$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa File: c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa (raw, json) Hash identifier: uH/R9gTW/sMBMq2zS0cdl/+tzIf2i9uqWl/OlsXqzOc= Subject key identifier: 41:70:C2:56:D7:D0:09:BE:7B:DB:EC:38:EF:C4:AD:A4:0F:76:B0:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B45F43E6DAF710DF4CC8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.95.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b4:5f:43:e6:da:f7:10:df:4c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=657f0ab9-6724-4414-b211-a9cbbe4a64a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:4e:bd:a0:bd:e7:93:79:0e:f7:4b:5a:b9: c3:0d:fe:73:77:02:e0:6f:c7:c2:52:5e:c1:fd:41: 45:b8:84:12:9a:42:0a:c2:cc:be:11:e1:1b:5c:4a: f4:a4:12:09:65:22:2c:8e:9c:5a:16:55:1f:6d:5a: df:0d:78:e6:26:03:04:24:b6:4d:18:0c:44:86:e4: d8:18:d4:08:af:54:c3:03:41:69:ee:d4:ca:d1:ab: 90:30:d3:f0:ed:0e:f1:b9:13:7b:42:1b:a2:cd:88: 69:9a:ff:55:33:7a:1a:6f:c7:94:2f:2f:9a:86:a5: 7c:97:81:99:18:66:85:74:a9:58:12:6f:fd:ab:9f: 70:be:7f:cb:40:be:b0:70:8d:ed:98:ed:a2:fe:ca: d1:a1:ae:4c:b7:a1:6e:6f:89:7c:99:52:c5:5b:41: 91:8e:5c:66:b9:c2:33:78:f0:7d:c6:1d:41:44:41: a1:c8:ca:bb:c4:e5:f9:b1:0a:99:5c:62:0c:4c:f9: b2:2e:67:6c:65:6f:68:e9:6e:f3:b2:bb:44:98:e9: c2:e5:74:7b:bd:8f:e5:43:61:ae:55:aa:c1:ea:b8: 3e:9b:44:8f:45:51:86:fb:5c:57:83:91:98:c5:49: bc:2b:82:d0:44:01:af:7d:05:2c:c4:f2:0a:31:e6: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:70:C2:56:D7:D0:09:BE:7B:DB:EC:38:EF:C4:AD:A4:0F:76:B0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.95.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:01:2c:27:23:aa:92:cc:69:db:46:97:76:49:49:76:53:f6: d6:07:b3:51:d6:e5:e7:07:70:6c:20:6f:06:d6:0c:21:41:18: 3b:d0:7a:58:47:8f:93:5a:b9:25:0f:6d:ea:11:32:be:12:98: c9:cf:79:38:d8:9e:f1:22:fa:68:d5:f0:84:3d:61:63:a0:79: 5b:47:25:0d:b1:30:66:db:67:26:e2:5c:ea:9e:2a:2f:6d:3e: 4c:3f:78:d7:5e:7a:e4:62:0b:d9:0d:11:a0:50:1f:db:00:26: 11:5b:38:e7:ad:64:81:53:3a:86:6e:30:64:af:d3:e0:05:16: bb:b3:af:43:cc:f5:6f:f4:83:16:19:f2:9a:5f:77:f5:ae:4e: ef:c9:77:9a:23:0b:45:5d:2e:0a:36:7e:f4:63:81:16:b2:e2: 7b:a4:80:89:9a:2f:d9:f6:bb:f7:fb:f5:b9:cd:c7:7c:f9:52: 8b:1e:86:69:67:82:8e:02:e0:f9:6b:0f:cf:f4:83:52:44:04: 9b:41:eb:19:cc:3b:0a:2b:7f:e6:2d:4f:c5:3e:03:1d:1b:fd: e0:59:0a:ab:83:9a:fc:cc:ff:6c:73:78:82:54:7a:de:c7:03: ce:35:34:bc:02:69:9e:25:05:61:5b:f9:57:9a:d4:9c:88:39: 5b:e5:23:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7RfQ+ba9xDfTMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjU3ZjBhYjktNjcyNC00NDE0LWIyMTEtYTljYmJlNGE2NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRFOvaC955N5DvdLWrnDDf5zdwLgb8fCUl7B /UFFuIQSmkIKwsy+EeEbXEr0pBIJZSIsjpxaFlUfbVrfDXjmJgMEJLZNGAxEhuTY GNQIr1TDA0Fp7tTK0auQMNPw7Q7xuRN7QhuizYhpmv9VM3oab8eULy+ahqV8l4GZ GGaFdKlYEm/9q59wvn/LQL6wcI3tmO2i/srRoa5Mt6Fub4l8mVLFW0GRjlxmucIz ePB9xh1BREGhyMq7xOX5sQqZXGIMTPmyLmdsZW9o6W7zsrtEmOnC5XR7vY/lQ2Gu VarB6rg+m0SPRVGG+1xXg5GYxUm8K4LQRAGvfQUsxPIKMealyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFwwlbX0Am+e9vsOO/EraQPdrBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNlNGNhY2QtYWQyZC0z NDhkLTgzNTQtZjdhMGYwZGQxODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaF/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkBLCcjqpLMadtGl3ZJSXZT9tYHs1HW5ecHcGwgbwbWDCFBGDvQelhH j5NauSUPbeoRMr4SmMnPeTjYnvEi+mjV8IQ9YWOgeVtHJQ2xMGbbZybiXOqeKi9t Pkw/eNdeeuRiC9kNEaBQH9sAJhFbOOetZIFTOoZuMGSv0+AFFruzr0PM9W/0gxYZ 8ppfd/WuTu/Jd5ojC0VdLgo2fvRjgRay4nukgImaL9n2u/f79bnNx3z5Uosehmln go4C4PlrD8/0g1JEBJtB6xnMOworf+YtT8U+Ax0b/eBZCquDmvzM/2xzeIJUet7H A841NLwCaZ4lBWFb+Vea1JyIOVvlI78= -----END CERTIFICATE-----Generated at Tue Sep 22 21:27:53 2026 by rpki-client