$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa File: 3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa (raw, json) Hash identifier: RFdW5EO2Zmxoyqj+TyILnCpybXDihmkGFzF9H0+W9UI= Subject key identifier: 21:69:F1:82:A6:F9:F2:53:E5:F7:7F:0A:EE:49:71:22:76:65:BE:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897BA42DBDD6B19B8093AA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.87.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:ba:42:db:dd:6b:19:b8:09:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=5d1b00af-dea0-4b1b-bdb5-432b28c0e556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:6a:62:18:ed:b6:9a:4e:29:24:d1:66:cf: 10:49:62:ad:fa:8c:7e:19:16:9a:3e:57:1a:b2:aa: a6:c6:34:29:84:a6:ec:ee:7a:13:c3:ce:b7:04:41: 9d:58:ec:76:63:ee:40:58:d3:86:95:88:db:ff:ee: 1b:cf:77:38:14:b0:93:d7:49:ff:c0:ea:b4:d7:59: b1:c4:c1:fa:f1:4c:e7:bc:dd:fc:48:76:00:84:49: f2:6d:62:b3:76:1e:6a:de:e7:85:0f:c6:d7:56:a5: 98:5d:0b:d1:49:f1:5a:e9:ac:95:1d:14:e1:fe:17: f3:96:2c:29:48:5d:54:01:47:a7:8b:03:33:77:87: ff:75:53:72:dc:6f:fe:52:b3:8a:b7:cc:15:31:f3: 4e:3a:54:19:fa:44:cb:66:c5:f0:cc:49:9c:58:c9: 18:85:f1:87:b9:2c:04:da:39:68:e1:73:47:ae:93: cf:f2:cd:9e:60:e3:56:d0:d2:98:04:f3:35:3f:2e: 84:66:10:13:1c:0f:9b:de:7a:e1:a5:9c:b9:92:18: 26:02:de:cd:6f:31:b1:d9:77:f4:8c:c6:a5:f0:e7: c2:12:0e:79:cf:1a:dd:83:75:7b:70:7a:e0:d0:89: 8c:68:29:82:88:c0:28:56:4c:c3:76:56:b5:a7:7c: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:F1:82:A6:F9:F2:53:E5:F7:7F:0A:EE:49:71:22:76:65:BE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3428ef8d-ac0f-3150-a5bb-afb18a26fcf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.87.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d0:5c:d8:58:7b:1e:cf:08:7a:28:6d:42:11:2a:b3:c2:28: f7:95:b4:b5:ed:34:c6:9f:cb:47:93:5e:3d:44:98:c6:3e:36: 03:eb:24:ef:c8:c8:b4:a5:95:4c:d9:ca:b1:79:46:cb:d0:34: e4:6d:fc:35:3f:76:af:7c:e8:88:86:13:96:34:48:53:b6:ac: 1a:c3:27:16:ca:dd:8f:d3:f9:3c:17:db:c2:3a:fa:8c:3e:5e: 59:b6:ec:d6:6c:27:09:9d:f7:07:60:cb:c7:3e:e4:5c:ed:8c: d7:7b:0a:16:72:3c:65:f5:8f:8b:7f:f6:ab:fc:dd:dc:0c:fd: 0f:88:bf:6d:6d:93:c6:88:cd:db:76:84:f8:79:f2:c0:81:6a: 39:51:56:af:be:80:af:11:61:a2:90:94:32:77:1a:64:ac:21: dc:06:d9:1e:33:21:57:ef:bf:0e:43:8f:bd:b6:39:d8:f7:50: 77:28:81:ee:93:3c:ae:59:06:06:a5:b8:90:69:46:8a:21:5f: ff:c4:16:40:e2:a7:48:e0:de:b5:11:b7:4b:4b:f3:61:6a:9c: 7d:52:91:8b:58:92:c8:8e:01:60:7a:f5:8d:ef:13:7a:29:1d: 46:6e:e0:02:ee:17:b5:b0:4a:3a:65:19:05:94:94:b8:c1:d6: 0b:18:b1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7pC291rGbgJOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NWQxYjAwYWYtZGVhMC00YjFiLWJkYjUtNDMyYjI4YzBlNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUdqYhjttppOKSTRZs8QSWKt+ox+GRaaPlca sqqmxjQphKbs7noTw863BEGdWOx2Y+5AWNOGlYjb/+4bz3c4FLCT10n/wOq011mx xMH68UznvN38SHYAhEnybWKzdh5q3ueFD8bXVqWYXQvRSfFa6ayVHRTh/hfzliwp SF1UAUeniwMzd4f/dVNy3G/+UrOKt8wVMfNOOlQZ+kTLZsXwzEmcWMkYhfGHuSwE 2jlo4XNHrpPP8s2eYONW0NKYBPM1Py6EZhATHA+b3nrhpZy5khgmAt7NbzGx2Xf0 jMal8OfCEg55zxrdg3V7cHrg0ImMaCmCiMAoVkzDdla1p3whowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFp8YKm+fJT5fd/Cu5JcSJ2Zb48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQyOGVmOGQtYWMwZi0z MTUwLWE1YmItYWZiMThhMjZmY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATQXNhYex7PCHoobUIRKrPCKPeVtLXtNMafy0eTXj1EmMY+NgPrJO/I yLSllUzZyrF5RsvQNORt/DU/dq986IiGE5Y0SFO2rBrDJxbK3Y/T+TwX28I6+ow+ Xlm27NZsJwmd9wdgy8c+5FztjNd7ChZyPGX1j4t/9qv83dwM/Q+Iv21tk8aIzdt2 hPh58sCBajlRVq++gK8RYaKQlDJ3GmSsIdwG2R4zIVfvvw5Dj722Odj3UHcoge6T PK5ZBgaluJBpRoohX//EFkDip0jg3rURt0tL82FqnH1SkYtYksiOAWB69Y3vE3op HUZu4ALuF7WwSjplGQWUlLjB1gsYscA= -----END CERTIFICATE-----Generated at Tue Sep 22 02:51:49 2026 by rpki-client