$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa File: f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa (raw, json) Hash identifier: CMAXO57OelQ8qdaKpXmTnN3UABSkw1kVEHP1T6ZYfoY= Subject key identifier: 09:0E:3A:E4:5B:58:50:90:F6:C1:0E:87:C8:DA:52:8D:C7:B6:4C:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1CC7AF5A923DF34C8EAD5140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 104.126.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:af:5a:92:3d:f3:4c:8e:ad:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=cf9fe5f9-600d-4eb1-85c6-a91c2e687270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:82:32:69:da:d4:6f:ad:11:10:33:d7:c2: b5:8a:f5:6a:86:1d:66:5d:5c:8f:2a:73:46:48:d6: e1:db:82:66:ad:4e:55:98:aa:f9:ad:e8:00:7f:8c: 1b:3e:41:f3:a9:33:91:60:50:fe:fa:ff:b1:30:d1: 17:13:f8:53:59:cd:71:f4:9a:86:a1:fd:0e:4e:8f: 7c:cc:53:de:81:7b:f3:3f:42:88:7e:27:50:07:f7: a4:87:07:3a:8c:11:bb:3c:f8:7f:ca:60:1e:06:e5: 0d:99:7e:e4:2a:4c:16:33:f0:4d:9c:5f:ca:c3:a3: 58:61:fe:28:8e:e2:44:4a:ac:5b:51:97:a9:ef:3c: 05:c4:15:e5:7b:af:69:eb:e4:90:86:51:24:12:2e: ac:bb:f9:13:8c:34:29:68:98:60:6e:b2:45:e2:ef: f4:3c:11:b0:58:1a:82:b2:38:88:7a:a1:0d:10:71: 05:dd:11:fc:5c:d8:dc:bc:72:99:ec:da:5a:d6:de: e1:39:94:f2:b5:ee:55:aa:13:9f:7b:d1:76:59:42: 11:03:db:5e:e0:56:ca:18:2c:a4:48:91:ba:42:7d: f6:a6:40:bc:41:3b:27:12:1f:da:4f:65:e2:b4:d0: 74:5a:77:b7:32:d3:1d:36:d7:c6:20:a8:a5:96:1a: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0E:3A:E4:5B:58:50:90:F6:C1:0E:87:C8:DA:52:8D:C7:B6:4C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0365abb-0ef5-397e-b0c2-63db2c9d890d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.126.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d6:cb:69:0f:e7:83:50:ef:aa:da:ff:ed:9e:d9:53:bd:e3: 3a:95:20:cc:20:0a:75:bd:2a:ed:fc:e5:95:21:57:d9:ad:93: f0:90:4a:4c:0a:c5:35:83:1e:20:81:ab:71:97:53:db:fb:31: f8:65:3b:b9:52:24:54:61:d8:ef:ad:4e:9f:45:75:c6:6c:3f: 47:78:2a:91:93:93:b7:95:12:dd:df:4a:e1:fb:65:32:68:1a: 6c:9d:57:11:c2:ea:dc:16:74:4f:72:9e:cd:48:74:00:2f:c5: 03:b2:3e:69:4d:35:d0:e0:08:0d:11:22:11:5f:21:63:17:aa: be:75:1a:fe:a8:31:e2:81:a0:d1:0d:e0:c7:75:9a:33:51:57: a0:b7:33:91:a4:a1:0e:23:ca:ad:82:3f:31:18:52:26:4c:51: c7:35:69:e4:1b:a1:55:41:fa:dc:8d:ab:d1:a6:4d:d3:05:2e: a5:53:c6:74:75:e4:0a:78:10:09:42:30:d0:43:aa:a3:46:3b: 6b:bb:79:ba:b2:55:3d:3e:c7:42:54:25:27:d0:7d:79:73:78: f9:72:cc:be:2e:d3:c9:30:7e:23:37:26:38:a5:05:b8:40:4a: c4:68:d7:7f:76:69:94:df:f4:3b:cb:18:cd:32:0e:ca:1e:40: cd:35:4e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx69akj3zTI6tUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk Y2Y5ZmU1ZjktNjAwZC00ZWIxLTg1YzYtYTkxYzJlNjg3MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraGCMmna1G+tERAz18K1ivVqhh1mXVyPKnNG SNbh24JmrU5VmKr5regAf4wbPkHzqTORYFD++v+xMNEXE/hTWc1x9JqGof0OTo98 zFPegXvzP0KIfidQB/ekhwc6jBG7PPh/ymAeBuUNmX7kKkwWM/BNnF/Kw6NYYf4o juJESqxbUZep7zwFxBXle69p6+SQhlEkEi6su/kTjDQpaJhgbrJF4u/0PBGwWBqC sjiIeqENEHEF3RH8XNjcvHKZ7Npa1t7hOZTyte5VqhOfe9F2WUIRA9te4FbKGCyk SJG6Qn32pkC8QTsnEh/aT2XitNB0Wne3MtMdNtfGIKillhoDrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkOOuRbWFCQ9sEOh8jaUo3HtkxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAzNjVhYmItMGVmNS0z OTdlLWIwYzItNjNkYjJjOWQ4OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaH58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvWy2kP54NQ76ra/+2e2VO94zqVIMwgCnW9Ku385ZUhV9mtk/CQSkwK xTWDHiCBq3GXU9v7MfhlO7lSJFRh2O+tTp9FdcZsP0d4KpGTk7eVEt3fSuH7ZTJo GmydVxHC6twWdE9yns1IdAAvxQOyPmlNNdDgCA0RIhFfIWMXqr51Gv6oMeKBoNEN 4Md1mjNRV6C3M5GkoQ4jyq2CPzEYUiZMUcc1aeQboVVB+tyNq9GmTdMFLqVTxnR1 5Ap4EAlCMNBDqqNGO2u7ebqyVT0+x0JUJSfQfXlzePlyzL4u08kwfiM3JjilBbhA SsRo1392aZTf9DvLGM0yDsoeQM01TlM= -----END CERTIFICATE-----Generated at Wed Sep 23 06:52:23 2026 by rpki-client