$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa File: d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa (raw, json) Hash identifier: DLPVqQ0xuGd5iu658WRKZKAbJ1XJfHwhjVwP/0UuuhA= Subject key identifier: 0F:CE:D8:F1:B4:11:EE:1D:D0:AA:80:12:F6:53:2C:12:27:DB:56:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093D05E3D9AABE74E36FFE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 104.114.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:05:e3:d9:aa:be:74:e3:6f:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7a6999f3-08bf-4f00-9c47-9820b8115918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:b1:09:fb:da:8d:9f:11:de:c5:24:c1:92: 1b:93:5c:0c:e4:07:c0:d8:9d:d5:b7:41:1b:75:b5: 0e:17:36:2c:fd:6a:0f:b9:60:19:3f:3a:fb:bf:55: 1e:7e:0f:5f:62:c7:48:02:2a:4a:17:1b:8e:05:60: cf:b4:b3:ce:65:3f:8f:ed:45:d4:fe:56:0e:db:1f: 78:18:e8:f1:56:57:c2:7a:52:cb:2a:9e:3f:64:8d: 27:d0:8f:52:c9:7a:94:8a:00:8a:f9:40:ad:27:a1: 5d:2a:12:f5:30:5e:63:da:9d:c4:f8:4b:dc:32:e3: 70:aa:d2:58:89:a1:7a:d9:38:7e:3a:f3:8c:e2:a1: fc:99:29:e8:43:76:8a:67:d0:f8:9d:19:b0:1e:ca: 9a:ae:77:91:59:84:64:7c:cc:d4:28:86:75:8f:3b: 07:1e:21:80:99:98:59:7e:56:4b:f5:04:f4:5b:d4: 02:30:7c:9d:c8:8e:53:74:78:01:af:01:ce:34:2c: ab:1e:35:8d:39:41:26:1f:59:5c:b7:e0:68:7a:84: c4:18:50:5b:29:63:98:7d:c9:47:c0:6a:d2:c9:6c: 92:4c:06:0b:f8:1c:be:e7:43:f1:14:bb:b6:e2:cb: 2b:72:34:73:d4:04:64:7b:14:48:72:73:d4:36:c7: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CE:D8:F1:B4:11:EE:1D:D0:AA:80:12:F6:53:2C:12:27:DB:56:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.114.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:3b:ae:92:95:8e:e5:37:d4:c7:71:a5:61:11:2f:8d:60:d2: 87:39:28:4c:72:13:a8:41:f7:58:26:f7:e3:63:4e:ec:65:1d: 3e:1d:af:2e:5d:2c:77:4e:07:2d:d6:5e:f3:8d:51:79:62:10: 1c:13:8f:12:ab:e1:17:56:23:43:93:36:17:ae:7b:17:43:a7: 5c:01:42:50:88:4e:93:f4:8a:a1:9c:72:af:7e:ef:d8:3b:4e: fb:7a:c9:f5:c5:63:5e:b6:bc:a0:c0:be:fd:dd:50:da:13:24: 05:0d:24:69:b6:29:7b:01:81:ee:03:69:eb:e0:9c:df:ee:75: a1:39:a4:55:df:1d:dc:86:d5:95:1f:3b:08:6c:fb:6c:5e:d9: 27:56:09:03:94:9d:bf:8e:96:53:b0:87:ae:a6:37:81:9a:fd: f6:cb:63:26:54:f0:4d:93:91:71:ae:00:2a:dd:f0:9a:42:e6: 42:9e:ad:cc:8f:cc:4d:24:b4:b1:ee:f3:76:f5:85:6b:86:10: ed:07:e3:d8:88:35:4f:51:98:aa:dd:a2:da:78:21:a1:b9:af: 02:1f:a1:d1:3c:9f:24:2e:48:b0:a1:df:ad:dd:c7:0d:91:b7: 7b:dc:fd:3f:03:b1:52:48:5c:b3:96:95:58:f3:68:67:0c:fa: ac:f2:8b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQXj2aq+dONv/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2E2OTk5ZjMtMDhiZi00ZjAwLTljNDctOTgyMGI4MTE1OTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMKxCfvajZ8R3sUkwZIbk1wM5AfA2J3Vt0Eb dbUOFzYs/WoPuWAZPzr7v1Uefg9fYsdIAipKFxuOBWDPtLPOZT+P7UXU/lYO2x94 GOjxVlfCelLLKp4/ZI0n0I9SyXqUigCK+UCtJ6FdKhL1MF5j2p3E+EvcMuNwqtJY iaF62Th+OvOM4qH8mSnoQ3aKZ9D4nRmwHsqarneRWYRkfMzUKIZ1jzsHHiGAmZhZ flZL9QT0W9QCMHydyI5TdHgBrwHONCyrHjWNOUEmH1lct+BoeoTEGFBbKWOYfclH wGrSyWySTAYL+By+50PxFLu24ssrcjRz1ARkexRIcnPUNscUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/O2PG0Ee4d0KqAEvZTLBIn21YJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDFiMzY5MDMtMjA2ZS0z YWVjLTgzZDYtYmQyZDk1YmI4YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs7rpKVjuU31MdxpWERL41g0oc5KExyE6hB91gm9+NjTuxlHT4dry5d LHdOBy3WXvONUXliEBwTjxKr4RdWI0OTNheuexdDp1wBQlCITpP0iqGccq9+79g7 Tvt6yfXFY162vKDAvv3dUNoTJAUNJGm2KXsBge4DaevgnN/udaE5pFXfHdyG1ZUf Owhs+2xe2SdWCQOUnb+OllOwh66mN4Ga/fbLYyZU8E2TkXGuACrd8JpC5kKercyP zE0ktLHu83b1hWuGEO0H49iINU9RmKrdotp4IaG5rwIfodE8nyQuSLCh363dxw2R t3vc/T8DsVJIXLOWlVjzaGcM+qzyi6A= -----END CERTIFICATE-----Generated at Thu Sep 24 20:28:14 2026 by rpki-client