$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa File: a68d256d-85f0-3e19-90ad-5a174eaaf663.roa (raw, json) Hash identifier: ieNxzwYFP9O8ipXcc+Ts7cGIc4U7xXnvIbvAj98kmCk= Subject key identifier: 58:62:88:7D:22:5B:D1:D5:18:19:0A:40:84:37:2E:C7:94:62:4C:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897BBD8621398BD9FF87300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.95.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:bb:d8:62:13:98:bd:9f:f8:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=6426923f-aef3-4fa2-a60c-653988c9e20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:58:db:4a:4d:c3:bd:d3:98:62:8d:71:27: b2:a4:3c:3f:7d:fc:bd:63:cc:d5:ef:c1:99:94:c4: c9:cb:df:8e:b7:4c:c8:08:5d:20:89:98:70:ea:4d: 9c:ae:69:ca:b5:30:75:32:c8:81:3f:03:0f:be:2e: 00:cb:29:26:b7:69:8f:1b:75:c4:91:70:fe:7c:58: 5a:47:91:63:fe:f3:ac:2a:92:c0:b8:7a:d7:de:e5: 91:86:53:19:b6:84:3c:a2:93:7f:06:84:42:f3:5b: 46:f4:db:e1:95:3c:c3:72:55:4c:75:b9:fa:18:43: 77:fc:c8:f9:d6:ae:26:74:21:37:57:6e:a2:6f:ad: 16:a9:98:c8:e3:f6:33:be:bb:8f:57:a4:78:be:ad: fd:00:42:dc:95:f9:56:a6:27:bf:bb:ba:0f:f3:f6: 46:1e:2c:1c:4a:8b:1b:d9:8e:d1:2c:5a:ad:d3:22: 90:ff:dc:77:fc:af:32:f8:cc:58:01:02:df:26:99: 46:f6:71:50:c1:13:6e:34:e8:61:c4:1d:a7:9d:d7: dc:d0:04:99:7e:6a:1a:a9:a4:eb:96:84:b9:de:7f: 0e:6d:73:8b:dd:27:44:a2:e6:54:c6:dc:8b:71:e1: 96:54:0e:27:40:39:d8:fa:60:75:40:fd:c9:99:69: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:62:88:7D:22:5B:D1:D5:18:19:0A:40:84:37:2E:C7:94:62:4C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.95.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2e:ab:08:4a:2a:b3:df:5d:48:19:c0:3a:43:11:98:26:c3: 9a:00:e6:0c:e7:d3:f8:19:64:1b:eb:ef:59:e7:76:47:df:cb: 11:af:22:e2:01:05:8a:41:7a:87:59:21:da:5b:b6:38:da:f3: 10:f2:76:86:ae:a9:7c:f6:cd:4a:43:70:bb:35:f1:b8:43:12: 16:dc:7b:05:a9:44:bd:5a:3f:f6:a5:4a:c7:28:ee:98:6d:7f: db:81:96:67:d2:ea:1f:6a:7b:57:f2:64:f4:a2:db:5d:f2:d5: 63:b2:32:1a:dd:30:7f:9d:bd:4a:04:6e:e9:7a:43:09:97:e8: d3:f3:e8:fe:03:61:3d:36:0e:10:cb:46:fd:ce:0f:92:52:fc: f0:14:b4:d0:bc:bf:00:bd:aa:d4:bb:ba:92:84:a9:b5:64:74: 22:41:4f:fd:f0:19:21:1e:b9:74:c2:3a:e8:2e:fb:d6:1f:8c: 03:d8:3c:18:de:6b:f2:a3:66:b8:3e:2c:70:2a:b9:15:d2:b2: 28:dc:40:ca:14:52:1c:51:d1:57:52:31:f6:0d:32:46:f8:dd: 1f:a4:10:a2:67:9a:d5:43:f1:d0:cc:1f:3a:a5:50:39:2c:9d: 41:c6:99:90:ee:dd:18:1e:dd:25:96:30:dd:f2:6d:f9:09:1a: 8c:be:7d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7vYYhOYvZ/4cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjQyNjkyM2YtYWVmMy00ZmEyLWE2MGMtNjUzOTg4YzllMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb9Y20pNw73TmGKNcSeypDw/ffy9Y8zV78GZ lMTJy9+Ot0zICF0giZhw6k2crmnKtTB1MsiBPwMPvi4Ayykmt2mPG3XEkXD+fFha R5Fj/vOsKpLAuHrX3uWRhlMZtoQ8opN/BoRC81tG9NvhlTzDclVMdbn6GEN3/Mj5 1q4mdCE3V26ib60WqZjI4/YzvruPV6R4vq39AELclflWpie/u7oP8/ZGHiwcSosb 2Y7RLFqt0yKQ/9x3/K8y+MxYAQLfJplG9nFQwRNuNOhhxB2nndfc0ASZfmoaqaTr loS53n8ObXOL3SdEouZUxtyLceGWVA4nQDnY+mB1QP3JmWnXAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhiiH0iW9HVGBkKQIQ3LseUYkzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTY4ZDI1NmQtODVmMC0z ZTE5LTkwYWQtNWExNzRlYWFmNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaF/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEuqwhKKrPfXUgZwDpDEZgmw5oA5gzn0/gZZBvr71nndkffyxGvIuIB BYpBeodZIdpbtjja8xDydoauqXz2zUpDcLs18bhDEhbcewWpRL1aP/alSsco7pht f9uBlmfS6h9qe1fyZPSi213y1WOyMhrdMH+dvUoEbul6QwmX6NPz6P4DYT02DhDL Rv3OD5JS/PAUtNC8vwC9qtS7upKEqbVkdCJBT/3wGSEeuXTCOugu+9YfjAPYPBje a/KjZrg+LHAquRXSsijcQMoUUhxR0VdSMfYNMkb43R+kEKJnmtVD8dDMHzqlUDks nUHGmZDu3Rge3SWWMN3ybfkJGoy+fYg= -----END CERTIFICATE-----Generated at Mon Sep 21 22:57:23 2026 by rpki-client