$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa File: 0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa (raw, json) Hash identifier: phgahB8CUkXc3mFHdURZMiDWpfQd5Yn4C+dd7QiYdH0= Subject key identifier: 4C:9C:4A:04:D6:6B:EA:17:D6:A6:B1:6E:32:98:58:5A:83:79:FA:D1 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584F4C3D6FFF8A31C039DFADC4A0 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 399244 IP address blocks: 104.204.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6f:ff:8a:31:c0:39:df:ad:c4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=77780c9d-d5b0-42c4-8f70-cf01067b3cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:c9:b0:13:e9:5b:85:84:f3:59:26:df:e8: d4:b0:a6:80:ab:c8:5c:4e:1f:30:17:4f:a8:06:3e: ab:e9:87:1f:6b:bb:87:88:dc:29:2b:40:be:c0:59: 1e:cb:d3:8c:20:32:8e:fc:32:31:87:85:ff:10:d6: 4a:50:df:8a:c2:3f:fb:65:c6:15:c3:f1:b8:c1:69: ed:ef:6a:9f:d5:76:35:6f:44:ae:ca:a7:63:52:96: 9c:f6:6c:90:9f:ba:52:e8:73:b2:ee:64:ee:35:ce: 9f:fb:ca:94:64:68:27:74:38:d9:8a:02:3a:1f:30: a2:f6:1d:69:79:de:8b:e2:d8:b4:48:a7:4a:6e:4e: ee:19:24:99:34:e7:fa:9a:63:1d:32:62:2a:3e:24: bc:1a:d2:1f:f7:b6:76:da:04:c0:ab:84:cd:1e:26: d9:3a:de:27:ce:a3:d6:44:55:d4:0c:3b:6d:f2:68: 5c:45:b2:13:dd:03:0d:e3:4b:e0:91:ca:4a:f1:21: 9f:60:6f:78:4a:14:37:47:1e:8c:e1:1f:6b:0f:1c: 71:68:54:07:99:b1:ee:33:5c:33:0c:9b:d2:08:d1: 8b:c4:51:c3:a6:46:3d:1b:c1:77:9c:d5:2b:97:10: 36:59:67:43:f1:48:18:4e:65:59:56:4d:bd:20:cd: 5a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9C:4A:04:D6:6B:EA:17:D6:A6:B1:6E:32:98:58:5A:83:79:FA:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/0ea9e1cf-0128-3fd6-a058-5e7b286fec44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 104.204.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:82:1c:c0:3d:31:3f:dc:13:74:2e:09:bb:de:de:0e:39:e8: d7:b7:4e:a1:1f:39:0a:d9:b0:c2:59:a7:af:34:64:1c:6f:a8: 34:0a:c7:b1:24:11:26:81:07:0b:f7:cb:25:68:ca:d8:84:a3: ca:37:d1:e6:ea:64:ab:f5:a9:51:85:ea:a8:29:c6:f5:43:e6: 58:2e:91:ae:77:da:60:75:e1:0f:b5:82:3d:b5:28:cc:e8:34: 57:d5:04:a0:20:42:61:a5:fa:03:99:32:24:91:35:e5:82:9e: 73:16:83:23:77:83:d1:71:c2:df:c3:ff:0c:2f:d7:0d:20:b7: b5:2b:89:9d:93:26:3e:d2:3c:9f:7f:53:e0:6a:cf:cf:bd:93: fa:1f:9e:ef:54:31:8c:60:f5:56:4c:e7:91:bf:b4:5a:ff:11: c7:5f:a5:a0:45:86:a3:25:a9:8d:30:64:80:36:0e:71:9f:b9: 3b:66:2c:4e:04:87:e9:05:18:d1:85:f8:10:87:69:9c:47:89: 6e:c5:6f:52:f9:b0:b9:45:8e:74:b8:d9:02:11:db:3e:46:28: 12:25:3c:a2:e6:19:6c:52:4c:03:1e:34:7b:69:d1:26:d9:95: 73:34:fb:71:20:4c:78:61:ba:6c:24:5f:0a:f2:61:c1:f7:40: 19:74:91:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPW//ijHAOd+txKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Nzc3ODBjOWQtZDViMC00MmM0LThmNzAtY2YwMTA2N2IzY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYHJsBPpW4WE81km3+jUsKaAq8hcTh8wF0+o Bj6r6Ycfa7uHiNwpK0C+wFkey9OMIDKO/DIxh4X/ENZKUN+Kwj/7ZcYVw/G4wWnt 72qf1XY1b0SuyqdjUpac9myQn7pS6HOy7mTuNc6f+8qUZGgndDjZigI6HzCi9h1p ed6L4ti0SKdKbk7uGSSZNOf6mmMdMmIqPiS8GtIf97Z22gTAq4TNHibZOt4nzqPW RFXUDDtt8mhcRbIT3QMN40vgkcpK8SGfYG94ShQ3Rx6M4R9rDxxxaFQHmbHuM1wz DJvSCNGLxFHDpkY9G8F3nNUrlxA2WWdD8UgYTmVZVk29IM1amQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEycSgTWa+oX1qaxbjKYWFqDefrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMGVhOWUxY2YtMDEyOC0z ZmQ2LWEwNTgtNWU3YjI4NmZlYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMzdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqCHMA9MT/cE3QuCbve3g456Ne3TqEfOQrZsMJZp680ZBxvqDQKx7Ek ESaBBwv3yyVoytiEo8o30ebqZKv1qVGF6qgpxvVD5lguka532mB14Q+1gj21KMzo NFfVBKAgQmGl+gOZMiSRNeWCnnMWgyN3g9Fxwt/D/wwv1w0gt7UriZ2TJj7SPJ9/ U+Bqz8+9k/ofnu9UMYxg9VZM55G/tFr/EcdfpaBFhqMlqY0wZIA2DnGfuTtmLE4E h+kFGNGF+BCHaZxHiW7Fb1L5sLlFjnS42QIR2z5GKBIlPKLmGWxSTAMeNHtp0SbZ lXM0+3EgTHhhumwkXwryYcH3QBl0kaA= -----END CERTIFICATE-----Generated at Sat Sep 26 18:28:30 2026 by rpki-client