$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/740b987b-5d98-3555-aa27-c7481216b98c.roa File: 740b987b-5d98-3555-aa27-c7481216b98c.roa (raw, json) Hash identifier: 0S/bone6o3Ynk/KdF0tIN5XU/7IS9h8aEAt816XvC3M= Subject key identifier: E6:84:BF:B2:6D:2E:CE:FF:FF:7C:B1:7B:6A:D4:11:1E:87:87:D0:B9 Certificate issuer: /CN=d6a27a7a-adec-4b8c-ba89-c39fd750a679 Certificate serial: 010D0C9F4328584F4976CFB80A070561C6944F00 Authority key identifier: 8F:23:79:EE:B0:4C:6B:B3:25:39:6F:9F:7E:0F:51:D5:43:F6:26:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/740b987b-5d98-3555-aa27-c7481216b98c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54209 IP address blocks: 104.218.0.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:cf:b8:0a:07:05:61:c6:94:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a27a7a-adec-4b8c-ba89-c39fd750a679 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd6127ca-91ed-478e-827b-2bed72233de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:da:bb:31:cc:89:2f:f3:43:7b:06:69:b3: a1:41:16:53:e4:9d:9a:66:7e:c0:18:7e:32:f8:52: 36:72:5a:b5:72:0e:c2:f1:99:ba:b0:a5:8f:9f:f5: cd:35:a3:73:be:88:c4:b7:24:4e:ff:ae:8e:f8:6f: d9:0a:11:17:aa:9d:ee:a0:5d:89:62:50:6d:77:e7: 8b:bb:99:08:69:04:0f:10:33:ad:dd:fc:a6:99:13: d7:90:10:c9:6d:a5:23:76:db:78:8b:7d:a5:9f:87: 19:13:69:b1:5e:f2:3e:10:04:36:b6:79:0e:ed:1e: bc:9b:f6:37:9b:80:08:90:69:82:e0:50:0d:f4:d8: d7:c4:ed:f9:54:8d:d3:03:90:6e:7b:23:8e:21:1d: 0a:32:8d:0f:ae:07:a6:cf:ab:02:e0:4c:1d:d7:59: d6:1c:90:a1:2b:4c:e7:05:cf:50:32:c8:97:50:5c: 68:2f:1c:9a:29:61:05:45:b5:52:2c:09:23:ce:02: 60:79:65:04:95:83:a1:13:e2:53:3e:84:bd:39:e9: 33:f7:25:48:f9:e3:1c:77:31:5a:b3:6c:a9:91:4f: 22:18:4f:6c:e4:ce:9f:13:ea:2d:1d:14:d6:a2:aa: f8:7c:5e:f9:ab:14:85:c0:92:7e:d4:1f:67:75:4a: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:84:BF:B2:6D:2E:CE:FF:FF:7C:B1:7B:6A:D4:11:1E:87:87:D0:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/740b987b-5d98-3555-aa27-c7481216b98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679/d6a27a7a-adec-4b8c-ba89-c39fd750a679.crl X509v3 Authority Key Identifier: keyid:8F:23:79:EE:B0:4C:6B:B3:25:39:6F:9F:7E:0F:51:D5:43:F6:26:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d6a27a7a-adec-4b8c-ba89-c39fd750a679.cer sbgp-ipAddrBlock: critical IPv4: 104.218.