$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa File: b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa (raw, json) Hash identifier: NK3wLxw3c9ErZxeznNn/+xPk6Ip+aV78cHK9bLcGyf4= Subject key identifier: FB:06:F4:CB:07:F1:F2:BE:27:BC:80:C1:FC:F3:65:6C:9B:7F:18:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1B62521F59A38A7CE1044550 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.110.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:52:1f:59:a3:8a:7c:e1:04:45:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=27110611-14df-4a01-ae97-19d53486a4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:86:82:65:77:c6:36:d4:1c:06:d8:6e:20:8b: 78:23:fd:d0:1c:80:a3:56:e9:7f:08:7e:ba:55:81: d7:ad:4e:6a:61:2a:30:2e:a0:e0:f7:72:66:65:ed: df:9a:ce:fa:9f:ae:bd:0f:51:80:1b:61:ef:d3:b6: cc:42:7b:6f:7d:21:83:3c:ca:f9:27:62:d7:94:1d: af:a8:29:d7:29:4f:90:87:11:b4:60:1c:43:d8:60: d0:66:0f:16:47:84:e6:e5:ab:ad:a2:ce:33:ad:0b: ac:fe:9f:8a:60:d0:ab:58:ac:47:16:fe:7d:d5:38: 78:39:b4:7b:5c:20:e8:c9:fa:31:88:b3:b5:2b:f8: cc:44:9b:eb:8b:4c:4f:0d:3c:40:5f:9d:30:96:36: 1e:be:14:25:be:c5:31:5c:6e:be:6a:bc:16:74:a9: f3:cb:54:08:ce:61:db:bc:3c:92:d2:c3:c5:19:46: 76:91:f9:b3:49:a3:ab:72:97:81:f1:50:d3:e1:43: 87:1f:ae:0c:9c:15:1a:70:5c:fc:b0:79:ee:58:5b: ed:5d:e6:45:e1:ad:d6:96:4b:78:25:14:66:ab:41: 90:14:27:05:22:55:66:61:5c:03:c8:47:f6:b8:67: c0:7b:8b:14:5f:a9:5d:a0:71:58:10:0a:64:60:e8: ea:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:F4:CB:07:F1:F2:BE:27:BC:80:C1:FC:F3:65:6C:9B:7F:18:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02d33a4-08d1-3880-9566-9e3af1cdbcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.110.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:fd:81:f9:bf:ac:69:15:4c:45:3f:db:51:6d:f7:ae:26:c1: d2:28:b9:b6:e6:dc:8a:e7:48:28:1b:3b:5a:79:d9:06:d3:d6: a2:85:45:44:8b:c7:f8:f8:d6:85:36:32:38:fd:18:ca:d6:b3: 66:35:4b:22:3d:61:8b:05:f9:55:d5:76:c6:a2:83:bb:04:87: d3:2a:d4:14:83:64:7e:ea:9e:c0:7d:ff:11:6b:bd:63:13:89: e8:e4:74:6b:8c:33:de:66:e7:f4:a4:5e:0d:f1:0e:ae:86:e6: cf:67:44:27:b6:b1:ee:86:4e:53:3f:4a:04:c5:fd:ad:8d:d6: fc:78:a3:06:dd:1f:e8:06:08:be:14:f5:57:86:35:67:a2:f0: 23:b4:e9:45:f4:26:84:1f:b8:da:ad:53:45:94:db:4f:cb:0c: b4:ef:a8:61:94:32:0b:3c:b2:6b:31:64:f3:41:28:93:28:bb: cb:bd:39:d9:1d:fc:e7:97:10:60:30:8b:96:df:63:c8:12:aa: c2:2a:8c:46:05:f0:8d:85:4f:34:ba:88:98:9a:e2:65:f2:86: 71:33:65:a5:d0:5a:f3:8d:c8:51:de:b0:83:7f:df:5c:ca:1a: fc:0e:5c:3f:e1:3f:f6:15:da:c3:02:d9:29:9f:3c:ee:1d:fb: b7:ff:33:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlIfWaOKfOEERVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MjcxMTA2MTEtMTRkZi00YTAxLWFlOTctMTlkNTM0ODZhNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIaCZXfGNtQcBthuIIt4I/3QHICjVul/CH66 VYHXrU5qYSowLqDg93JmZe3fms76n669D1GAG2Hv07bMQntvfSGDPMr5J2LXlB2v qCnXKU+QhxG0YBxD2GDQZg8WR4Tm5autos4zrQus/p+KYNCrWKxHFv591Th4ObR7 XCDoyfoxiLO1K/jMRJvri0xPDTxAX50wljYevhQlvsUxXG6+arwWdKnzy1QIzmHb vDyS0sPFGUZ2kfmzSaOrcpeB8VDT4UOHH64MnBUacFz8sHnuWFvtXeZF4a3Wlkt4 JRRmq0GQFCcFIlVmYVwDyEf2uGfAe4sUX6ldoHFYEApkYOjqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsG9MsH8fK+J7yAwfzzZWybfxixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjAyZDMzYTQtMDhkMS0z ODgwLTk1NjYtOWUzYWYxY2RiY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaG6/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf9gfm/rGkVTEU/21Ft964mwdIoubbm3IrnSCgbO1p52QbT1qKFRUSL x/j41oU2Mjj9GMrWs2Y1SyI9YYsF+VXVdsaig7sEh9Mq1BSDZH7qnsB9/xFrvWMT iejkdGuMM95m5/SkXg3xDq6G5s9nRCe2se6GTlM/SgTF/a2N1vx4owbdH+gGCL4U 9VeGNWei8CO06UX0JoQfuNqtU0WU20/LDLTvqGGUMgs8smsxZPNBKJMou8u9Odkd /OeXEGAwi5bfY8gSqsIqjEYF8I2FTzS6iJia4mXyhnEzZaXQWvONyFHesIN/31zK GvwOXD/hP/YV2sMC2SmfPO4d+7f/My4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:41:07 2026 by rpki-client