$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af402ef4-72e3-3010-a604-4d9cfbf5d403.roa File: af402ef4-72e3-3010-a604-4d9cfbf5d403.roa (raw, json) Hash identifier: fIvLiHwMIdE1WLqwThcPibR8TrFnEJ/mGNA/QkSgGlI= Subject key identifier: 97:C5:A5:1F:03:5D:44:62:CC:BC:61:11:EC:63:F4:E6:B0:87:57:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B5F07271742793C5C780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af402ef4-72e3-3010-a604-4d9cfbf5d403.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 7713 IP address blocks: 104.99.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b5:f0:72:71:74:27:93:c5:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=4219978b-820f-46d1-8779-4f6eecd46f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:6b:e4:c1:23:1f:8f:ae:95:c6:5e:b6:6c: fc:48:a3:f6:dc:3f:ef:9b:90:a5:4f:fc:9d:68:be: 4e:43:1d:22:14:56:03:aa:47:90:28:dc:17:c4:a7: 16:7e:6c:d4:b4:82:3a:6a:5f:98:9e:7f:4a:1e:97: 29:4d:09:87:1c:9b:ec:96:b5:7c:38:21:69:67:6d: 5a:ec:69:7c:e2:95:81:b4:d8:0b:da:b6:c4:62:40: cb:8c:e4:c7:8a:d2:9a:53:54:4c:91:04:b7:97:02: 48:36:cb:5d:46:08:79:81:6d:3c:65:92:a6:4c:26: 5c:34:a0:4e:7c:8e:78:fa:40:ae:22:90:f5:33:11: fb:2c:a9:21:fa:c5:f3:fe:3d:f8:1b:c1:9b:93:e7: d0:3f:37:8d:d3:cd:8a:d3:d6:30:89:13:e5:9c:74: ac:0e:e8:d8:66:03:f4:35:db:65:41:3d:ed:2e:db: 6c:b5:15:94:17:0d:bf:3c:4a:db:39:34:71:6e:28: 50:09:12:e9:d9:52:ac:8b:2d:f1:1f:84:b2:06:4b: 0e:45:26:fe:e0:ef:bc:77:bf:57:30:96:b5:16:d3: 54:ca:74:39:d2:f9:7d:6b:c3:06:69:33:25:2c:6e: 20:e4:34:b8:c2:d4:20:e1:d5:11:5f:24:d8:dc:ba: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C5:A5:1F:03:5D:44:62:CC:BC:61:11:EC:63:F4:E6:B0:87:57:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af402ef4-72e3-3010-a604-4d9cfbf5d403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:69:22:a2:7d:72:7d:61:07:22:f2:ed:85:ea:9e:ea:d1:ad: 9d:4c:ff:94:10:1f:44:43:8d:0b:3f:da:69:28:67:b4:f5:25: f4:ba:ba:5c:78:07:ee:c6:fa:ce:74:cb:50:68:71:cf:a7:32: f1:db:1f:5c:0e:65:5e:bd:1a:4f:8b:9e:31:4f:cb:d6:6a:87: 85:d3:7a:7c:69:66:93:38:ce:07:f9:ba:cd:37:8f:e5:1b:74: cd:4c:48:d3:2b:26:14:53:21:93:be:2a:05:9e:ad:28:f3:03: d7:63:dd:f1:56:00:f3:de:fe:ec:b7:cf:74:c7:67:e7:83:a2: e3:d0:7e:1c:e4:88:70:cf:75:0a:f9:43:01:58:78:89:3a:1f: a1:4c:e4:16:c7:76:96:29:ea:2b:fe:34:19:d1:24:22:50:22: ef:b2:be:b3:7f:b4:78:11:6e:75:07:72:1b:53:6d:29:01:e9: a9:55:40:f4:40:0a:2b:61:7d:af:81:09:fe:ea:4b:b8:c5:ae: b7:e2:9a:53:aa:21:66:6d:3a:d3:f3:b2:c1:bb:31:54:31:5f: 34:57:7b:d9:16:99:e3:38:b7:45:c1:fa:af:30:e5:ff:d8:7f: b1:02:1b:a8:de:30:3c:4e:d2:7a:54:06:d1:f9:f9:ab:fa:f1: a4:34:24:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7XwcnF0J5PFx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDIxOTk3OGItODIwZi00NmQxLTg3NzktNGY2ZWVjZDQ2ZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEVr5MEjH4+ulcZetmz8SKP23D/vm5ClT/yd aL5OQx0iFFYDqkeQKNwXxKcWfmzUtII6al+Ynn9KHpcpTQmHHJvslrV8OCFpZ21a 7Gl84pWBtNgL2rbEYkDLjOTHitKaU1RMkQS3lwJINstdRgh5gW08ZZKmTCZcNKBO fI54+kCuIpD1MxH7LKkh+sXz/j34G8Gbk+fQPzeN082K09YwiRPlnHSsDujYZgP0 NdtlQT3tLttstRWUFw2/PErbOTRxbihQCRLp2VKsiy3xH4SyBksORSb+4O+8d79X MJa1FtNUynQ50vl9a8MGaTMlLG4g5DS4wtQg4dURXyTY3LrBhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfFpR8DXURizLxhEexj9Oawh1e5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWY0MDJlZjQtNzJlMy0z MDEwLWE2MDQtNGQ5Y2ZiZjVkNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGO6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtpIqJ9cn1hByLy7YXqnurRrZ1M/5QQH0RDjQs/2mkoZ7T1JfS6ulx4 B+7G+s50y1Bocc+nMvHbH1wOZV69Gk+LnjFPy9Zqh4XTenxpZpM4zgf5us03j+Ub dM1MSNMrJhRTIZO+KgWerSjzA9dj3fFWAPPe/uy3z3THZ+eDouPQfhzkiHDPdQr5 QwFYeIk6H6FM5BbHdpYp6iv+NBnRJCJQIu+yvrN/tHgRbnUHchtTbSkB6alVQPRA Cithfa+BCf7qS7jFrrfimlOqIWZtOtPzssG7MVQxXzRXe9kWmeM4t0XB+q8w5f/Y f7ECG6jeMDxO0npUBtH5+av68aQ0JOU= -----END CERTIFICATE-----Generated at Tue Sep 22 19:12:17 2026 by rpki-client