$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa File: 34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa (raw, json) Hash identifier: Tw7O3icag7P3HZRF0irjVB8eCDlDmftjpPmfY+4YPac= Subject key identifier: 78:1F:E8:0B:17:3C:50:98:27:BA:B8:DA:EA:03:B0:7C:53:37:0E:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F15CCFE8E3C19DDEDB6A0DF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.67.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:fe:8e:3c:19:dd:ed:b6:a0:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=7eab3237-1a39-421c-97b5-38251f2a8193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:1c:ab:69:ec:c7:c7:0a:39:9a:d3:99:be: e0:81:4c:65:76:7a:91:05:d3:33:04:af:f4:c3:fb: 8b:a6:b5:56:b5:ef:fc:e3:43:1d:cb:a9:75:51:0a: f2:66:c6:57:78:cd:b4:07:92:13:03:b7:1a:17:7d: 89:c5:a9:01:65:2a:35:8a:8b:1e:44:d6:3b:47:97: 3c:b1:18:7c:46:b3:75:7a:35:78:a8:7d:d7:42:ed: 95:d3:ec:4e:1b:7e:f1:89:a1:8f:bc:eb:66:27:a7: 90:d4:28:70:ab:df:68:37:c4:a9:d8:e7:f4:62:5a: 97:25:3d:fe:b3:b7:30:58:f3:b0:cf:d8:15:1a:c9: 5c:cb:a3:a6:2a:f5:39:26:32:54:0c:f1:27:68:0d: c2:7e:7c:f2:a9:f1:be:29:7d:eb:6e:84:ca:58:52: d3:f3:57:4d:48:db:88:91:53:2b:c8:1d:1b:9d:18: 7d:37:d5:5f:31:58:1f:52:5c:2b:a5:4c:a9:8d:da: d7:46:55:bc:5e:be:3c:95:32:0f:f8:e8:eb:e7:a8: 2a:92:81:e1:bd:b2:9b:fb:7e:58:f9:8a:62:28:24: be:ac:68:0e:d5:05:ff:7a:a5:9c:d6:56:a2:f7:69: 37:97:03:ad:bd:15:fa:07:e2:23:36:45:13:18:bb: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1F:E8:0B:17:3C:50:98:27:BA:B8:DA:EA:03:B0:7C:53:37:0E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34d84d99-9ea0-3cdd-8a20-5280734a79d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.67.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1f:ed:9c:08:2d:bb:e4:cf:56:85:b8:f3:86:7a:a3:2b:57: 8e:45:bc:72:37:be:03:ec:ab:29:20:dd:64:86:71:ce:fd:d6: 6b:52:6b:d3:a0:ae:2d:c9:77:0c:ff:53:36:5f:c7:52:bb:9f: 17:6f:00:bf:15:99:d6:bb:b6:f3:bd:15:dc:e2:20:3b:42:40: 88:6a:49:61:9a:be:ea:c8:68:65:33:08:5d:65:f3:ce:6f:3f: ed:92:ce:4c:95:11:9e:0f:5d:fc:c4:c2:9e:f7:c4:36:31:ea: d6:00:16:d1:be:e0:0c:e3:ba:37:e5:83:f1:a4:b9:c1:33:64: 1b:49:8f:c5:66:8d:b4:06:06:2e:89:3f:4b:ee:3f:11:b0:20: 1b:ad:4a:89:e0:ee:d2:1e:c1:f2:0a:2f:31:0d:d9:da:f2:9d: b2:bd:e7:3b:23:d4:01:dd:1c:8e:5c:56:f7:8a:94:31:2e:ab: 5a:9c:41:d9:c6:28:88:7e:f1:b6:be:7b:c3:b2:b2:fd:b1:2c: f3:c1:af:c6:fc:70:05:86:24:0d:bf:04:08:0a:d4:38:c1:b1: 68:01:76:57:7d:49:41:ae:23:20:bf:b4:f6:f1:32:8f:32:41: 29:64:e6:95:8c:62:e7:86:6b:1f:d6:90:e4:aa:38:fd:e7:3d: 77:26:49:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzP6OPBnd7bag3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk N2VhYjMyMzctMWEzOS00MjFjLTk3YjUtMzgyNTFmMmE4MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+gcq2nsx8cKOZrTmb7ggUxldnqRBdMzBK/0 w/uLprVWte/840Mdy6l1UQryZsZXeM20B5ITA7caF32JxakBZSo1ioseRNY7R5c8 sRh8RrN1ejV4qH3XQu2V0+xOG37xiaGPvOtmJ6eQ1Chwq99oN8Sp2Of0YlqXJT3+ s7cwWPOwz9gVGslcy6OmKvU5JjJUDPEnaA3CfnzyqfG+KX3rboTKWFLT81dNSNuI kVMryB0bnRh9N9VfMVgfUlwrpUypjdrXRlW8Xr48lTIP+Ojr56gqkoHhvbKb+35Y +YpiKCS+rGgO1QX/eqWc1lai92k3lwOtvRX6B+IjNkUTGLvnUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgf6AsXPFCYJ7q42uoDsHxTNw6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRkODRkOTktOWVhMC0z Y2RkLThhMjAtNTI4MDczNGE3OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaEPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYf7ZwILbvkz1aFuPOGeqMrV45FvHI3vgPsqykg3WSGcc791mtSa9Og ri3Jdwz/UzZfx1K7nxdvAL8Vmda7tvO9FdziIDtCQIhqSWGavurIaGUzCF1l885v P+2SzkyVEZ4PXfzEwp73xDYx6tYAFtG+4Azjujflg/GkucEzZBtJj8VmjbQGBi6J P0vuPxGwIButSong7tIewfIKLzEN2drynbK95zsj1AHdHI5cVveKlDEuq1qcQdnG KIh+8ba+e8Oysv2xLPPBr8b8cAWGJA2/BAgK1DjBsWgBdld9SUGuIyC/tPbxMo8y QSlk5pWMYueGax/WkOSqOP3nPXcmSZE= -----END CERTIFICATE-----Generated at Tue Sep 22 02:56:16 2026 by rpki-client