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b3:5b:f4:56:fd:5a:da:c7:51:fd:39:c6:31:b9:4b:4f:94: 52:c9:cd:06:73:78:92:71:88:d7:56:be:2a:81:85:7e:87:57: 3e:ab:89:a1:69:ee:e7:08:ca:56:b3:55:58:39:31:ed:1d:cd: 1d:9a:de:4e:d7:ad:d5:91:89:89:56:b7:a5:49:71:ab:a6:8f: b8:a7:17:30:1d:0d:27:c9:dc:f9:ea:1f:7c:cc:50:b9:58:2b: 2d:79:3c:b3:b6:43:a9:ba:c6:bb:48:9f:19:9b:74:7a:fc:0c: 70:d0:00:0a:71:ee:04:28:9c:a5:46:5a:d5:7a:ad:08:1c:c9: 27:83:29:69:5a:11:a1:bf:2f:91:58:d9:b3:55:39:1b:f1:0d: 1a:e4:a4:c9:4d:50:72:2d:3d:f8:01:1f:28:17:4e:d2:ff:43: 91:ad:3b:40:39:4c:bb:0b:e0:cf:78:8f:f0:85:d4:f8:2a:a2: 49:63:3b:5a:06:75:57:30:40:02:1f:24:5d:8d:8d:fc:a9:09: 11:79:b7:42:1c:74:a3:6d:1c:f0:e6:c1:75:a1:9e:38:8e:b7: 4f:5d:28:a2:2c:2e:6c:84:84:47:d5:76:2f:84:9b:c3:ef:e7: 8d:49:32:60:c7:8a:e6:ed:b9:70:bf:1b:58:d3:43:bb:8f:9e: a9:19:28:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jds+4CgcFYcaUTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZhMjdhN2EtYWRlYy00YjhjLWJhODktYzM5ZmQ3NTBh Njc5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQ2MTI3Y2EtOTFlZC00NzhlLTgyN2ItMmJlZDcyMjMzZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApULauzHMiS/zQ3sGabOhQRZT5J2aZn7AGH4y +FI2clq1cg7C8Zm6sKWPn/XNNaNzvojEtyRO/66O+G/ZChEXqp3uoF2JYlBtd+eL u5kIaQQPEDOt3fymmRPXkBDJbaUjdtt4i32ln4cZE2mxXvI+EAQ2tnkO7R68m/Y3 m4AIkGmC4FAN9NjXxO35VI3TA5BueyOOIR0KMo0Prgemz6sC4Ewd11nWHJChK0zn Bc9QMsiXUFxoLxyaKWEFRbVSLAkjzgJgeWUElYOhE+JTPoS9Oekz9yVI+eMcdzFa s2ypkU8iGE9s5M6fE+otHRTWoqr4fF75qxSFwJJ+1B9ndUoMwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaEv7JtLs7//3yxe2rUER6Hh9C5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNmEy N2E3YS1hZGVjLTRiOGMtYmE4OS1jMzlmZDc1MGE2NzkvNzQwYjk4N2ItNWQ5OC0z NTU1LWFhMjctYzc0ODEyMTZiOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDZhMjdhN2EtYWRlYy00YjhjLWJh ODktYzM5ZmQ3NTBhNjc5L2Q2YTI3YTdhLWFkZWMtNGI4Yy1iYTg5LWMzOWZkNzUw YTY3OS5jcmwwHwYDVR0jBBgwFoAUjyN57rBMa7MlOW+ffg9R1UP2JsIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNmEyN2E3YS1hZGVjLTRiOGMtYmE4OS1jMzlm ZDc1MGE2NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCzW/RW/Vrax1H9OcYxuUtPlFLJzQZzeJJxiNdWviqBhX6HVz6riaFp 7ucIylazVVg5Me0dzR2a3k7XrdWRiYlWt6VJcaumj7inFzAdDSfJ3PnqH3zMULlY Ky15PLO2Q6m6xrtInxmbdHr8DHDQAApx7gQonKVGWtV6rQgcySeDKWlaEaG/L5FY 2bNVORvxDRrkpMlNUHItPfgBHygXTtL/Q5GtO0A5TLsL4M94j/CF1PgqokljO1oG dVcwQAIfJF2NjfypCRF5t0IcdKNtHPDmwXWhnjiOt09dKKIsLmyEhEfVdi+Em8Pv 541JMmDHiubtuXC/G1jTQ7uPnqkZKPY= -----END CERTIFICATE-----Generated at Mon Sep 28 10:34:05 2026 by rpki-client