$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa File: a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa (raw, json) Hash identifier: I/tiT2TvfiDWVgZqH0VS4YEpzuRK5lP3oTb+9Z7Ikgg= Subject key identifier: 23:7E:31:05:FB:65:5F:1E:41:D8:5C:90:54:97:3A:99:51:36:FF:46 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584F497CD52270B99679D9C24C80 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 104.237.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:d5:22:70:b9:96:79:d9:c2:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a228a5ce-657b-4583-b4d3-04367783a1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:45:b4:c1:b8:f9:45:40:78:f9:8e:de:51:38: c3:22:07:d0:45:10:13:fa:07:61:65:cc:f7:b7:ce: 9f:0c:b9:e3:a5:4e:31:5f:a0:4f:a1:52:ff:9f:14: 82:32:f5:59:ee:b7:f4:fe:11:16:8c:29:ec:1a:73: d4:ca:7e:9c:5e:d7:7d:04:95:ee:5e:9c:ab:71:cc: a9:77:64:53:a0:82:39:4f:7f:36:ba:fb:c9:d3:cd: 12:29:47:ba:e9:00:37:c2:d4:18:27:6f:aa:80:14: 21:4b:04:7c:18:c4:b7:c0:32:f3:7d:19:cb:72:8a: d6:37:07:b8:7a:ec:7b:bc:24:b5:7f:41:16:e7:7e: e6:3f:ab:78:8e:b1:ab:53:c1:3c:23:a3:4b:cb:0e: b7:c7:bc:c1:0a:d5:cf:4a:da:72:0a:bb:7c:c2:3d: 69:5e:19:0b:a2:1e:cc:72:b7:ce:e7:91:2f:55:db: b9:5d:c0:d6:6e:ae:97:0d:fa:e6:07:b7:e1:27:bf: 89:5c:d5:43:28:f0:fc:d8:4e:23:5b:39:e0:2c:f2: 46:21:cd:64:08:90:3f:fe:d0:c4:47:54:3b:e2:ae: b9:39:57:dc:23:99:0f:52:da:a8:36:cc:2d:bf:b1: 03:54:44:36:de:7d:03:22:39:40:49:b2:62:98:0f: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:31:05:FB:65:5F:1E:41:D8:5C:90:54:97:3A:99:51:36:FF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0e1c60d-0c88-3531-85fc-34c4c62c8225.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 104.237.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f3:11:db:54:22:4f:3c:f4:54:82:1e:98:c5:bb:df:95:4b: ea:79:d8:73:16:c2:ab:bb:75:75:5c:eb:04:0f:25:45:c2:5e: 5f:8d:75:53:24:f8:c5:cc:cf:16:56:a1:f2:6d:a7:92:17:22: ac:6b:99:76:f5:20:0d:4e:21:36:56:de:d5:d7:fc:04:31:b3: 1b:3c:71:dd:7d:3c:b1:ea:42:46:00:5b:bf:7a:38:91:6a:b3: ba:89:43:10:af:f9:ec:91:f1:27:2f:52:98:fd:dd:a7:ae:a7: 77:0a:2e:97:7e:2b:3a:33:ab:20:08:12:72:58:ae:79:3a:70: 63:1d:e4:cc:2b:fa:96:3e:96:e3:a6:01:fe:26:ba:f2:54:11: 5e:c6:84:cd:30:91:f5:94:fe:83:7f:60:78:bf:b6:95:1a:92: 54:50:39:b1:8f:60:e6:c0:44:03:fd:b8:3e:d7:23:5c:e2:ea: 86:af:c9:e1:84:0a:b9:e0:ae:1d:c4:55:c8:97:8f:57:aa:35: 29:05:a9:63:18:28:19:7f:c4:64:89:47:c0:94:a7:41:6f:36: d0:43:20:74:1a:b2:e0:bd:d7:d9:77:24:08:be:d7:9b:3c:12: e1:43:35:2b:ed:a1:b2:d6:0a:c0:af:b4:d2:74:32:35:ac:ba: 20:8f:a3:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNUicLmWednCTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTIyOGE1Y2UtNjU3Yi00NTgzLWI0ZDMtMDQzNjc3ODNhMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEW0wbj5RUB4+Y7eUTjDIgfQRRAT+gdhZcz3 t86fDLnjpU4xX6BPoVL/nxSCMvVZ7rf0/hEWjCnsGnPUyn6cXtd9BJXuXpyrccyp d2RToII5T382uvvJ080SKUe66QA3wtQYJ2+qgBQhSwR8GMS3wDLzfRnLcorWNwe4 eux7vCS1f0EW537mP6t4jrGrU8E8I6NLyw63x7zBCtXPStpyCrt8wj1pXhkLoh7M crfO55EvVdu5XcDWbq6XDfrmB7fhJ7+JXNVDKPD82E4jWzngLPJGIc1kCJA//tDE R1Q74q65OVfcI5kPUtqoNswtv7EDVEQ23n0DIjlASbJimA9z+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN+MQX7ZV8eQdhckFSXOplRNv9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTBlMWM2MGQtMGM4OC0z NTMxLTg1ZmMtMzRjNGM2MmM4MjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaO2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELzEdtUIk889FSCHpjFu9+VS+p52HMWwqu7dXVc6wQPJUXCXl+NdVMk +MXMzxZWofJtp5IXIqxrmXb1IA1OITZW3tXX/AQxsxs8cd19PLHqQkYAW796OJFq s7qJQxCv+eyR8ScvUpj93aeup3cKLpd+KzozqyAIEnJYrnk6cGMd5Mwr+pY+luOm Af4muvJUEV7GhM0wkfWU/oN/YHi/tpUaklRQObGPYObARAP9uD7XI1zi6oavyeGE Crngrh3EVciXj1eqNSkFqWMYKBl/xGSJR8CUp0FvNtBDIHQasuC919l3JAi+15s8 EuFDNSvtobLWCsCvtNJ0MjWsuiCPo5Y= -----END CERTIFICATE-----Generated at Sun Oct 11 08:45:24 2026 by rpki-client