$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e21d52e-79ad-3256-a390-7cde55e3e72f.roa File: 2e21d52e-79ad-3256-a390-7cde55e3e72f.roa (raw, json) Hash identifier: OOkJ4Sb9Grvf8+//JQmHA/kkvT8kS+iW4llLNcAFhhc= Subject key identifier: 03:B8:7F:CE:A8:DB:31:A2:BD:FA:AD:C9:4E:19:C6:88:35:8D:7A:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897BD9EA7D01EDCB0291100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e21d52e-79ad-3256-a390-7cde55e3e72f.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.102.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:bd:9e:a7:d0:1e:dc:b0:29:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=f7eb9aa2-cb5e-4caa-bde0-1bbdb8393c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:fb:49:8e:27:10:e9:ce:d1:bd:70:a9:b9: 08:8c:73:a3:4c:76:e7:c9:4f:32:e1:b5:77:d9:45: 0b:51:1b:98:c3:d8:ac:f6:cd:32:e5:b2:97:e6:63: 72:5c:88:f1:32:9b:03:0a:ee:83:2b:c9:fb:f0:0c: 77:d9:f2:e1:bd:f3:d0:ff:54:e1:41:d7:d0:bd:c8: 6a:cd:96:14:14:d8:07:35:c0:0b:2e:a2:b6:61:9e: 4a:73:7f:cb:9b:c7:80:db:c9:53:5b:da:14:89:9c: e6:b7:bf:94:81:0b:db:03:bf:6f:6d:4a:9d:1a:7a: 28:a8:25:e6:1d:ac:e3:cf:c3:e4:9d:7e:c0:f9:49: 51:83:41:84:d3:82:bd:41:57:92:98:b1:44:0f:5c: 6e:47:9f:06:22:7e:22:56:00:e6:c0:39:a3:9f:c7: 5e:19:24:4e:f9:c3:a5:bf:32:d0:51:ce:db:e1:f7: 65:34:40:e6:18:96:9b:f6:b5:c9:83:c4:dd:1a:d9: 23:b4:ec:9a:20:4f:17:01:fc:56:a8:6b:2d:9d:a7: d9:33:37:42:27:93:16:e6:06:b5:b2:7c:7b:99:5a: 13:6a:f1:93:33:73:dc:a2:ca:03:86:f9:f2:f6:76: bb:75:73:91:ae:8f:e0:2e:cb:58:bf:e4:19:14:63: d9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B8:7F:CE:A8:DB:31:A2:BD:FA:AD:C9:4E:19:C6:88:35:8D:7A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e21d52e-79ad-3256-a390-7cde55e3e72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.102.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d0:fb:2a:d1:6c:c8:7e:d5:68:b3:a9:ff:85:79:6c:c9:4a: 4c:f6:29:cf:f9:e9:a0:9c:b3:21:91:d3:04:b3:68:5f:83:31: 48:5c:aa:72:d4:65:c2:e9:1a:1d:03:d5:aa:b8:c0:a9:6b:2c: 95:75:a1:d6:4e:78:e8:cc:84:b0:0c:25:9a:22:52:83:b7:20: 39:3e:2c:1a:86:09:97:01:59:3a:64:ff:bc:9f:a2:93:d1:f5: 6e:47:9d:ab:ea:72:cd:1d:92:6c:e7:92:61:9d:02:ba:5c:31: 2f:67:10:51:ef:4c:70:83:c6:ae:bf:0a:50:20:53:2d:30:99: 31:99:37:98:dd:b8:b4:2f:66:b9:d3:2c:75:53:f7:18:5b:a6: 03:d0:9b:ef:d5:7d:91:fa:a1:bf:8d:79:2a:6c:42:24:97:5e: fe:5d:44:2b:23:52:30:36:1f:24:78:f7:26:3c:77:ac:c3:6d: 80:4c:62:26:7e:23:24:9f:81:59:90:8f:01:86:04:75:eb:84: 19:c4:74:d6:cc:a1:dc:f5:40:06:ac:1e:9e:3a:11:95:12:e5: 41:b2:6b:75:94:e5:5e:5a:db:d4:39:d5:75:49:91:16:ce:5d: e5:23:bf:1e:e8:34:82:44:28:d5:f1:c8:6c:0d:5d:9e:58:8e: fd:2b:f4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl72ep9Ae3LApEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjdlYjlhYTItY2I1ZS00Y2FhLWJkZTAtMWJiZGI4MzkzYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNz7SY4nEOnO0b1wqbkIjHOjTHbnyU8y4bV3 2UULURuYw9is9s0y5bKX5mNyXIjxMpsDCu6DK8n78Ax32fLhvfPQ/1ThQdfQvchq zZYUFNgHNcALLqK2YZ5Kc3/Lm8eA28lTW9oUiZzmt7+UgQvbA79vbUqdGnooqCXm Hazjz8PknX7A+UlRg0GE04K9QVeSmLFED1xuR58GIn4iVgDmwDmjn8deGSRO+cOl vzLQUc7b4fdlNEDmGJab9rXJg8TdGtkjtOyaIE8XAfxWqGstnafZMzdCJ5MW5ga1 snx7mVoTavGTM3PcosoDhvny9na7dXORro/gLstYv+QZFGPZswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO4f86o2zGivfqtyU4Zxog1jXq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUyMWQ1MmUtNzlhZC0z MjU2LWEzOTAtN2NkZTU1ZTNlNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATQ+yrRbMh+1Wizqf+FeWzJSkz2Kc/56aCcsyGR0wSzaF+DMUhcqnLU ZcLpGh0D1aq4wKlrLJV1odZOeOjMhLAMJZoiUoO3IDk+LBqGCZcBWTpk/7yfopPR 9W5Hnavqcs0dkmznkmGdArpcMS9nEFHvTHCDxq6/ClAgUy0wmTGZN5jduLQvZrnT LHVT9xhbpgPQm+/VfZH6ob+NeSpsQiSXXv5dRCsjUjA2HyR49yY8d6zDbYBMYiZ+ IySfgVmQjwGGBHXrhBnEdNbModz1QAasHp46EZUS5UGya3WU5V5a29Q51XVJkRbO XeUjvx7oNIJEKNXxyGwNXZ5Yjv0r9CE= -----END CERTIFICATE-----Generated at Tue Sep 22 21:19:13 2026 by rpki-client