$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/dfda9553-074c-3f0e-a81b-5bb6e0636647.roa File: dfda9553-074c-3f0e-a81b-5bb6e0636647.roa (raw, json) Hash identifier: j4zUHpKIpKwzZg0Kun7Ra7VaoRjCgfl1VTPq8j0BHaY= Subject key identifier: 3D:0B:35:BF:EC:9E:03:93:8A:78:25:4F:7D:F2:23:A1:6C:8F:42:E3 Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F4328584F3FAD2A706790C9F4EA7DDD00 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/dfda9553-074c-3f0e-a81b-5bb6e0636647.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 44486 IP address blocks: 104.204.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:2a:70:67:90:c9:f4:ea:7d:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=0c17c480-4b65-46ab-a41a-c5c35aafa920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:69:88:7c:37:5d:5f:34:05:d1:80:f8:2c: e1:e6:27:80:60:8a:31:2f:45:e2:b5:79:49:70:8a: 0a:d3:3c:27:c6:ff:4f:39:c7:8c:7c:a0:17:c8:e6: 75:19:18:90:a4:46:27:f4:0c:be:10:76:0a:39:11: 37:42:10:77:e8:5c:d5:b4:66:05:59:91:c3:9f:3a: 3c:81:41:1c:2f:82:d5:9f:94:06:60:32:02:05:da: 18:c9:aa:a3:f4:57:99:ee:48:f0:d8:a7:e4:97:7b: 67:a6:c3:61:46:a7:5f:12:6b:e5:39:2e:3d:47:d2: fe:e5:49:96:68:fc:29:a8:24:1c:13:63:f5:f5:98: e4:e7:57:b4:b3:65:19:0f:fe:52:48:18:79:e7:0b: 38:5d:3c:43:09:88:ee:fe:8a:1e:13:08:74:f5:38: 50:84:7e:a0:f9:f2:3a:cb:d5:17:8a:bb:1e:cb:e8: d0:12:a7:0a:42:e9:91:ee:d9:99:0a:86:75:be:20: 2e:d6:0b:41:07:22:0e:f7:55:48:6b:bd:b2:a7:89: 06:2d:2a:42:4f:5d:86:82:39:38:ae:85:fc:12:fe: 51:10:df:be:48:a3:02:be:74:a5:d5:7a:60:ea:e4: 67:80:e9:d9:21:a1:dd:af:84:29:46:59:44:34:d1: ed:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0B:35:BF:EC:9E:03:93:8A:78:25:4F:7D:F2:23:A1:6C:8F:42:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/dfda9553-074c-3f0e-a81b-5bb6e0636647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 104.204.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:31:e2:1d:c0:60:39:26:dc:e9:70:1b:c5:23:cf:56:20:b4: 09:19:43:5d:f8:22:41:00:ca:fd:d2:59:82:43:c0:5d:b5:12: 21:04:a6:66:e2:db:50:b5:11:b7:b5:95:d8:2c:77:3a:0e:f6: 01:06:8f:4e:44:41:ea:22:a0:a4:a9:2c:66:14:7e:4c:3c:51: 68:ac:33:eb:4f:25:74:69:f3:b0:07:bc:80:44:54:54:69:83: 57:79:ca:c2:8e:79:f8:18:08:31:e3:6b:24:8b:27:05:a0:8e: 47:39:11:ae:d4:08:90:d1:aa:5c:a7:75:c0:af:d5:fa:40:cc: 19:00:b6:37:24:a5:17:49:1a:17:2d:cb:0e:30:9f:ea:05:27: d6:09:ca:3e:f1:d3:ae:47:e4:98:62:14:7e:a8:c0:54:fa:cb: bf:91:b5:5d:fb:26:e4:b0:9e:c6:9d:5e:e7:4c:dd:4e:88:a3: 93:0b:63:88:0b:0f:ef:17:bc:fc:69:15:8e:54:70:c2:3e:51: e2:81:9c:c8:6c:f6:66:c0:fa:b0:5f:39:3d:d2:95:1d:ef:96: c4:3d:07:eb:84:58:9f:43:b3:18:cb:9a:85:0d:16:55:6a:2b: 8a:a3:81:7b:7e:d7:1b:52:65:be:eb:37:1b:a5:97:06:dc:f3: 27:93:01:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSpwZ5DJ9Op93QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MGMxN2M0ODAtNGI2NS00NmFiLWE0MWEtYzVjMzVhYWZhOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2JpiHw3XV80BdGA+Czh5ieAYIoxL0XitXlJ cIoK0zwnxv9POceMfKAXyOZ1GRiQpEYn9Ay+EHYKORE3QhB36FzVtGYFWZHDnzo8 gUEcL4LVn5QGYDICBdoYyaqj9FeZ7kjw2Kfkl3tnpsNhRqdfEmvlOS49R9L+5UmW aPwpqCQcE2P19Zjk51e0s2UZD/5SSBh55ws4XTxDCYju/ooeEwh09ThQhH6g+fI6 y9UXirsey+jQEqcKQumR7tmZCoZ1viAu1gtBByIO91VIa72yp4kGLSpCT12Ggjk4 roX8Ev5REN++SKMCvnSl1Xpg6uRngOnZIaHdr4QpRllENNHt4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0LNb/sngOTinglT33yI6Fsj0LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvZGZkYTk1NTMtMDc0Yy0z ZjBlLWE4MWItNWJiNmUwNjM2NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUx4h3AYDkm3OlwG8Ujz1YgtAkZQ134IkEAyv3SWYJDwF21EiEEpmbi 21C1Ebe1ldgsdzoO9gEGj05EQeoioKSpLGYUfkw8UWisM+tPJXRp87AHvIBEVFRp g1d5ysKOefgYCDHjaySLJwWgjkc5Ea7UCJDRqlyndcCv1fpAzBkAtjckpRdJGhct yw4wn+oFJ9YJyj7x065H5JhiFH6owFT6y7+RtV37JuSwnsadXudM3U6Io5MLY4gL D+8XvPxpFY5UcMI+UeKBnMhs9mbA+rBfOT3SlR3vlsQ9B+uEWJ9DsxjLmoUNFlVq K4qjgXt+1xtSZb7rNxullwbc8yeTAV0= -----END CERTIFICATE-----Generated at Thu Oct 8 17:26:50 2026 by rpki-client