$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa File: b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa (raw, json) Hash identifier: pKDiA3g9bVGiKv/iMiNsnrp01mVnvPCQTOmIKuqA5s0= Subject key identifier: B7:14:AB:B1:44:56:4D:20:8C:63:6F:20:4E:62:08:EF:D7:B0:88:26 Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F4328584F3E47D33EB8542043131CE280 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 7057 IP address blocks: 104.254.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d3:3e:b8:54:20:43:13:1c:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=33d63328-ce98-48f3-af48-1187dfd7c88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:0d:5b:bf:62:4a:56:65:42:2a:79:f7:bf: 5a:de:fa:53:9e:cf:df:e5:64:55:76:18:23:1a:c3: 9a:1e:57:19:38:66:78:b0:11:64:ed:bd:6b:e9:e6: 78:f5:16:f6:e9:03:23:de:31:74:8a:2d:2a:8f:16: ea:8d:5f:ff:81:3a:7d:57:63:6f:8f:80:c2:d7:91: 7d:aa:9f:44:33:ec:65:f4:c4:c8:7f:27:73:c2:8c: 38:4f:a3:4a:76:9e:86:6c:bb:b3:ce:df:38:6f:b4: b2:52:d4:f1:1e:a9:40:1f:aa:31:97:b4:93:05:03: 83:1b:c3:f1:25:49:5b:1b:c8:a2:71:8a:6a:9f:64: 55:24:79:04:9a:a7:35:74:fc:d4:71:f0:24:e2:f7: 20:43:2c:c7:a3:28:32:c1:8c:13:be:45:92:96:d0: 91:2f:7a:d5:6c:2d:e6:40:88:4a:17:88:12:ce:71: 79:47:63:f6:f9:90:c4:10:3f:e9:60:59:31:76:43: 9d:ab:4b:4e:14:6f:98:4a:87:56:5f:e4:13:94:4e: 52:eb:8b:e6:58:c9:04:18:bd:f6:f6:16:66:12:d5: 9f:d2:1d:81:fa:23:37:97:21:3c:3a:62:74:1d:ac: b2:85:7b:09:f7:cc:d2:cf:b7:75:da:7b:81:3c:c1: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:AB:B1:44:56:4D:20:8C:63:6F:20:4E:62:08:EF:D7:B0:88:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/b8a9b5c7-196b-3c32-b1ec-182c5c0f0e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 104.254.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4d:b3:65:3a:4a:37:e5:a2:0d:94:89:37:ea:3b:96:a4:a0: 57:62:06:60:0d:e7:0c:33:22:93:27:85:52:6c:b7:d8:a1:1c: 12:78:f2:5a:00:ed:60:bd:7d:9a:2b:82:47:ae:98:75:7f:05: 1d:99:6b:ad:b2:5f:cd:3f:1e:63:42:56:07:90:e8:4b:2b:03: b7:cb:41:3a:8a:f9:c5:ff:ae:7c:13:65:58:98:b6:63:c1:de: fd:4b:91:6c:85:7f:d8:91:bd:f5:93:81:e3:d9:e7:d1:d1:06: 8a:20:03:da:9e:38:f8:58:86:d6:43:24:ba:a1:68:91:3e:11: f8:73:30:6d:b5:b8:84:0f:17:d1:6f:b5:1f:bb:13:01:99:87: 9d:98:29:06:f6:fe:05:11:32:f4:0a:d3:fc:42:31:6f:af:43: 2f:8a:62:b9:eb:7c:61:9f:6a:ce:23:dc:d6:72:9a:16:c0:a8: 17:f6:38:eb:69:f5:fc:bb:1a:36:e9:be:c6:3f:b6:31:02:59: e7:e6:c7:9f:6b:82:7b:fb:fe:51:57:cb:15:87:46:81:19:1f: 77:e9:ce:27:cb:ad:81:7c:45:48:59:65:c8:5d:6b:33:77:0c: 47:28:6a:6d:71:a9:d7:0b:cf:69:9e:ef:fa:b5:15:f7:fb:0b: c2:20:b4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9M+uFQgQxMc4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MzNkNjMzMjgtY2U5OC00OGYzLWFmNDgtMTE4N2RmZDdjODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRYNW79iSlZlQip5979a3vpTns/f5WRVdhgj GsOaHlcZOGZ4sBFk7b1r6eZ49Rb26QMj3jF0ii0qjxbqjV//gTp9V2Nvj4DC15F9 qp9EM+xl9MTIfydzwow4T6NKdp6GbLuzzt84b7SyUtTxHqlAH6oxl7STBQODG8Px JUlbG8iicYpqn2RVJHkEmqc1dPzUcfAk4vcgQyzHoygywYwTvkWSltCRL3rVbC3m QIhKF4gSznF5R2P2+ZDEED/pYFkxdkOdq0tOFG+YSodWX+QTlE5S64vmWMkEGL32 9hZmEtWf0h2B+iM3lyE8OmJ0HayyhXsJ98zSz7d12nuBPMFAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcUq7FEVk0gjGNvIE5iCO/XsIgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvYjhhOWI1YzctMTk2Yi0z YzMyLWIxZWMtMTgyYzVjMGYwZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJNs2U6Sjflog2UiTfqO5akoFdiBmAN5wwzIpMnhVJst9ihHBJ48loA 7WC9fZorgkeumHV/BR2Za62yX80/HmNCVgeQ6EsrA7fLQTqK+cX/rnwTZViYtmPB 3v1LkWyFf9iRvfWTgePZ59HRBoogA9qeOPhYhtZDJLqhaJE+EfhzMG21uIQPF9Fv tR+7EwGZh52YKQb2/gURMvQK0/xCMW+vQy+KYrnrfGGfas4j3NZymhbAqBf2OOtp 9fy7GjbpvsY/tjECWefmx59rgnv7/lFXyxWHRoEZH3fpzifLrYF8RUhZZchdazN3 DEcoam1xqdcLz2me7/q1Fff7C8IgtIE= -----END CERTIFICATE-----Generated at Wed Sep 23 23:25:22 2026 by rpki-client