$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa File: 1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa (raw, json) Hash identifier: iI5cM3z3Ed2tdgFjWcFK4lvXSCB1+uF4ApTqNbFlyCo= Subject key identifier: 33:04:B9:0D:06:04:87:88:11:92:22:EC:8A:95:FE:C1:39:32:72:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CC5B28D883C38B0993E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.198.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:c5:b2:8d:88:3c:38:b0:99:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba05def8-6a74-4b49-bedd-b8e8bb5d73a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:ef:d3:0e:6f:2a:91:ea:e5:dc:7e:74:c3: 38:cd:ed:32:ba:5a:8e:22:e7:a9:14:47:a5:87:ab: 6e:8c:3b:a0:45:32:d3:f1:fd:6e:66:ef:e9:0c:b0: c4:e2:87:6f:16:9e:ed:b5:c6:9f:6c:e1:10:66:74: 0c:01:1b:f3:1d:1e:15:92:76:71:d8:7b:33:cf:98: 91:aa:f8:72:44:bf:ab:73:81:de:9f:80:7d:b4:4b: 8c:e2:f4:db:cf:6c:ae:6c:d4:ac:c7:7d:51:63:f9: 34:ea:12:ca:59:19:b5:1b:83:d3:70:0a:c7:f2:3d: 01:23:68:7f:89:77:60:b6:c0:a4:4c:93:30:fd:ac: d5:5b:c7:5a:66:87:a5:37:be:10:c7:47:8a:49:a9: e8:6d:57:43:45:2b:2f:f7:d7:80:d8:00:89:71:48: 63:6e:6a:dd:b1:c9:e6:0d:e0:f7:92:dd:e0:c6:7b: 47:74:c3:ec:a0:46:6e:d7:46:3a:3c:3d:0e:a8:8b: 85:f0:53:cf:cf:a2:4d:b6:6b:6b:a7:3e:cb:3c:33: cc:ea:d3:d8:f5:d7:70:78:32:af:db:02:71:8f:bd: 3b:41:c4:86:77:26:92:90:d6:86:e2:19:ac:61:4e: 0b:ef:2f:5b:78:0c:33:b4:d8:5e:6c:ec:d3:2c:7b: 84:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:B9:0D:06:04:87:88:11:92:22:EC:8A:95:FE:C1:39:32:72:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:53:95:60:8a:0a:b4:86:9f:67:f0:fe:3d:23:db:e8:1b:af: 2c:b0:91:6a:70:e8:6d:82:aa:6c:68:b0:36:9b:3c:6f:ec:ce: ef:3b:20:bb:3c:ca:cf:d2:a1:5c:99:45:3d:5d:eb:ec:43:58: 78:8d:c7:0c:db:d4:2b:3c:db:6a:55:62:d2:bd:b5:19:50:c7: 94:ca:dd:3e:ac:e6:9d:dd:a4:cc:e5:e0:af:8d:29:f4:40:5c: e7:3a:6a:27:a5:11:e1:d7:93:c7:07:78:13:8e:7c:5f:c9:9b: 3f:e1:51:0e:a6:aa:f7:95:1c:fd:35:27:48:45:2d:d1:43:d2: e2:58:59:bb:8d:7f:55:72:bd:96:3f:2d:37:e9:5f:91:3b:05: 49:a7:34:c6:4a:ca:e4:df:7d:96:50:08:92:4e:d1:54:2e:be: bb:d7:5b:bf:9f:3b:9f:ac:d7:4f:9f:64:cc:4f:b4:e8:2c:c5: eb:d5:9c:5a:67:7b:fb:db:ac:90:b8:ec:b9:18:11:05:3e:61: 63:ae:db:b8:08:51:8e:07:c9:03:1c:16:71:f0:64:7a:5d:b4: 9c:9c:5c:d4:26:7f:25:fa:6a:9d:f7:85:df:3a:26:37:5f:b0: bb:91:f3:3f:86:32:8c:e9:df:6d:0b:38:2e:a6:0c:f9:9e:53: 9e:4d:b8:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMWyjYg8OLCZPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmEwNWRlZjgtNmE3NC00YjQ5LWJlZGQtYjhlOGJiNWQ3M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpTv0w5vKpHq5dx+dMM4ze0yulqOIuepFEel h6tujDugRTLT8f1uZu/pDLDE4odvFp7ttcafbOEQZnQMARvzHR4VknZx2Hszz5iR qvhyRL+rc4Hen4B9tEuM4vTbz2yubNSsx31RY/k06hLKWRm1G4PTcArH8j0BI2h/ iXdgtsCkTJMw/azVW8daZoelN74Qx0eKSanobVdDRSsv99eA2ACJcUhjbmrdscnm DeD3kt3gxntHdMPsoEZu10Y6PD0OqIuF8FPPz6JNtmtrpz7LPDPM6tPY9ddweDKv 2wJxj707QcSGdyaSkNaG4hmsYU4L7y9beAwztNhebOzTLHuE0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMEuQ0GBIeIEZIi7IqV/sE5MnKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIyMWE2YmQtMzkzYS0z NzU4LWI2ZjgtOGJmMDBjYzk2NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFTlWCKCrSGn2fw/j0j2+gbryywkWpw6G2CqmxosDabPG/szu87ILs8 ys/SoVyZRT1d6+xDWHiNxwzb1Cs822pVYtK9tRlQx5TK3T6s5p3dpMzl4K+NKfRA XOc6aielEeHXk8cHeBOOfF/Jmz/hUQ6mqveVHP01J0hFLdFD0uJYWbuNf1VyvZY/ LTfpX5E7BUmnNMZKyuTffZZQCJJO0VQuvrvXW7+fO5+s10+fZMxPtOgsxevVnFpn e/vbrJC47LkYEQU+YWOu27gIUY4HyQMcFnHwZHpdtJycXNQmfyX6ap33hd86Jjdf sLuR8z+GMozp320LOC6mDPmeU55NuBI= -----END CERTIFICATE-----Generated at Mon Sep 28 10:36:46 2026 by rpki-client