$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/07215d43-75a8-3912-bf71-436c82bc6e22.roa File: 07215d43-75a8-3912-bf71-436c82bc6e22.roa (raw, json) Hash identifier: 5eKR9HRyHjtyi6XnVQwsKWYXuVCjtmmxWniw9dXwvAs= Subject key identifier: 78:4B:49:EA:4D:66:C9:AE:8D:EC:E3:D6:F5:E7:F3:EC:F8:87:15:AC Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F4328584F3CE2A23980CE988165CA3780 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/07215d43-75a8-3912-bf71-436c82bc6e22.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 40788 IP address blocks: 104.243.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a2:39:80:ce:98:81:65:ca:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=22baea54-df73-4792-b16a-4f1072fc2503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:a1:a7:d9:7e:1c:6a:84:c5:4b:b2:cc:3e: a4:79:ca:93:4a:f9:ff:47:2a:74:ca:34:fb:36:8c: dc:43:40:c4:63:08:0f:83:34:84:25:5d:44:1d:f8: 00:ae:e1:3a:aa:3e:14:48:8b:09:f1:a6:ad:24:d4: bb:a1:fc:93:d7:83:3d:5f:f2:3c:e9:c6:e5:15:37: 33:29:cc:48:3a:47:bd:7a:51:b8:f3:3f:70:2c:2c: 21:72:87:48:6d:bb:0d:f7:cf:bc:5d:26:16:3a:45: f6:5f:c6:7f:9a:d9:ee:4d:18:43:dc:90:70:c6:b8: 39:77:57:16:28:aa:cd:d7:1e:f3:85:60:fa:5c:ed: ee:b0:aa:38:41:78:d7:8c:a5:0a:3f:52:af:31:a1: ba:32:9c:89:25:85:06:d6:21:51:3c:6c:5c:ed:bf: 79:4f:b8:b7:d1:96:e6:f5:40:db:11:77:ae:87:27: 98:5b:89:c5:fa:2e:f4:e7:3e:b6:e2:a7:a3:4a:c3: a7:d9:e7:a2:23:6f:b4:64:71:12:86:48:a9:64:2d: 94:2e:ac:f3:11:92:80:99:b2:7d:0a:22:9b:29:26: e1:59:c9:a7:23:12:e5:16:08:2a:9f:9a:13:7f:b0: b4:21:59:5b:af:4c:48:b2:05:67:8a:29:8a:84:b0: d0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:49:EA:4D:66:C9:AE:8D:EC:E3:D6:F5:E7:F3:EC:F8:87:15:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/07215d43-75a8-3912-bf71-436c82bc6e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 104.243.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:72:43:e6:0a:cd:57:3e:cd:af:65:cd:a3:20:43:b1:e9:68: 62:7d:c8:01:85:c9:7b:10:5f:5a:c9:66:c2:96:cf:a3:2b:b2: e9:a6:ef:5c:3f:4f:94:0e:e3:36:dc:55:b0:73:a7:f8:91:8e: b9:ac:a6:b7:b6:bb:e5:a5:59:49:8b:5e:88:ff:74:a9:d4:9d: 4f:cd:98:9e:49:31:08:b2:8d:e6:9a:22:eb:00:68:1e:b2:00: d7:ad:17:c3:0e:27:8a:37:7b:fb:f6:93:e5:46:11:66:da:79: 07:a3:74:38:6e:c0:04:fc:58:63:64:3f:ef:a4:50:97:c6:15: 7a:ca:0e:fd:0c:af:e9:9a:8e:42:7d:4a:6c:41:0d:17:37:36: 22:90:84:4a:40:b4:cd:fb:69:c4:47:6f:f7:74:85:7a:bd:44: 67:ab:0f:90:de:2c:10:d9:08:23:91:f9:46:b8:2c:5d:c3:14: 1e:01:8e:41:8d:aa:f7:20:b8:13:e9:50:10:ff:7c:21:48:33: ce:16:8d:c0:64:e6:a4:0b:0b:9a:63:93:f0:a7:b1:d5:b6:6a: 2e:8f:69:57:17:52:53:af:89:84:c3:f4:05:a6:7f:13:f1:af: 83:f6:0a:c7:92:0f:7d:62:57:b3:40:ec:81:c8:cc:82:71:86: 94:12:d8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qI5gM6YgWXKN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MjJiYWVhNTQtZGY3My00NzkyLWIxNmEtNGYxMDcyZmMyNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6ahp9l+HGqExUuyzD6kecqTSvn/Ryp0yjT7 NozcQ0DEYwgPgzSEJV1EHfgAruE6qj4USIsJ8aatJNS7ofyT14M9X/I86cblFTcz KcxIOke9elG48z9wLCwhcodIbbsN98+8XSYWOkX2X8Z/mtnuTRhD3JBwxrg5d1cW KKrN1x7zhWD6XO3usKo4QXjXjKUKP1KvMaG6MpyJJYUG1iFRPGxc7b95T7i30Zbm 9UDbEXeuhyeYW4nF+i705z624qejSsOn2eeiI2+0ZHEShkipZC2ULqzzEZKAmbJ9 CiKbKSbhWcmnIxLlFggqn5oTf7C0IVlbr0xIsgVniimKhLDQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhLSepNZsmujezj1vXn8+z4hxWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvMDcyMTVkNDMtNzVhOC0z OTEyLWJmNzEtNDM2YzgyYmM2ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxyQ+YKzVc+za9lzaMgQ7HpaGJ9yAGFyXsQX1rJZsKWz6Mrsumm71w/ T5QO4zbcVbBzp/iRjrmspre2u+WlWUmLXoj/dKnUnU/NmJ5JMQiyjeaaIusAaB6y ANetF8MOJ4o3e/v2k+VGEWbaeQejdDhuwAT8WGNkP++kUJfGFXrKDv0Mr+majkJ9 SmxBDRc3NiKQhEpAtM37acRHb/d0hXq9RGerD5DeLBDZCCOR+Ua4LF3DFB4BjkGN qvcguBPpUBD/fCFIM84WjcBk5qQLC5pjk/CnsdW2ai6PaVcXUlOviYTD9AWmfxPx r4P2CseSD31iV7NA7IHIzIJxhpQS2Js= -----END CERTIFICATE-----Generated at Sun Sep 27 03:20:09 2026 by rpki-client