$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa File: 2ca1fafd-5784-383a-86a2-45ab028896d0.roa (raw, json) Hash identifier: JRM9+/NhrjL1P1lX8KhFNOJP5EfaxRrwU81wdK91KRU= Subject key identifier: CB:65:CF:61:B7:D4:54:87:A4:F2:23:27:26:86:0C:5A:2F:82:D0:27 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584F49774C3CA3ED3E45223E03C0 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 931 IP address blocks: 104.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:4c:3c:a3:ed:3e:45:22:3e:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d584277-ab93-4faf-8fa1-84255fb569f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:20:d7:32:bb:fc:e8:d5:38:d2:cd:38:a9: d5:cc:08:0b:6e:c2:33:76:56:c0:6a:eb:cb:44:b6: ed:fa:d9:52:bd:47:90:1b:b8:34:6a:e1:ba:ca:8a: 89:c4:79:7c:5d:fd:e7:51:bf:39:3f:de:c1:a3:3c: 85:7e:65:3c:5b:f3:9e:21:e6:10:7f:a2:e2:c3:f3: 58:0f:34:6e:30:23:92:e3:52:4f:ff:8e:95:3d:3e: 51:73:9f:f8:8f:a6:a7:c6:13:51:3e:25:bf:d3:62: 3c:28:37:4a:ea:f6:78:9d:80:06:10:87:61:fc:94: 15:2e:3d:dd:5c:23:6a:12:86:6c:2a:99:a2:bc:3a: 6c:37:f3:b3:a9:af:9c:ca:51:9f:71:65:b7:df:ba: a0:aa:7b:86:d0:5d:b7:4a:6e:46:40:2e:b0:b7:d3: 45:31:e2:a9:5c:57:5f:7d:46:30:6f:45:bc:b9:7e: a1:67:f9:a2:3d:6a:1a:3a:b4:3e:02:93:39:7e:fe: 4b:56:79:58:44:7a:3b:4f:c1:4c:c8:5e:18:d0:f4: 02:7a:a4:5d:a9:32:9f:7c:c6:f2:a8:fa:e3:46:c8: 2a:5b:9b:2e:ab:19:2b:cb:4d:79:9a:10:d6:40:c2: 92:73:26:1b:06:90:61:97:ec:81:40:45:76:55:bd: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:65:CF:61:B7:D4:54:87:A4:F2:23:27:26:86:0C:5A:2F:82:D0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/2ca1fafd-5784-383a-86a2-45ab028896d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 104.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:28:b3:fc:58:57:2f:e6:4f:b5:79:01:45:95:32:1e:28:d5: ae:48:d3:4d:35:09:4f:df:e5:d2:18:00:61:a7:41:c2:7b:f4: e0:8f:12:6d:6f:6a:1d:1a:96:f1:7d:10:1c:8d:96:40:e7:14: f4:51:69:f2:9d:58:90:ca:73:d2:6a:f0:d5:0d:9c:86:ab:8f: ab:74:29:58:91:b7:e3:ab:cf:c2:f4:33:87:7f:1c:fa:54:9e: 78:66:db:ec:86:58:bb:65:95:aa:cb:26:42:15:3a:4f:d9:2d: 2d:65:b4:3e:0f:01:40:a4:11:cc:77:53:23:b5:9c:1c:1b:68: dd:fb:e1:25:45:81:8c:44:2c:3c:78:63:a9:61:15:9d:01:01: 65:fa:b4:d8:df:d3:f1:6a:57:46:22:7e:5f:25:b2:78:a1:6b: 36:97:32:e2:1a:8e:2c:b0:1d:24:7f:0f:55:4c:ae:bb:f7:55: a9:39:f9:58:3b:87:ea:53:03:b6:f5:0d:19:4a:bc:7c:58:03: e8:2a:91:a4:67:c4:f5:da:2e:88:ee:bf:90:81:3a:bd:a9:41: cc:ea:65:ce:6f:ad:ee:ab:06:80:e3:bc:65:b0:a5:a6:e4:68: ba:66:f4:da:15:55:b7:f2:58:f3:19:33:4e:2b:13:db:c0:21: fd:33:86:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0w8o+0+RSI+A8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ1ODQyNzctYWI5My00ZmFmLThmYTEtODQyNTVmYjU2OWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rcg1zK7/OjVONLNOKnVzAgLbsIzdlbAauvL RLbt+tlSvUeQG7g0auG6yoqJxHl8Xf3nUb85P97BozyFfmU8W/OeIeYQf6Liw/NY DzRuMCOS41JP/46VPT5Rc5/4j6anxhNRPiW/02I8KDdK6vZ4nYAGEIdh/JQVLj3d XCNqEoZsKpmivDpsN/Ozqa+cylGfcWW337qgqnuG0F23Sm5GQC6wt9NFMeKpXFdf fUYwb0W8uX6hZ/miPWoaOrQ+ApM5fv5LVnlYRHo7T8FMyF4Y0PQCeqRdqTKffMby qPrjRsgqW5suqxkry015mhDWQMKScyYbBpBhl+yBQEV2Vb3kPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtlz2G31FSHpPIjJyaGDFovgtAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvMmNhMWZhZmQtNTc4NC0z ODNhLTg2YTItNDVhYjAyODg5NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4os/xYVy/mT7V5AUWVMh4o1a5I0001CU/f5dIYAGGnQcJ79OCPEm1v ah0alvF9EByNlkDnFPRRafKdWJDKc9Jq8NUNnIarj6t0KViRt+Orz8L0M4d/HPpU nnhm2+yGWLtllarLJkIVOk/ZLS1ltD4PAUCkEcx3UyO1nBwbaN374SVFgYxELDx4 Y6lhFZ0BAWX6tNjf0/FqV0Yifl8lsnihazaXMuIajiywHSR/D1VMrrv3Vak5+Vg7 h+pTA7b1DRlKvHxYA+gqkaRnxPXaLojuv5CBOr2pQczqZc5vre6rBoDjvGWwpabk aLpm9NoVVbfyWPMZM04rE9vAIf0zhgI= -----END CERTIFICATE-----Generated at Sun Sep 27 01:16:52 2026 by rpki-client