$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa File: d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa (raw, json) Hash identifier: x5Ii0ylkXe4BaYeTdD3Dn/Rz6FP/PcJVyEIXLAS0XXI= Subject key identifier: 60:F0:2B:8A:D1:51:D3:DF:CD:A3:A6:E0:15:63:F2:20:0C:BC:9B:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F15CCFEBE767CB3F5CB6E21A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.68.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:fe:be:76:7c:b3:f5:cb:6e:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=306cc17a-f5e9-4ad7-9caf-ebb26ed8aa7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ec:3e:29:62:3c:ad:04:64:fa:e3:aa:b6:86: 11:e0:50:5e:89:7f:ea:ed:07:9e:b9:84:d0:64:28: 01:d1:6a:5d:84:16:8c:c2:0e:34:49:00:f9:5c:48: a5:ed:b5:f7:b6:99:ac:b0:78:1d:33:a2:91:68:2e: 4e:cf:b9:93:f6:6d:ff:e5:8c:0a:d0:11:77:76:4b: 35:11:15:2c:f6:d6:c5:28:ab:36:de:80:52:1d:a1: a0:54:92:b4:c8:32:8d:c9:10:4d:c5:2d:20:08:9e: 32:d2:7c:f1:76:f6:24:14:a4:9b:f1:85:a5:95:79: 0c:7e:3f:33:0c:f8:59:46:87:cf:d5:3c:06:a1:00: 43:9a:de:bd:27:d2:3f:a5:92:7d:61:ba:e1:03:03: 33:ee:d9:90:44:93:46:ac:a3:90:6c:00:04:cc:71: 36:e6:c3:dc:8c:bb:8c:b4:0c:77:13:55:50:d9:bc: ca:a6:b3:0e:20:14:80:22:d6:49:86:11:07:e8:47: ce:a3:46:44:af:79:39:d2:20:cc:da:f1:18:ed:68: 7c:b0:f7:ee:0b:a8:4c:1d:31:02:e0:19:81:ab:fa: bb:0b:f0:f7:ee:90:ad:53:26:c6:15:31:89:b2:be: 52:f6:d3:0a:81:46:38:c5:13:54:3d:96:21:c8:12: 1e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:2B:8A:D1:51:D3:DF:CD:A3:A6:E0:15:63:F2:20:0C:BC:9B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d53ce1d4-7c42-3053-a392-a833bd2d7acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.68.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d3:68:5e:e7:7b:c5:bf:e7:d6:ad:07:de:a0:42:0f:cd:e8: fa:5c:61:f7:6a:73:be:e3:53:24:95:b5:ce:e0:d8:85:18:58: 37:a3:1b:8f:8e:cf:7b:d4:fb:42:d5:3b:24:a6:61:00:34:68: 08:31:74:e1:78:37:99:54:d1:4b:ed:60:4a:55:f7:d2:76:d3: 0c:b8:66:1e:fd:d5:5f:f2:35:8a:15:04:24:e8:cc:ec:6c:9a: cd:18:46:00:d0:0a:81:f6:9a:5d:3f:1f:29:f2:b5:5e:84:62: 0d:55:98:36:31:62:32:35:65:c0:e9:e1:8c:90:4f:eb:0b:f6: cb:a2:71:38:2c:1c:b6:1a:b4:e7:0e:65:05:0f:72:bf:a2:16: 9c:79:52:ef:3e:ac:0b:e3:cc:fc:51:1a:bb:da:66:eb:a3:4b: 5c:21:9f:91:78:1e:52:4f:39:47:70:58:06:ab:40:fc:68:4d: 40:6c:53:99:a9:cb:30:50:18:05:00:f1:9b:9a:83:76:25:c4: ec:00:b3:04:2c:21:10:ea:97:6b:7d:d2:a2:91:d3:57:24:62: 3f:aa:ba:36:b9:85:eb:1e:6f:14:8b:58:0d:63:c2:d8:80:a8: b4:82:8f:43:fa:44:09:e8:fb:dc:52:f7:0b:a0:5c:4b:34:59: 68:15:3c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzP6+dnyz9ctuIaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MzA2Y2MxN2EtZjVlOS00YWQ3LTljYWYtZWJiMjZlZDhhYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuw+KWI8rQRk+uOqtoYR4FBeiX/q7QeeuYTQ ZCgB0WpdhBaMwg40SQD5XEil7bX3tpmssHgdM6KRaC5Oz7mT9m3/5YwK0BF3dks1 ERUs9tbFKKs23oBSHaGgVJK0yDKNyRBNxS0gCJ4y0nzxdvYkFKSb8YWllXkMfj8z DPhZRofP1TwGoQBDmt69J9I/pZJ9YbrhAwMz7tmQRJNGrKOQbAAEzHE25sPcjLuM tAx3E1VQ2bzKprMOIBSAItZJhhEH6EfOo0ZEr3k50iDM2vEY7Wh8sPfuC6hMHTEC 4BmBq/q7C/D37pCtUybGFTGJsr5S9tMKgUY4xRNUPZYhyBIe9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDwK4rRUdPfzaOm4BVj8iAMvJvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDUzY2UxZDQtN2M0Mi0z MDUzLWEzOTItYTgzM2JkMmQ3YWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaET4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3TaF7ne8W/59atB96gQg/N6PpcYfdqc77jUySVtc7g2IUYWDejG4+O z3vU+0LVOySmYQA0aAgxdOF4N5lU0UvtYEpV99J20wy4Zh791V/yNYoVBCTozOxs ms0YRgDQCoH2ml0/HynytV6EYg1VmDYxYjI1ZcDp4YyQT+sL9suicTgsHLYatOcO ZQUPcr+iFpx5Uu8+rAvjzPxRGrvaZuujS1whn5F4HlJPOUdwWAarQPxoTUBsU5mp yzBQGAUA8Zuag3YlxOwAswQsIRDql2t90qKR01ckYj+quja5hesebxSLWA1jwtiA qLSCj0P6RAno+9xS9wugXEs0WWgVPNA= -----END CERTIFICATE-----Generated at Tue Sep 22 19:49:05 2026 by rpki-client