$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa File: 2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa (raw, json) Hash identifier: VEBTJ4XKhsEmo8ql2rTvdyI49NFkHrC+kVBOc5aoGsw= Subject key identifier: 57:A1:07:E1:75:D2:80:BD:DF:60:84:99:BD:42:26:EF:E4:1B:CC:6B Certificate issuer: /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Certificate serial: 010D0C9F4328584F119CF74C59ACA84827954C3C Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 1299 IP address blocks: 104.247.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f7:4c:59:ac:a8:48:27:95:4c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=8d10a8f5-eb69-4fc7-804e-94675556013b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:56:3d:97:48:22:d6:6f:7b:b1:12:53:48: 88:bf:94:2a:b9:cc:33:c9:77:c3:9f:c6:87:b9:d4: e7:bf:80:30:0d:1f:82:b4:ac:db:68:ee:34:b7:11: 35:82:ce:34:6f:3a:09:06:8e:de:69:73:9e:43:91: c9:3c:a6:13:f5:20:0a:09:68:2b:80:f4:33:81:fa: 6e:2e:94:35:77:90:d7:76:9f:e0:86:9a:ac:70:5c: 0e:b1:ac:cc:a1:14:60:56:4a:a2:52:b6:59:59:de: 31:6b:3e:2d:8e:0c:df:f7:1e:90:8f:e7:85:7e:a1: 25:8f:fd:17:7e:40:c8:40:43:c1:11:68:a4:26:80: 9f:f0:29:af:59:d4:09:8b:bc:1a:c1:b9:b9:a6:0d: 23:ed:8b:b9:b6:96:50:73:44:a8:91:ef:5b:f8:1f: d4:91:ef:b4:75:65:0e:c4:05:dd:09:37:4a:a9:99: 4c:85:87:10:1e:2e:ff:d9:b0:8f:a9:6b:93:17:8e: 24:67:f5:39:d1:56:d4:96:71:cd:7d:a3:b1:d7:ed: 2a:f8:d3:6e:35:59:9d:46:b7:09:68:23:c9:59:2c: 4e:ba:d7:e9:8f:83:ed:20:2c:c7:10:52:92:44:de: 48:63:cd:31:ad:e8:6f:62:02:dc:5e:18:4f:df:2b: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A1:07:E1:75:D2:80:BD:DF:60:84:99:BD:42:26:EF:E4:1B:CC:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl X509v3 Authority Key Identifier: keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer sbgp-ipAddrBlock: critical IPv4: 104.247.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ef:d2:86:fe:a6:fb:9a:07:46:82:7c:a2:c0:5d:66:49:5c: 3d:95:34:f6:c7:df:51:35:bc:d2:3f:b9:4f:80:c0:90:50:ef: 0e:a8:55:8d:24:41:9e:cf:24:2e:05:6d:8b:c2:09:71:07:79: 49:65:95:99:5c:ff:27:c1:e6:39:f0:c6:df:f2:58:46:cf:e1: 23:6d:ef:7a:ca:14:4d:98:3f:16:1e:86:54:f9:3c:3e:6f:c1: f9:4d:19:5f:28:8e:e6:ab:ad:46:05:9b:a6:d4:86:8e:c7:9a: 53:9b:61:fc:d2:c4:e1:c5:0b:72:11:5e:e1:00:24:5f:d9:fa: 4a:69:75:d5:7b:d1:92:1d:bd:33:7b:13:c1:22:e6:5c:09:46: 1a:d5:d5:a0:68:01:38:fe:4f:33:e3:56:82:13:11:5a:f8:9b: 26:7c:2b:04:71:89:ce:eb:f2:76:e3:c7:eb:c6:13:fc:92:c8: 1c:95:d4:ba:cc:92:ea:fc:22:09:ab:b5:03:1a:ce:28:18:ed: e1:9e:ba:ad:ae:44:29:6b:4e:3c:40:2e:07:e3:e5:cf:4e:6f: 95:48:9c:c9:9d:e2:bf:50:74:63:1d:9d:b7:54:19:f4:c3:71: a2:32:da:7d:d5:94:e7:b7:81:0e:b5:52:6a:4c:47:19:ea:cc: f9:43:8b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPdMWayoSCeVTDwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3 ODBiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OGQxMGE4ZjUtZWI2OS00ZmM3LTgwNGUtOTQ2NzU1NTYwMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivtWPZdIItZve7ESU0iIv5QqucwzyXfDn8aH udTnv4AwDR+CtKzbaO40txE1gs40bzoJBo7eaXOeQ5HJPKYT9SAKCWgrgPQzgfpu LpQ1d5DXdp/ghpqscFwOsazMoRRgVkqiUrZZWd4xaz4tjgzf9x6Qj+eFfqElj/0X fkDIQEPBEWikJoCf8CmvWdQJi7wawbm5pg0j7Yu5tpZQc0Soke9b+B/Uke+0dWUO xAXdCTdKqZlMhYcQHi7/2bCPqWuTF44kZ/U50VbUlnHNfaOx1+0q+NNuNVmdRrcJ aCPJWSxOutfpj4PtICzHEFKSRN5IY80xrehvYgLcXhhP3yusewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFehB+F10oC932CEmb1CJu/kG8xrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3 OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvMmE5ZjFkZTgtNWM1Ny0z MjNiLWFmOWEtMmY1ZWQ4Y2E3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5 Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/v0ob+pvuaB0aCfKLAXWZJXD2VNPbH31E1vNI/uU+AwJBQ7w6oVY0k QZ7PJC4FbYvCCXEHeUlllZlc/yfB5jnwxt/yWEbP4SNt73rKFE2YPxYehlT5PD5v wflNGV8ojuarrUYFm6bUho7HmlObYfzSxOHFC3IRXuEAJF/Z+kppddV70ZIdvTN7 E8Ei5lwJRhrV1aBoATj+TzPjVoITEVr4myZ8KwRxic7r8nbjx+vGE/ySyByV1LrM kur8IgmrtQMazigY7eGeuq2uRClrTjxALgfj5c9Ob5VInMmd4r9QdGMdnbdUGfTD caIy2n3VlOe3gQ61UmpMRxnqzPlDi6U= -----END CERTIFICATE-----Generated at Wed Sep 23 08:58:18 2026 by rpki-client