$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa File: 66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa (raw, json) Hash identifier: 4GZ7B9v+2NSzlyD0rSj2yVzbCLBWprDaS17fhGfCbKA= Subject key identifier: 5E:28:89:BF:4E:A2:29:B6:A6:B9:FA:F3:5F:F4:27:42:F5:E5:4F:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584FBAA12AD924010460A27F0100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 20940 IP address blocks: 104.84.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:2a:d9:24:01:04:60:a2:7f:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=e488c791-9179-486c-8037-c26ce3222129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:27:a5:04:48:36:38:18:4b:9f:be:e7:b5: cf:ee:47:74:12:7e:68:30:bb:78:c9:a5:be:1a:18: 07:af:0c:27:7f:2e:f4:15:f6:3c:e2:a2:f9:a1:25: cc:18:b0:8e:f1:33:da:17:02:9d:4a:ae:a5:80:a1: 96:73:26:29:ab:7a:76:b9:8a:52:c9:b0:cf:73:ac: ab:49:20:c8:a1:ce:79:27:42:8f:bf:62:e7:41:2a: ac:be:12:c3:c7:77:ef:a0:e4:c9:dd:7b:48:0c:d4: 76:7d:b3:c7:cc:5a:45:fd:32:90:0e:5f:72:66:e5: 69:3f:0e:b5:71:e0:ec:fa:c3:9a:e1:67:36:90:7c: 04:55:ff:c2:e2:f7:80:60:71:80:9c:f9:99:15:da: 77:f2:d3:8d:9e:c2:4d:6a:92:9c:6a:50:9d:6a:05: a4:f8:ba:9b:e6:0f:81:0e:cd:c1:c8:dd:55:4f:bd: 8b:29:0e:80:65:7c:94:64:39:b8:c3:d0:ec:35:59: 55:70:81:0b:37:6a:e6:f6:1a:df:a5:a8:ac:d0:a1: 1c:13:6c:42:a9:df:95:d7:14:2b:b6:27:72:09:91: 6a:c5:cd:59:d9:0c:99:48:f7:3f:f1:57:34:6e:0a: 2b:19:f1:b2:0a:09:9e:81:7e:d6:18:ef:cd:af:fc: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:28:89:BF:4E:A2:29:B6:A6:B9:FA:F3:5F:F4:27:42:F5:E5:4F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66a87bee-0aa7-3c2d-831d-044eb7c1e92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.84.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:13:28:3f:62:4f:6e:2d:af:44:dc:2d:d9:76:0d:8b:a9:1f: e9:0b:52:45:49:6a:b3:7e:24:d3:d8:7f:04:62:75:fe:47:37: 6f:b2:ae:99:33:98:55:29:bb:ca:af:1b:78:e7:00:14:d8:2a: ad:b2:9c:fc:45:57:67:f2:0b:5e:9b:45:3a:42:47:a8:7f:5f: af:45:28:ea:79:58:90:32:fd:45:29:f9:b8:96:8d:45:86:94: ab:f4:bd:98:21:c5:04:66:f4:14:cc:e2:be:b7:d7:b8:42:81: c7:40:56:be:5f:15:4c:84:86:ee:f2:af:b9:07:a9:12:46:58: 78:c7:63:1e:ba:6a:67:15:f2:57:98:3b:90:f6:a3:32:0c:29: fc:f6:10:16:bf:d3:13:0e:ab:c1:bb:14:8d:a3:cc:8d:e9:31: 57:e9:4a:44:0a:82:b9:44:4b:3c:cb:c9:e8:9c:e6:49:8b:f0: 89:db:95:ff:54:d1:c2:12:58:33:e6:72:4e:79:a1:98:f8:88: 62:cf:20:46:2a:3d:66:e8:7a:3a:77:d4:2a:23:06:32:7a:b7: 50:36:07:6d:a0:09:d3:6e:5f:de:ac:71:fc:99:e4:5a:de:d2: 0f:db:04:dc:f4:a2:09:19:74:7a:81:4a:9f:d8:78:03:a3:db: d7:25:70:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oSrZJAEEYKJ/AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZTQ4OGM3OTEtOTE3OS00ODZjLTgwMzctYzI2Y2UzMjIyMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3QnpQRINjgYS5++57XP7kd0En5oMLt4yaW+ GhgHrwwnfy70FfY84qL5oSXMGLCO8TPaFwKdSq6lgKGWcyYpq3p2uYpSybDPc6yr SSDIoc55J0KPv2LnQSqsvhLDx3fvoOTJ3XtIDNR2fbPHzFpF/TKQDl9yZuVpPw61 ceDs+sOa4Wc2kHwEVf/C4veAYHGAnPmZFdp38tONnsJNapKcalCdagWk+Lqb5g+B Ds3ByN1VT72LKQ6AZXyUZDm4w9DsNVlVcIELN2rm9hrfpais0KEcE2xCqd+V1xQr tidyCZFqxc1Z2QyZSPc/8Vc0bgorGfGyCgmegX7WGO/Nr/y80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4oib9Ooim2prn681/0J0L15U/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjZhODdiZWUtMGFhNy0z YzJkLTgzMWQtMDQ0ZWI3YzFlOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFSWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHETKD9iT24tr0TcLdl2DYupH+kLUkVJarN+JNPYfwRidf5HN2+yrpkz mFUpu8qvG3jnABTYKq2ynPxFV2fyC16bRTpCR6h/X69FKOp5WJAy/UUp+biWjUWG lKv0vZghxQRm9BTM4r6317hCgcdAVr5fFUyEhu7yr7kHqRJGWHjHYx66amcV8leY O5D2ozIMKfz2EBa/0xMOq8G7FI2jzI3pMVfpSkQKgrlESzzLyeic5kmL8Inblf9U 0cISWDPmck55oZj4iGLPIEYqPWboejp31CojBjJ6t1A2B22gCdNuX96scfyZ5Fre 0g/bBNz0ogkZdHqBSp/YeAOj29clcMo= -----END CERTIFICATE-----Generated at Thu Nov 5 19:52:36 2026 by rpki-client