$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa File: f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa (raw, json) Hash identifier: 5nc3vG+kvif5+EG8yJPY9n7NQ23N+W1gr4CpRbTfC88= Subject key identifier: B4:E7:E5:E5:64:D7:CB:2C:A8:DC:57:C1:21:97:93:9D:D2:3C:1F:DA Certificate issuer: /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d Certificate serial: 010D0C9F4328584F49769D47BA061FF0B7AF2C80 Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36008 IP address blocks: 104.192.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:9d:47:ba:06:1f:f0:b7:af:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1dae1b8d-0026-4996-ba57-cfc0c8a4e72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f6:3e:46:71:de:02:01:f9:d5:9b:a8:1e:1e: 30:46:da:12:57:95:7e:aa:35:c0:32:df:0b:81:b6: ec:b2:e1:f7:8a:5b:25:30:74:a0:1d:72:8b:78:cd: 30:2e:45:90:e7:11:94:9c:da:fa:2f:e6:2a:c4:eb: c6:ad:0b:82:31:83:50:f4:08:a8:cb:02:0a:67:81: ed:62:0f:1e:40:0e:86:a2:ec:5a:f7:c8:5f:9f:4c: 32:62:91:bc:f4:05:80:82:3c:48:69:45:8a:28:b3: 45:82:2b:a3:3f:c2:32:96:a5:06:20:fe:ef:17:00: ba:ac:a4:6b:13:03:9a:69:1a:1e:32:a4:63:38:16: 7c:a1:12:c0:e3:78:7b:7b:87:3d:fe:a2:8d:bd:9f: 64:3a:f7:ea:a6:28:e0:8f:de:6b:a0:89:93:0b:4c: 5e:0e:77:4f:d4:c3:3e:2b:82:fe:c3:10:25:65:fd: 65:2f:0c:7c:c3:74:3d:89:18:be:a8:7b:91:b9:fa: 77:51:4f:16:b1:4f:b3:e6:eb:91:03:90:19:84:cd: ea:0d:21:b7:10:41:b3:b0:a0:ba:f3:49:40:89:ee: 42:45:94:3c:b2:6a:ca:43:6e:04:13:6c:5e:81:31: 77:d0:54:76:59:5f:92:88:68:1a:c7:8b:d7:e9:b9: 84:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E7:E5:E5:64:D7:CB:2C:A8:DC:57:C1:21:97:93:9D:D2:3C:1F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/f1356e3c-4d8a-38e1-90b1-be1d7c79a808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl X509v3 Authority Key Identifier: keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer sbgp-ipAddrBlock: critical IPv4: 104.192.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d6:a1:0e:00:98:1e:5e:ac:b7:e8:d8:81:2b:c9:1e:5a:d5: af:38:60:50:a9:f6:02:21:71:5b:a8:ed:41:18:bf:a8:a0:c5: 25:4d:70:bc:f6:4a:f0:de:0a:25:63:64:1f:05:2a:97:25:a1: da:eb:57:29:00:aa:3e:27:ca:2d:ca:00:1d:0f:9b:e8:ca:8a: 64:e4:2d:f1:d7:35:04:18:50:1e:b2:19:14:15:97:d5:29:57: 13:1a:26:c4:35:7d:44:ee:b9:f4:ca:96:7b:57:c2:7a:90:c7: 4c:f8:ab:69:4b:a2:47:35:08:3f:48:8d:cb:54:79:7b:1f:fc: 34:88:bf:89:d1:f5:64:87:79:56:6c:9b:bd:6c:5a:06:6b:c6: f9:4b:51:1b:44:b1:32:3e:9b:3d:84:76:de:47:6d:a1:d2:7a: cb:08:f8:2d:51:a7:d0:69:d8:c0:d3:b5:33:e5:08:ec:33:ee: cd:a4:f0:e7:e8:4a:d6:15:b5:7a:c4:26:1a:80:7d:4f:57:48: e7:78:9d:60:16:ab:20:ee:af:28:d1:dc:75:51:0a:fc:b3:0a: 47:78:1c:a5:cf:ab:fd:aa:17:da:2a:8f:39:d5:04:92:55:ad: 54:4e:93:e7:2b:b1:d5:8d:b7:0f:f1:72:1d:cc:16:d2:8e:6f: 05:fc:76:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdp1HugYf8LevLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjYzZhM2EtMGU0Zi00OGMxLTkxMTQtNWRkZGYyZDdk YjlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWRhZTFiOGQtMDAyNi00OTk2LWJhNTctY2ZjMGM4YTRlNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Y+RnHeAgH51ZuoHh4wRtoSV5V+qjXAMt8L gbbssuH3ilslMHSgHXKLeM0wLkWQ5xGUnNr6L+YqxOvGrQuCMYNQ9AioywIKZ4Ht Yg8eQA6Gouxa98hfn0wyYpG89AWAgjxIaUWKKLNFgiujP8IylqUGIP7vFwC6rKRr EwOaaRoeMqRjOBZ8oRLA43h7e4c9/qKNvZ9kOvfqpijgj95roImTC0xeDndP1MM+ K4L+wxAlZf1lLwx8w3Q9iRi+qHuRufp3UU8WsU+z5uuRA5AZhM3qDSG3EEGzsKC6 80lAie5CRZQ8smrKQ24EE2xegTF30FR2WV+SiGgax4vX6bmEzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTn5eVk18ssqNxXwSGXk53SPB/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNj NmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRkZjJkN2RiOWQvZjEzNTZlM2MtNGQ4YS0z OGUxLTkwYjEtYmUxZDdjNzlhODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGRjYzZhM2EtMGU0Zi00OGMxLTkx MTQtNWRkZGYyZDdkYjlkLzRkY2M2YTNhLTBlNGYtNDhjMS05MTE0LTVkZGRmMmQ3 ZGI5ZC5jcmwwHwYDVR0jBBgwFoAUdwVCOieEWFJGFp+ThnGvp8EB9m4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZGNjNmEzYS0wZTRmLTQ4YzEtOTExNC01ZGRk ZjJkN2RiOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADWoQ4AmB5erLfo2IEryR5a1a84YFCp9gIhcVuo7UEYv6igxSVNcLz2 SvDeCiVjZB8FKpclodrrVykAqj4nyi3KAB0Pm+jKimTkLfHXNQQYUB6yGRQVl9Up VxMaJsQ1fUTuufTKlntXwnqQx0z4q2lLokc1CD9IjctUeXsf/DSIv4nR9WSHeVZs m71sWgZrxvlLURtEsTI+mz2Edt5HbaHSessI+C1Rp9Bp2MDTtTPlCOwz7s2k8Ofo StYVtXrEJhqAfU9XSOd4nWAWqyDuryjR3HVRCvyzCkd4HKXPq/2qF9oqjznVBJJV rVROk+crsdWNtw/xch3MFtKObwX8dnE= -----END CERTIFICATE-----Generated at Tue Sep 29 02:28:49 2026 by rpki-client