:ce:ca:7b:31:cb:da:73:f9:3b:f1: fd:ad:c5:72:bc:6f:15:5c:00:8a:92:09:47:fc:28:06:64:55: 37:7a:a8:e0:8c:ec:c9:45:28:95:f1:30:44:63:58:7f:28:35: 14:b8:7a:bc:ea:15:dd:62:06:4f:b6:48:86:74:61:43:04:85: 04:e2:de:99:45:8f:d3:33:9d:92:43:49:f3:1a:7a:d5:ef:6e: f8:ce:af:6d:de:5d:4b:4d:78:21:51:8b:1e:10:c2:f1:35:03: 6e:c4:61:d9:1a:e5:83:80:ab:d6:37:b1:75:f7:fd:b3:c1:3f: 28:b0:8d:6b:68:4f:a3:66:ef:a4:25:4d:9e:46:0b:24:a4:76: 83:02:91:3a:4e:cf:a4:8e:7f:cc:ee:fd:3f:fb:b5:96:d6:9e: c3:4e:f5:00:c7:8c:38:1f:63:8c:9f:d8:7d:7b:9d:88:4a:36: 4a:20:bd:d4:d2:d3:7f:f2:87:f7:aa:2c:7a:d1:df:9f:bc:88: 5a:9d:6f:3c:45:43:d0:f0:ca:f2:c3:d3:91:e1:4c:27:57:58: 3f:24:ca:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7G+hPrUm2B85tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YTI5ZjYzZGItOTA2NS00MmI4LWJmMDMtOThiMzg4ZjY3NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMZaDwUEJqveGFfJSxHLi8D9HuIg1wgI1Qjd 7+NwStTzhhuGSHG8vi/W2uluxFFnbZyeY7+0zTcrKzG532MckAty+sln41I2RhLC xGp+XPZmP0/6SGz3WOijQ9FOmsPNKy1CD9Nyg40w218zaKScfQ63/WPShc7QJrkR ur+8xp4RslT/86nkM+FhFR2OODRNpeRKl4rikhoQvgHFTFoCfOsXg03WEN5AtZtx sYOZIRC4bnuAl04LulRsFj0WVlkCIsVlfOUyi/FpXgR5AvpcWn9sEnRWvTiUi5/8 Jnf0MW6Si+dl8FA2cMQaUG9pLf2StXTciEjQCvptpMQSGLuqgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXRxMpx436HCERnbURPa/n7yN+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVjMWVkYzgtMjM5My0z M2U1LTlhNTctNDE2Y2YwN2E4MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0MhNEMwifi9tjpp9CvJiQtpSCXRSFH6RS3DhwNmnfMrbAoBSqo13XN mCl9zsp7Mcvac/k78f2txXK8bxVcAIqSCUf8KAZkVTd6qOCM7MlFKJXxMERjWH8o NRS4erzqFd1iBk+2SIZ0YUMEhQTi3plFj9MznZJDSfMaetXvbvjOr23eXUtNeCFR ix4QwvE1A27EYdka5YOAq9Y3sXX3/bPBPyiwjWtoT6Nm76QlTZ5GCySkdoMCkTpO z6SOf8zu/T/7tZbWnsNO9QDHjDgfY4yf2H17nYhKNkogvdTS03/yh/eqLHrR35+8 iFqdbzxFQ9DwyvLD05HhTCdXWD8kyok= -----END CERTIFICATE-----Generated at Sun Sep 20 21:42:43 2026 by rpki-client