$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa File: 9b494297-3222-3843-851d-68c7c1744624.roa (raw, json) Hash identifier: /rS3HHEDuCGlqPyenXLq2GLvDN+G2hSbF0pihIH2X+s= Subject key identifier: F8:3C:85:8B:9B:1A:56:9E:14:71:E9:25:52:DD:CE:C2:D2:CC:A5:41 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584F454287BA5220B48A72A45540 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 21743 IP address blocks: 104.247.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:87:ba:52:20:b4:8a:72:a4:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=8bf4711c-9440-48e4-856b-87e6c89af84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:9d:f0:b4:55:64:c9:24:f2:f4:8c:6a:29: 64:cb:09:d4:da:5e:1f:f7:9d:4b:5d:42:cb:3b:a9: ec:a6:23:67:76:de:3e:8e:3d:6d:2b:d6:9e:aa:69: 98:12:57:0c:f0:8a:99:ea:33:5d:f1:95:5e:a4:e1: d5:b4:5d:31:89:fe:dc:a0:7a:6a:bc:20:57:a5:78: 58:19:55:3c:c2:47:87:97:47:31:76:e5:a2:3d:64: d0:3e:63:8c:2f:6c:02:f8:64:72:f6:2b:1f:48:0d: 8b:52:11:ea:af:5c:8f:39:f7:bf:22:bb:6f:a8:6c: d0:9c:7e:a6:bc:ec:a6:d5:98:ca:4e:72:e3:f4:0a: 6e:d6:4a:01:e1:fd:e3:da:57:57:ee:36:ff:07:2d: c7:5b:5f:5a:4a:61:ca:75:40:2c:0e:f7:a8:87:c2: e6:1c:96:07:28:c0:b2:32:07:2e:08:07:b8:96:d7: a4:84:e2:6c:4e:76:bf:80:ab:e1:8a:d4:3e:01:21: 61:cb:d9:8d:26:15:58:bd:96:2b:60:0a:a9:de:68: 64:82:5f:f5:2a:47:9a:b2:fc:f6:21:ec:ef:c5:33: 91:10:d5:87:29:51:6d:36:7f:9f:bc:35:d0:34:39: 4b:37:5b:a6:c6:d9:61:d6:08:12:54:ca:59:4b:d8: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3C:85:8B:9B:1A:56:9E:14:71:E9:25:52:DD:CE:C2:D2:CC:A5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/9b494297-3222-3843-851d-68c7c1744624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:42:d1:2a:e0:07:f1:e5:3e:85:4b:0a:f4:7d:80:3c:1b:a2: 91:54:6e:79:5e:23:75:1b:0b:a9:f6:96:fc:1a:5f:82:91:a8: b7:d1:68:03:f9:b1:78:bb:0c:5e:9d:f6:11:08:df:46:06:26: d3:2c:99:8f:86:bb:84:01:96:d6:a4:85:fd:26:82:0b:6b:89: c0:ef:40:2f:49:76:fb:fb:17:ae:f5:45:d8:df:75:6d:07:84: 7a:eb:d2:ec:2a:25:ca:76:03:2b:df:a6:f9:80:9e:d7:77:ad: a3:9d:33:eb:02:39:e3:f5:c7:09:8f:0a:f7:32:b6:71:3a:8e: 56:04:fa:f0:be:40:2a:6b:22:d5:1a:db:13:33:77:4a:94:25: 34:ce:46:0a:b9:ed:fb:13:e1:d4:64:3f:fd:39:46:4f:f5:6e: 3d:44:80:65:a4:47:24:6c:ad:92:44:b1:de:2f:5c:26:28:e3: b8:56:ee:fb:e5:7d:54:c0:c1:b0:f3:50:6a:ec:1e:3b:21:1b: 03:45:a3:de:b9:a6:60:c3:ad:c2:1b:9c:b1:f0:5f:83:69:f1: ff:5e:17:15:0a:07:43:2a:75:88:75:4b:f1:35:91:0d:7c:f8: f1:68:ba:ee:b5:10:49:93:21:28:b9:b7:59:d7:9c:51:c3:4c: 12:45:da:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoe6UiC0inKkVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk OGJmNDcxMWMtOTQ0MC00OGU0LTg1NmItODdlNmM4OWFmODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F2d8LRVZMkk8vSMailkywnU2l4f951LXULL O6nspiNndt4+jj1tK9aeqmmYElcM8IqZ6jNd8ZVepOHVtF0xif7coHpqvCBXpXhY GVU8wkeHl0cxduWiPWTQPmOML2wC+GRy9isfSA2LUhHqr1yPOfe/IrtvqGzQnH6m vOym1ZjKTnLj9Apu1koB4f3j2ldX7jb/By3HW19aSmHKdUAsDveoh8LmHJYHKMCy MgcuCAe4ltekhOJsTna/gKvhitQ+ASFhy9mNJhVYvZYrYAqp3mhkgl/1Kkeasvz2 IezvxTORENWHKVFtNn+fvDXQNDlLN1umxtlh1ggSVMpZS9inEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg8hYubGlaeFHHpJVLdzsLSzKVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOWI0OTQyOTctMzIyMi0z ODQzLTg1MWQtNjhjN2MxNzQ0NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5C0SrgB/HlPoVLCvR9gDwbopFUbnleI3UbC6n2lvwaX4KRqLfRaAP5 sXi7DF6d9hEI30YGJtMsmY+Gu4QBltakhf0mggtricDvQC9Jdvv7F671RdjfdW0H hHrr0uwqJcp2AyvfpvmAntd3raOdM+sCOeP1xwmPCvcytnE6jlYE+vC+QCprItUa 2xMzd0qUJTTORgq57fsT4dRkP/05Rk/1bj1EgGWkRyRsrZJEsd4vXCYo47hW7vvl fVTAwbDzUGrsHjshGwNFo965pmDDrcIbnLHwX4Np8f9eFxUKB0MqdYh1S/E1kQ18 +PFouu61EEmTISi5t1nXnFHDTBJF2tA= -----END CERTIFICATE-----Generated at Sat Sep 26 15:49:14 2026 by rpki-client