$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa File: 3e147995-92fe-3a09-bd47-ecd54b73da6c.roa (raw, json) Hash identifier: RvEHdASy3RABvW3R+/pdmEYICyfWNPY90odILWFxz5w= Subject key identifier: 25:CB:9D:82:E3:D5:95:37:FF:98:B2:C8:EC:A2:C1:97:BB:8E:1F:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B64953D4FF6284DD2500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.101.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b6:49:53:d4:ff:62:84:dd:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=db2c8899-ecd9-484c-8ff8-0b90636b04f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:86:50:1b:be:54:49:f1:14:4f:5d:b8:7f: 93:bd:dd:85:89:f3:0c:aa:ee:72:86:45:83:5b:df: 9e:43:7f:78:78:36:d9:e8:4f:44:c6:d2:1e:5c:40: 02:7e:60:c6:23:2b:16:7f:40:a9:b7:10:9d:df:82: 62:f5:6e:c9:94:6e:dd:52:0c:19:80:8d:31:a9:6c: af:38:17:b5:f1:8d:db:8c:c1:49:72:0b:84:19:d6: be:5d:8c:35:77:91:c0:90:8a:96:9d:c7:72:3e:df: 3c:49:b7:63:d5:db:49:33:52:22:2e:54:04:0c:35: 49:72:9b:a2:2e:3e:86:fe:46:c1:f7:62:ff:d0:91: 02:a1:91:77:7a:f0:e9:e9:43:09:32:24:ad:3f:39: f8:35:93:d3:d3:77:ec:04:bd:b6:a7:cb:f7:a5:83: fe:85:91:2e:5f:12:4e:8b:76:39:3c:48:58:18:b3: c3:49:69:e1:90:7a:48:de:69:5d:af:53:ca:87:ca: 7e:4f:8d:1b:da:e7:8b:3e:80:16:e1:9f:67:64:86: 71:9a:02:97:ef:1b:24:7e:61:43:67:c8:90:52:f5: e9:e7:eb:c7:da:0d:ee:0a:ab:02:c9:79:b6:e6:7b: cc:c0:77:8e:5f:ac:c1:17:75:ce:3b:93:37:9e:cb: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CB:9D:82:E3:D5:95:37:FF:98:B2:C8:EC:A2:C1:97:BB:8E:1F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e147995-92fe-3a09-bd47-ecd54b73da6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:aa:09:c9:da:bf:b2:35:13:e8:33:f7:1f:c2:a0:53:e2:33: e1:ab:fa:52:3b:37:cd:f4:97:9f:56:10:61:d4:71:23:2a:cd: a6:9c:22:9e:9f:ca:5a:7b:04:d4:6c:b3:e1:0c:a0:9e:33:d1: da:ec:80:7c:bc:14:5b:53:c0:cd:b8:bf:c1:6a:50:9c:3b:d3: 97:35:29:e7:30:24:ce:95:6d:19:ac:42:01:2b:4b:3d:b0:22: 6c:9f:46:30:7a:ea:0c:58:2c:ce:23:5f:0a:aa:cb:a6:1c:94: 27:d5:ef:ec:28:96:ac:8e:99:64:96:6d:f7:79:6e:b0:71:36: a6:51:6f:f1:2a:d8:b1:23:ee:fd:a6:b7:a1:23:0d:ef:8e:92: a6:f5:eb:eb:5a:aa:c2:f3:b0:ea:ea:53:36:1f:f4:27:08:e9: 78:4e:cf:94:bc:ef:d1:80:b0:69:84:8b:c0:9f:75:3c:7a:4b: 33:9f:92:8c:5a:4e:d5:16:41:90:d3:bc:b3:34:5a:5f:91:1b: 6e:05:61:76:98:74:55:6f:02:c0:4e:c4:3f:34:7c:da:27:31: 15:f7:f5:27:b8:69:b8:b9:13:c7:e8:c4:17:74:5c:1e:cb:40: a5:bd:d9:fa:9a:6e:9b:15:c5:a8:15:51:f4:d8:2f:63:6b:4f: dc:39:85:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7ZJU9T/YoTdJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGIyYzg4OTktZWNkOS00ODRjLThmZjgtMGI5MDYzNmIwNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry+GUBu+VEnxFE9duH+Tvd2FifMMqu5yhkWD W9+eQ394eDbZ6E9ExtIeXEACfmDGIysWf0CptxCd34Ji9W7JlG7dUgwZgI0xqWyv OBe18Y3bjMFJcguEGda+XYw1d5HAkIqWncdyPt88Sbdj1dtJM1IiLlQEDDVJcpui Lj6G/kbB92L/0JECoZF3evDp6UMJMiStPzn4NZPT03fsBL22p8v3pYP+hZEuXxJO i3Y5PEhYGLPDSWnhkHpI3mldr1PKh8p+T40b2ueLPoAW4Z9nZIZxmgKX7xskfmFD Z8iQUvXp5+vH2g3uCqsCyXm25nvMwHeOX6zBF3XOO5M3nsv6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXLnYLj1ZU3/5iyyOyiwZe7jh+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2UxNDc5OTUtOTJmZS0z YTA5LWJkNDctZWNkNTRiNzNkYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuqCcnav7I1E+gz9x/CoFPiM+Gr+lI7N830l59WEGHUcSMqzaacIp6f ylp7BNRss+EMoJ4z0drsgHy8FFtTwM24v8FqUJw705c1KecwJM6VbRmsQgErSz2w ImyfRjB66gxYLM4jXwqqy6YclCfV7+wolqyOmWSWbfd5brBxNqZRb/Eq2LEj7v2m t6EjDe+Okqb16+taqsLzsOrqUzYf9CcI6XhOz5S879GAsGmEi8CfdTx6SzOfkoxa TtUWQZDTvLM0Wl+RG24FYXaYdFVvAsBOxD80fNonMRX39Se4abi5E8foxBd0XB7L QKW92fqabpsVxagVUfTYL2NrT9w5hVY= -----END CERTIFICATE-----Generated at Tue Sep 22 14:12:47 2026 by rpki-client