$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa File: 90e30d69-d192-3d3b-af69-a1564717f280.roa (raw, json) Hash identifier: ZJaGff76ZvqPZc/etO5wj8L9AxxQ2HUopTmph7QcGFs= Subject key identifier: AC:A2:5A:71:7B:C3:C4:69:D4:8A:39:31:70:E4:B9:27:EA:88:E0:F6 Certificate issuer: /CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Certificate serial: 010D0C9F4328584F498B68F44AB097F1AEFCB600 Authority key identifier: 7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30580 IP address blocks: 104.249.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:68:f4:4a:b0:97:f1:ae:fc:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=115a207f-5238-47cb-9d54-3791f1178733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:e8:d2:3e:77:57:f2:42:db:55:8d:42:0a: e4:e4:27:bf:3f:34:ed:58:a2:a9:f5:fa:9d:38:a6: 28:02:79:fb:9c:d1:0a:a9:e9:ea:bd:74:50:03:2f: d5:a3:41:12:e3:8c:44:22:24:8f:1c:02:cd:4a:ef: 57:af:dd:d7:f0:0c:13:1e:84:dd:98:7a:17:42:f1: 73:44:0a:2c:4f:cb:9d:b5:41:38:4d:b3:fd:93:e4: 13:06:06:f7:88:51:2d:c2:8d:5f:c7:28:1f:02:80: d4:b4:9f:da:86:53:65:12:14:52:e9:6c:5a:4f:be: 6e:92:fe:40:eb:80:73:66:28:ff:08:ff:4a:79:43: 65:e2:b8:e1:81:eb:c9:62:38:bc:98:60:aa:65:6e: 8b:a0:29:09:ce:ad:ed:8a:ef:81:a5:c6:d2:8b:64: 31:ae:7c:b6:58:50:7b:70:9a:8d:86:31:c2:d9:e6: fa:bb:5a:4c:b5:98:61:0d:0e:4d:a1:58:0e:49:b0: 24:36:ae:af:7e:93:6a:d4:28:6b:44:d8:db:1a:44: 2d:28:54:3f:37:21:77:9e:14:fe:c4:6c:cb:7e:3b: 80:d0:e3:16:99:3d:6b:4b:f5:92:7c:ab:46:f1:6a: 92:cf:93:ac:14:69:45:d2:14:3b:94:56:88:b2:d9: f3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A2:5A:71:7B:C3:C4:69:D4:8A:39:31:70:E4:B9:27:EA:88:E0:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl X509v3 Authority Key Identifier: keyid:7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer sbgp-ipAddrBlock: critical IPv4: 104.249.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c7:c6:6a:b3:93:38:7e:33:a3:ca:02:fd:34:04:9a:49:36: 03:6f:94:a7:09:ff:22:42:ac:72:76:dc:85:67:fc:7e:45:2e: a8:6e:3a:38:70:42:b5:05:25:57:14:88:d9:0a:62:eb:23:9c: 6b:bd:3e:c6:1b:03:fd:d1:9f:a9:5e:a9:f6:2d:bc:da:31:26: 01:e8:88:dd:c8:37:ed:51:65:17:df:d0:99:cf:34:1c:e3:0c: b9:72:e8:d8:53:04:26:8f:c9:99:42:79:18:9d:0c:78:cb:d4: 03:35:2d:cd:6f:28:e7:ec:33:b1:ae:b8:69:93:25:7e:36:41: 8d:5d:5e:c8:43:35:be:01:8c:72:10:33:ef:55:18:9a:31:4f: ad:90:fe:be:5c:00:97:82:ab:30:50:eb:4b:62:cc:ba:95:31: 18:2b:00:77:48:52:2f:d1:60:d8:f8:39:49:5a:6e:62:b2:39: e0:98:ae:95:5d:03:d7:1f:b5:2f:5f:2c:9d:10:00:a8:15:2c: 11:aa:1f:86:1f:0e:88:99:bd:be:00:51:2d:75:53:b1:b4:8f: 00:73:d8:e3:91:fb:ed:a0:de:b8:5a:c9:17:7c:d0:06:86:ce: 1a:b3:11:4e:8d:f8:bb:04:fa:3a:5a:e1:8d:80:cc:80:ec:c5: 2d:8b:01:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2j0SrCX8a78tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4MWVmNjMtYjAzYy00OGFmLTgxOTEtZTEzY2U4Y2I3 OGMzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTE1YTIwN2YtNTIzOC00N2NiLTlkNTQtMzc5MWYxMTc4NzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Po0j53V/JC21WNQgrk5Ce/PzTtWKKp9fqd OKYoAnn7nNEKqenqvXRQAy/Vo0ES44xEIiSPHALNSu9Xr93X8AwTHoTdmHoXQvFz RAosT8udtUE4TbP9k+QTBgb3iFEtwo1fxygfAoDUtJ/ahlNlEhRS6WxaT75ukv5A 64BzZij/CP9KeUNl4rjhgevJYji8mGCqZW6LoCkJzq3tiu+BpcbSi2Qxrny2WFB7 cJqNhjHC2eb6u1pMtZhhDQ5NoVgOSbAkNq6vfpNq1ChrRNjbGkQtKFQ/NyF3nhT+ xGzLfjuA0OMWmT1rS/WSfKtG8WqSz5OsFGlF0hQ7lFaIstnz8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyiWnF7w8Rp1Io5MXDkuSfqiOD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgx ZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNjZThjYjc4YzMvOTBlMzBkNjktZDE5Mi0z ZDNiLWFmNjktYTE1NjQ3MTdmMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzY4MWVmNjMtYjAzYy00OGFmLTgx OTEtZTEzY2U4Y2I3OGMzLzM2ODFlZjYzLWIwM2MtNDhhZi04MTkxLWUxM2NlOGNi NzhjMy5jcmwwHwYDVR0jBBgwFoAUe7h0rJRDiVDZIB47vTbmgZfRPg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgxZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNj ZThjYjc4YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDHxmqzkzh+M6PKAv00BJpJNgNvlKcJ/yJCrHJ23IVn/H5FLqhuOjhw QrUFJVcUiNkKYusjnGu9PsYbA/3Rn6leqfYtvNoxJgHoiN3IN+1RZRff0JnPNBzj DLly6NhTBCaPyZlCeRidDHjL1AM1Lc1vKOfsM7GuuGmTJX42QY1dXshDNb4BjHIQ M+9VGJoxT62Q/r5cAJeCqzBQ60tizLqVMRgrAHdIUi/RYNj4OUlabmKyOeCYrpVd A9cftS9fLJ0QAKgVLBGqH4YfDoiZvb4AUS11U7G0jwBz2OOR++2g3rhayRd80AaG zhqzEU6N+LsE+jpa4Y2AzIDsxS2LAQQ= -----END CERTIFICATE-----Generated at Sat Sep 26 14:49:59 2026 by rpki-client