$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa File: 87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa (raw, json) Hash identifier: hk0jSCnd2ayTbh34If/ZtPrnRIw+Pm/4POPK87GkIsg= Subject key identifier: 85:33:18:8E:C4:C8:97:85:90:4A:18:66:4B:25:0E:06:C9:93:4F:5E Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F4328584F23C25B73769C89C50FE8E340 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 174 IP address blocks: 104.167.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5b:73:76:9c:89:c5:0f:e8:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=41a906cb-0373-4f8b-b474-654f367f0b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:1b:ba:06:13:18:97:dd:81:45:cc:7b:e9: ac:37:ff:be:f0:83:bc:dd:6f:99:85:92:36:0f:5c: 6b:6e:76:9e:b2:2d:fb:8a:33:b5:a8:40:f5:ef:80: d9:50:b3:d8:61:c0:ad:c3:93:c4:ea:bd:d4:ae:73: 19:9e:a1:1e:91:8c:b4:f4:57:3c:1d:25:06:89:ac: a3:92:76:e6:28:c6:1b:e3:9c:df:c5:e3:20:07:19: ea:16:55:56:a3:c5:10:ae:76:6b:ae:73:66:22:02: ce:0b:cd:c4:fc:32:1e:94:94:8d:e9:96:a3:a1:30: d6:4e:e1:5e:56:71:f9:0b:2b:42:b3:81:ea:64:5a: 85:cb:69:71:72:3f:ff:05:a5:e2:e1:3b:52:34:ec: 13:21:49:cc:4b:3e:96:32:00:f5:07:0e:a3:65:d5: d8:3f:b4:6a:67:58:12:92:94:f6:3b:b6:8a:49:4d: 74:59:f5:42:d1:7a:56:c8:98:32:05:33:75:69:dc: 2a:14:e6:76:70:5b:36:78:54:ff:5c:a4:4b:4e:0c: 51:9f:79:aa:1b:1b:95:ad:77:ed:6e:55:65:fa:31: a0:ff:2a:e9:2a:52:2f:3f:27:21:f6:8b:cc:00:dc: 15:93:87:58:7a:18:48:d3:96:60:45:78:2a:f2:29: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:33:18:8E:C4:C8:97:85:90:4A:18:66:4B:25:0E:06:C9:93:4F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/87dfd4ab-4205-3b5c-a284-b2fe2106d17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv4: 104.167.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:40:09:b1:33:a2:5f:1a:74:fd:ed:d1:22:ef:49:4a:c1:9d: 30:19:55:f8:52:41:5f:80:76:24:9b:8c:f9:93:30:78:10:7b: 34:75:cc:45:ae:2d:91:e0:62:1b:39:a4:ba:47:3b:a4:0f:fc: 97:68:20:63:f1:f0:30:4d:5d:36:5c:e5:45:26:8e:b7:f9:b5: 7d:48:08:15:1e:c3:ba:7f:c0:74:bf:91:f1:a6:73:7e:d2:ec: a8:3b:2b:33:32:77:4c:01:de:bf:8d:18:27:0d:4c:52:93:b4: da:44:8d:21:76:24:05:21:81:48:a3:06:af:13:72:08:cd:d1: 3d:0a:b8:86:a6:c5:d7:bd:2d:28:f6:dc:0d:24:0e:0e:d0:c6: bc:8b:ad:74:24:ac:3f:6d:54:f9:8c:66:a0:fb:bc:35:2d:59: eb:66:d6:8e:ab:4c:ac:48:c7:5e:17:ff:c8:85:8d:d2:f1:6e: cc:74:46:fb:92:21:bf:16:3c:ee:e0:56:bd:e5:d0:ed:3d:d8: a7:5d:21:32:a9:4d:24:ed:e8:cd:d7:fc:02:9a:46:43:c2:59: 57:77:1f:a0:44:c1:92:eb:91:78:ea:95:2a:f0:23:0f:00:fb: 48:9c:21:bc:8a:c3:df:64:76:9a:e7:63:1b:1d:57:cb:4c:93: 2e:89:11:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwltzdpyJxQ/o40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NDFhOTA2Y2ItMDM3My00ZjhiLWI0NzQtNjU0ZjM2N2YwYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2QbugYTGJfdgUXMe+msN/++8IO83W+ZhZI2 D1xrbnaesi37ijO1qED174DZULPYYcCtw5PE6r3UrnMZnqEekYy09Fc8HSUGiayj knbmKMYb45zfxeMgBxnqFlVWo8UQrnZrrnNmIgLOC83E/DIelJSN6ZajoTDWTuFe VnH5CytCs4HqZFqFy2lxcj//BaXi4TtSNOwTIUnMSz6WMgD1Bw6jZdXYP7RqZ1gS kpT2O7aKSU10WfVC0XpWyJgyBTN1adwqFOZ2cFs2eFT/XKRLTgxRn3mqGxuVrXft blVl+jGg/yrpKlIvPych9ovMANwVk4dYehhI05ZgRXgq8insBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUzGI7EyJeFkEoYZkslDgbJk09eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvODdkZmQ0YWItNDIwNS0z YjVjLWEyODQtYjJmZTIxMDZkMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKflMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINACbEzol8adP3t0SLvSUrBnTAZVfhSQV+AdiSbjPmTMHgQezR1zEWu LZHgYhs5pLpHO6QP/JdoIGPx8DBNXTZc5UUmjrf5tX1ICBUew7p/wHS/kfGmc37S 7Kg7KzMyd0wB3r+NGCcNTFKTtNpEjSF2JAUhgUijBq8TcgjN0T0KuIamxde9LSj2 3A0kDg7QxryLrXQkrD9tVPmMZqD7vDUtWetm1o6rTKxIx14X/8iFjdLxbsx0RvuS Ib8WPO7gVr3l0O092KddITKpTSTt6M3X/AKaRkPCWVd3H6BEwZLrkXjqlSrwIw8A +0icIbyKw99kdprnYxsdV8tMky6JEY0= -----END CERTIFICATE-----Generated at Tue Sep 22 19:58:52 2026 by rpki-client