$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa File: 800d7b08-0479-3bdf-801f-2e9c0c33474e.roa (raw, json) Hash identifier: ufiUxKUmjGUqROm5ctSgP/YA5DJnO6PXFr7bzX3+aTA= Subject key identifier: 9D:81:0A:1A:81:52:72:62:F3:6F:AA:BD:09:BB:4A:E2:38:CA:82:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B9719BFA8E4A65B1DDA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.84.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b9:71:9b:fa:8e:4a:65:b1:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=7c46461e-f166-4951-a2e3-0dd0f2d5d4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:f7:f1:ba:fc:06:3f:f5:7b:e3:d2:5c:50: 85:25:df:69:22:b3:f2:d1:ca:22:35:26:c6:47:0f: e1:df:ad:94:96:28:14:65:b1:34:39:e5:08:90:4c: 53:39:cb:52:b7:85:0d:7e:91:44:be:d1:05:72:86: 36:4d:fc:ec:bb:38:0e:4b:be:bb:e1:b2:6f:3c:78: 02:84:72:d1:1b:4f:12:10:bf:b1:96:80:c7:80:85: f0:23:1a:ef:63:96:7f:be:f8:89:d8:c5:f6:98:c2: 2d:84:ee:10:d1:c3:5a:20:f3:5e:7d:64:fc:21:02: ee:61:71:43:30:e7:c3:75:62:19:f3:47:a4:25:34: 5c:d7:dd:ff:61:c8:a5:93:e6:e4:90:f6:fc:ce:a6: e1:0f:e2:c8:85:55:6b:32:83:4b:ed:9b:f3:a4:5f: 5c:bd:e7:f5:77:1f:5c:40:27:12:47:d5:cd:34:62: 6c:d2:41:6b:00:2c:54:78:76:bc:46:e0:5d:0a:7e: b1:79:18:64:f3:d6:7f:d9:b7:ce:cf:90:cb:04:8c: 01:43:b4:a4:81:6e:42:bc:aa:8b:ae:97:6e:de:70: 59:f8:98:c5:3b:b8:63:af:ee:36:40:b3:39:7a:67: 81:97:b7:87:41:10:3f:f3:29:b8:58:85:b4:c2:30: 2a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:0A:1A:81:52:72:62:F3:6F:AA:BD:09:BB:4A:E2:38:CA:82:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/800d7b08-0479-3bdf-801f-2e9c0c33474e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.84.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d0:ee:37:47:5c:9a:34:0f:ce:38:86:9f:a9:7c:b0:44:45: 7c:21:3e:82:66:74:c4:2f:eb:62:fe:2c:98:d9:55:a5:e1:45: c4:47:45:45:90:12:45:0a:66:e3:b8:22:aa:b0:a2:e9:88:b6: 93:2e:37:1c:4f:98:ba:e6:c2:08:c4:86:fd:5c:cd:9d:0a:3e: 28:b5:59:01:21:22:87:58:1b:37:1e:cb:ec:d7:62:3a:10:c2: 23:d0:a4:07:77:7e:10:15:78:f5:bb:59:54:9b:b1:db:68:86: 29:c4:c4:a5:c9:24:6b:17:ae:45:0a:8a:83:ac:6f:8b:d8:9e: e5:d3:44:72:70:48:9b:65:f6:43:64:97:57:0c:30:ad:4c:79: f7:bf:9d:86:cd:e9:58:22:70:f7:76:96:a0:ba:81:1b:6f:a0: 84:1e:f2:54:ce:77:49:ab:bc:c0:5d:1a:4f:70:85:40:8c:0b: 07:46:6b:f3:c1:d7:ee:e2:52:5b:77:07:e2:3e:52:8d:b7:b7: de:8f:e7:0c:fa:81:51:9d:13:e8:08:23:60:be:79:1a:38:61: 50:63:37:46:94:f2:88:6f:4e:11:1a:0f:12:72:88:7a:31:60: 66:05:e3:e3:cf:6e:e8:9b:79:67:31:b2:bd:43:25:65:17:79: 0a:15:37:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7lxm/qOSmWx3aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk N2M0NjQ2MWUtZjE2Ni00OTUxLWEyZTMtMGRkMGYyZDVkNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2738br8Bj/1e+PSXFCFJd9pIrPy0coiNSbG Rw/h362UligUZbE0OeUIkExTOctSt4UNfpFEvtEFcoY2TfzsuzgOS7674bJvPHgC hHLRG08SEL+xloDHgIXwIxrvY5Z/vviJ2MX2mMIthO4Q0cNaIPNefWT8IQLuYXFD MOfDdWIZ80ekJTRc193/Ycilk+bkkPb8zqbhD+LIhVVrMoNL7ZvzpF9cvef1dx9c QCcSR9XNNGJs0kFrACxUeHa8RuBdCn6xeRhk89Z/2bfOz5DLBIwBQ7SkgW5CvKqL rpdu3nBZ+JjFO7hjr+42QLM5emeBl7eHQRA/8ym4WIW0wjAq5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2BChqBUnJi82+qvQm7SuI4yoJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODAwZDdiMDgtMDQ3OS0z YmRmLTgwMWYtMmU5YzBjMzM0NzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrQ7jdHXJo0D844hp+pfLBERXwhPoJmdMQv62L+LJjZVaXhRcRHRUWQ EkUKZuO4IqqwoumItpMuNxxPmLrmwgjEhv1czZ0KPii1WQEhIodYGzcey+zXYjoQ wiPQpAd3fhAVePW7WVSbsdtohinExKXJJGsXrkUKioOsb4vYnuXTRHJwSJtl9kNk l1cMMK1Mefe/nYbN6VgicPd2lqC6gRtvoIQe8lTOd0mrvMBdGk9whUCMCwdGa/PB 1+7iUlt3B+I+Uo23t96P5wz6gVGdE+gII2C+eRo4YVBjN0aU8ohvThEaDxJyiHox YGYF4+PPbuibeWcxsr1DJWUXeQoVN60= -----END CERTIFICATE-----Generated at Sun Sep 20 18:42:00 2026 by rpki-client