$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf49871c-2613-3dc8-b107-a461b538fe8c.roa File: cf49871c-2613-3dc8-b107-a461b538fe8c.roa (raw, json) Hash identifier: K00x2kiiUHNzN35HE1ftDWmcKhpPfiJlOKRu5lE6oQo= Subject key identifier: 00:C0:9A:7B:06:55:6E:AA:38:04:12:04:DA:29:77:96:20:D7:E8:CE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AE0CACB060412DA9BA7A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf49871c-2613-3dc8-b107-a461b538fe8c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40306 IP address blocks: 75.104.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:e0:ca:cb:06:04:12:da:9b:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6153c6a-34bc-4a84-af9c-1f9423c65bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:83:c9:3b:ca:a7:52:9a:a3:84:1d:48:55:3d: 59:33:55:da:be:7a:9f:ee:26:98:9b:98:56:15:76: 82:27:36:4d:fc:b1:bd:d0:c4:f8:02:ec:9a:72:80: ba:42:3c:69:cd:25:64:99:5a:72:87:d2:08:8a:8c: 07:c0:b9:05:70:ea:b4:bf:aa:1c:3e:9d:f7:60:36: 7e:89:6b:d1:fc:fc:57:50:d9:a4:2d:8f:80:75:30: 25:af:54:31:90:96:8e:96:27:65:6f:0b:2f:4a:16: 15:4a:31:9b:91:67:ca:69:20:4a:00:10:76:e1:50: 0b:5d:93:c5:f7:ce:b5:57:a0:fa:20:e0:56:86:0d: 1e:1b:c0:cc:f2:16:e8:96:8f:d5:ad:7d:9b:05:03: 25:37:c4:ba:b6:85:20:99:cd:40:c3:2a:1d:28:cf: 4d:0b:94:7f:ee:01:97:69:39:6b:3e:49:c8:39:2a: ff:07:66:fe:5a:a9:1e:72:6b:5b:c3:77:d5:58:d4: a3:7d:df:62:fc:47:95:a6:20:9d:02:aa:95:92:2a: cb:2d:cf:18:bc:cd:a4:4e:31:08:cb:74:db:ad:39: 90:0a:d8:42:f2:c1:c6:10:36:09:c7:70:8c:06:be: a3:a0:5d:2b:ed:cd:c3:48:85:c4:5a:f5:42:22:8e: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C0:9A:7B:06:55:6E:AA:38:04:12:04:DA:29:77:96:20:D7:E8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf49871c-2613-3dc8-b107-a461b538fe8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d4:7f:05:3b:44:0b:4b:c4:d9:10:1c:a1:e3:6a:5a:27:70: 8f:9c:d6:0c:1d:1b:c7:af:09:e7:29:b8:25:5b:6b:93:28:47: 9d:fc:b3:4a:8a:02:54:8c:53:33:42:a9:6e:cf:c4:f1:7e:0d: b6:8c:88:a4:fe:d5:cd:b7:4a:aa:e2:35:54:fa:d9:47:13:95: 76:1a:3a:2e:ae:9b:b8:68:57:10:a6:f8:05:3d:cc:a0:8a:97: 59:4a:a8:38:d3:3c:d1:b3:6f:e7:c4:88:19:2e:ce:0a:e9:b4: 87:ed:0e:12:b0:a9:d2:0b:eb:d2:06:bf:fe:2f:a5:77:73:56: c4:18:b5:ac:97:e3:43:10:83:8a:17:f8:bd:68:83:9f:0c:26: a5:65:de:92:67:be:13:f5:03:ee:77:44:12:c7:7b:44:6f:55: 67:8c:47:4e:8c:77:5e:d3:49:b7:c4:e1:28:81:64:68:7f:16: 62:9e:88:b9:f5:be:72:80:39:21:d2:d8:a6:ee:59:0c:ac:2d: 83:b8:64:c2:7b:cc:57:fa:d5:78:0d:c9:0b:4f:87:7a:4d:7f: 44:1f:47:3e:57:66:a9:49:f3:08:cb:3e:5d:70:62:c9:7e:42: f7:4e:e8:28:9b:f8:d3:dc:4c:ef:48:93:66:8a:55:0c:c7:b1: 7d:b5:fb:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeuDKywYEEtqbp6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjYxNTNjNmEtMzRiYy00YTg0LWFmOWMtMWY5NDIzYzY1YmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIPJO8qnUpqjhB1IVT1ZM1Xavnqf7iaYm5hW FXaCJzZN/LG90MT4AuyacoC6QjxpzSVkmVpyh9IIiowHwLkFcOq0v6ocPp33YDZ+ iWvR/PxXUNmkLY+AdTAlr1QxkJaOlidlbwsvShYVSjGbkWfKaSBKABB24VALXZPF 9861V6D6IOBWhg0eG8DM8hbolo/VrX2bBQMlN8S6toUgmc1AwyodKM9NC5R/7gGX aTlrPknIOSr/B2b+Wqkecmtbw3fVWNSjfd9i/EeVpiCdAqqVkirLLc8YvM2kTjEI y3TbrTmQCthC8sHGEDYJx3CMBr6joF0r7c3DSIXEWvVCIo6slQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADAmnsGVW6qOAQSBNopd5Yg1+jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2Y0OTg3MWMtMjYxMy0z ZGM4LWIxMDctYTQ2MWI1MzhmZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnUfwU7RAtLxNkQHKHjaloncI+c1gwdG8evCecpuCVba5MoR538s0qK AlSMUzNCqW7PxPF+DbaMiKT+1c23SqriNVT62UcTlXYaOi6um7hoVxCm+AU9zKCK l1lKqDjTPNGzb+fEiBkuzgrptIftDhKwqdIL69IGv/4vpXdzVsQYtayX40MQg4oX +L1og58MJqVl3pJnvhP1A+53RBLHe0RvVWeMR06Md17TSbfE4SiBZGh/FmKeiLn1 vnKAOSHS2KbuWQysLYO4ZMJ7zFf61XgNyQtPh3pNf0QfRz5XZqlJ8wjLPl1wYsl+ QvdO6Cib+NPcTO9Ik2aKVQzHsX21+9k= -----END CERTIFICATE-----Generated at Mon Sep 28 21:12:23 2026 by rpki-client