$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6f6823e-db3c-3065-8f20-5102dda0ec74.roa File: a6f6823e-db3c-3065-8f20-5102dda0ec74.roa (raw, json) Hash identifier: rbnPCt2nQhcNLyFkBjoScTOTWpF4zPHYoEHZ0Y1/PyI= Subject key identifier: 02:97:5B:A9:72:0A:74:E8:F6:7C:09:DD:79:D8:26:72:1B:22:DA:56 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F19FCED4BA01D3D0CB5CE1180 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6f6823e-db3c-3065-8f20-5102dda0ec74.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 104.145.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:ed:4b:a0:1d:3d:0c:b5:ce:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=4ae1ed51-be52-4c24-965a-54653486815f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:0d:f3:bc:77:74:e6:04:bb:a3:0f:98:c6: 34:ab:97:78:02:53:c2:75:26:cd:76:83:8a:1b:4d: 4f:32:bf:f6:64:79:92:13:1d:a1:2a:2e:9c:df:ce: 8e:ab:89:65:6a:97:fd:d5:3e:94:1b:a5:6b:29:4f: ac:fd:45:18:bd:79:31:d0:c5:d6:00:1d:5d:f0:50: 1e:cb:08:6b:46:7f:97:4c:15:94:9f:f9:5e:c8:83: a0:4e:04:48:dd:05:a2:04:3d:59:d0:a2:98:c7:a5: 0b:d5:0f:f3:a7:50:76:88:65:86:d2:97:ff:53:93: 1c:ee:a0:40:8a:a8:7e:e6:ab:a3:84:ef:a2:9d:eb: 7f:ef:5f:c1:00:0d:71:ac:5f:da:2d:c8:6a:27:f9: ec:91:fe:4f:db:e3:d1:73:36:1c:23:b3:e4:c3:18: 44:2b:c8:35:83:22:27:61:c0:59:22:e6:ad:36:1c: 6f:da:c8:13:22:eb:63:ee:1d:22:bc:06:65:74:90: 43:57:a1:4b:04:a7:7f:82:50:fc:90:cc:27:63:41: 53:99:39:30:cf:21:41:97:fe:b3:ef:2f:25:e8:aa: e6:e0:78:13:36:83:26:aa:80:91:6d:ae:b5:9a:46: ea:97:b0:c9:bc:d4:ae:d3:80:3c:c6:43:61:56:d5: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:5B:A9:72:0A:74:E8:F6:7C:09:DD:79:D8:26:72:1B:22:DA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6f6823e-db3c-3065-8f20-5102dda0ec74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 104.145.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3d:06:82:ea:90:8f:5c:37:be:ca:22:ff:87:bf:81:a0:fe: ec:f8:e0:a1:5c:b7:46:45:1d:72:c4:fe:eb:13:a3:2d:4e:16: 41:eb:54:19:99:f7:0c:79:e0:ae:0f:6e:07:97:87:14:8a:7b: c6:16:cb:92:e3:0b:2f:7c:00:79:d4:6a:67:e3:af:86:77:0f: 45:7b:a7:de:67:3f:8a:dc:c2:a3:1c:ff:28:b7:9a:15:1c:17: b9:a0:15:e3:47:9d:4d:ce:cc:cd:4e:b9:bc:78:15:2a:d9:7c: b2:62:f5:91:f3:6f:2c:df:71:ad:2a:40:0a:5e:10:17:45:d1: 14:a2:2d:43:3c:dd:c5:f7:a4:a5:12:f5:7b:b8:2a:03:bf:6f: 3b:10:83:db:2d:ec:7b:26:06:ec:b5:75:53:c1:1f:a8:71:4f: 62:f5:73:51:71:69:02:54:4d:54:e8:3f:16:b4:88:1e:b5:72: 03:03:92:1b:ed:01:b7:e7:c0:c0:20:e7:bc:7e:96:74:74:3d: 7b:e1:54:9b:50:00:4c:7d:fc:53:ae:de:ff:18:67:5d:0c:7e: 4a:67:e4:c1:f7:81:72:a1:b0:7a:40:17:ac:0c:71:32:53:d6: 39:3c:97:d7:e6:d4:4a:7e:73:c1:12:a9:9a:6c:5d:4e:5a:4a: fc:92:e8:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/O1LoB09DLXOEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NGFlMWVkNTEtYmU1Mi00YzI0LTk2NWEtNTQ2NTM0ODY4MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8N87x3dOYEu6MPmMY0q5d4AlPCdSbNdoOK G01PMr/2ZHmSEx2hKi6c386Oq4llapf91T6UG6VrKU+s/UUYvXkx0MXWAB1d8FAe ywhrRn+XTBWUn/leyIOgTgRI3QWiBD1Z0KKYx6UL1Q/zp1B2iGWG0pf/U5Mc7qBA iqh+5qujhO+inet/71/BAA1xrF/aLchqJ/nskf5P2+PRczYcI7PkwxhEK8g1gyIn YcBZIuatNhxv2sgTIutj7h0ivAZldJBDV6FLBKd/glD8kMwnY0FTmTkwzyFBl/6z 7y8l6Krm4HgTNoMmqoCRba61mkbql7DJvNSu04A8xkNhVtXwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKXW6lyCnTo9nwJ3XnYJnIbItpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTZmNjgyM2UtZGIzYy0z MDY1LThmMjAtNTEwMmRkYTBlYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJFtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI9BoLqkI9cN77KIv+Hv4Gg/uz44KFct0ZFHXLE/usToy1OFkHrVBmZ 9wx54K4PbgeXhxSKe8YWy5LjCy98AHnUamfjr4Z3D0V7p95nP4rcwqMc/yi3mhUc F7mgFeNHnU3OzM1Oubx4FSrZfLJi9ZHzbyzfca0qQApeEBdF0RSiLUM83cX3pKUS 9Xu4KgO/bzsQg9st7HsmBuy1dVPBH6hxT2L1c1FxaQJUTVToPxa0iB61cgMDkhvt AbfnwMAg57x+lnR0PXvhVJtQAEx9/FOu3v8YZ10Mfkpn5MH3gXKhsHpAF6wMcTJT 1jk8l9fm1Ep+c8ESqZpsXU5aSvyS6Kw= -----END CERTIFICATE-----Generated at Fri Sep 25 23:17:12 2026 by rpki-client