$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3bb2bbd1-072d-3180-a0e4-f25b8c85a2b0.roa File: 3bb2bbd1-072d-3180-a0e4-f25b8c85a2b0.roa (raw, json) Hash identifier: aq7XvB2fhoPqgY7/cnYZKYgxFE5wqMA9o208faha0pc= Subject key identifier: E5:7A:20:C0:22:F6:D0:C2:8E:36:14:6E:04:20:57:5D:3F:6E:63:95 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F49735B6BADE7E75976668240 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3bb2bbd1-072d-3180-a0e4-f25b8c85a2b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 104.145.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5b:6b:ad:e7:e7:59:76:66:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67be5235-7cec-4bba-88a1-5f8f1397e1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:69:bc:c6:08:81:c0:0d:ac:2f:5a:3f:1c: 2b:aa:05:5a:84:0d:c8:3b:61:b1:4d:90:5a:f9:a0: c1:8e:1c:4c:f9:54:11:51:0b:c0:8b:5c:fe:9f:1a: 90:b5:25:70:3e:4c:50:34:b1:ba:4e:ad:06:93:b6: 2d:7f:2d:71:17:c4:09:05:d5:c0:df:46:39:f5:55: f0:b0:f6:04:7a:cf:97:71:a1:66:d2:0d:a5:ab:f0: b2:c3:c9:20:18:1e:c7:b0:71:fc:f7:f0:7f:20:7c: 3c:49:ea:a1:0e:c7:2c:cf:43:1c:19:8f:36:c5:62: d9:85:04:7f:a0:d4:70:ca:43:6f:4f:b2:af:a0:97: d3:9b:03:99:be:24:6f:22:85:f2:48:44:31:a1:39: 3f:95:00:66:56:4f:1f:0a:c1:6a:47:05:ab:bc:c3: f4:fb:7b:fe:4b:bd:6a:34:6c:73:6e:be:6c:14:2c: b8:3b:a9:b9:f9:65:26:d4:17:ca:10:a7:19:1c:a7: 0b:17:7f:25:f4:e2:b8:0c:6a:27:8b:11:8c:0e:80: 55:5a:2c:06:06:a8:76:70:94:d8:98:82:1a:6e:a6: 58:5b:31:7c:19:1d:d6:ac:74:d5:04:29:1e:90:6b: 33:b4:03:9e:e4:34:07:53:ba:2e:af:2e:7f:d7:37: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7A:20:C0:22:F6:D0:C2:8E:36:14:6E:04:20:57:5D:3F:6E:63:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3bb2bbd1-072d-3180-a0e4-f25b8c85a2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:51:df:b3:e5:a1:21:b4:78:32:c3:eb:90:9e:f2:0c:ed:cc: d6:bb:67:36:d8:f7:ba:42:b4:36:db:4d:f5:f4:3a:3c:61:b5: 2a:34:1e:3f:4f:15:9a:0a:2d:01:8a:bb:58:6c:80:98:c9:9a: 6b:0c:62:56:3e:02:2a:74:90:8c:af:2c:37:e0:be:aa:23:81: 50:9d:e7:7d:39:6e:e7:fa:05:1e:c5:1e:12:69:ac:25:de:32: 4e:ba:b5:d1:1c:bf:3c:70:bf:19:44:b8:cb:83:7a:88:0f:1e: f7:68:14:d5:ff:ef:f9:a3:d5:71:fc:5e:8e:b7:de:51:6b:67: a1:40:1e:85:84:9d:61:8d:61:33:a4:84:89:6c:f0:6d:02:3a: 3d:10:43:43:ab:17:fa:49:b5:2f:5b:07:a4:1d:c2:18:d5:21: 3f:88:2a:53:9f:7d:36:96:3f:34:b7:92:dc:e8:29:4c:18:21: 52:db:f5:68:f7:36:32:dc:34:d6:a5:03:17:d3:58:c7:5f:7f: 38:9e:9a:a8:3f:03:81:8a:22:5c:c5:78:42:d9:f2:2c:51:c1: 84:b8:41:5f:b7:0f:b9:1c:29:43:3a:21:64:bb:97:b5:10:d5: 9a:db:c3:94:3d:08:4d:08:40:98:6c:ae:b1:a1:b7:e9:ef:5d: 16:d6:08:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1trrefnWXZmgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjdiZTUyMzUtN2NlYy00YmJhLTg4YTEtNWY4ZjEzOTdlMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0xpvMYIgcANrC9aPxwrqgVahA3IO2GxTZBa +aDBjhxM+VQRUQvAi1z+nxqQtSVwPkxQNLG6Tq0Gk7Ytfy1xF8QJBdXA30Y59VXw sPYEes+XcaFm0g2lq/Cyw8kgGB7HsHH89/B/IHw8SeqhDscsz0McGY82xWLZhQR/ oNRwykNvT7KvoJfTmwOZviRvIoXySEQxoTk/lQBmVk8fCsFqRwWrvMP0+3v+S71q NGxzbr5sFCy4O6m5+WUm1BfKEKcZHKcLF38l9OK4DGonixGMDoBVWiwGBqh2cJTY mIIabqZYWzF8GR3WrHTVBCkekGsztAOe5DQHU7oury5/1zeZ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV6IMAi9tDCjjYUbgQgV10/bmOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2JiMmJiZDEtMDcyZC0z MTgwLWEwZTQtZjI1YjhjODVhMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZR37PloSG0eDLD65Ce8gztzNa7ZzbY97pCtDbbTfX0OjxhtSo0Hj9P FZoKLQGKu1hsgJjJmmsMYlY+Aip0kIyvLDfgvqojgVCd5305buf6BR7FHhJprCXe Mk66tdEcvzxwvxlEuMuDeogPHvdoFNX/7/mj1XH8Xo633lFrZ6FAHoWEnWGNYTOk hIls8G0COj0QQ0OrF/pJtS9bB6QdwhjVIT+IKlOffTaWPzS3ktzoKUwYIVLb9Wj3 NjLcNNalAxfTWMdffziemqg/A4GKIlzFeELZ8ixRwYS4QV+3D7kcKUM6IWS7l7UQ 1Zrbw5Q9CE0IQJhsrrGht+nvXRbWCCo= -----END CERTIFICATE-----Generated at Fri Sep 25 14:39:34 2026 by rpki-client