$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa File: dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa (raw, json) Hash identifier: xe2Bz3XYHRKxGsu2JuFA/v1SgWWM89u++5HReU9R4yA= Subject key identifier: 88:15:33:45:A8:9F:B1:CF:03:3C:A1:C4:28:26:EB:9D:44:1E:F4:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4984E055CDCF43274FB02F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.154.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:e0:55:cd:cf:43:27:4f:b0:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d71a13f1-f902-4980-a3ff-e72e1ea9cf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:21:98:5f:a8:f9:8a:3c:0d:23:e7:77:58: b0:c1:14:70:ed:be:1c:7a:2d:2f:54:11:8f:ea:b4: e6:54:7b:c9:65:43:34:dd:c0:1f:4d:07:f5:14:9d: 30:d5:65:b6:d8:3b:e0:1f:17:0e:29:5f:53:4e:1a: 07:32:b5:95:e2:0a:4b:8a:89:37:30:15:80:ad:56: da:7e:fa:b7:f0:07:65:bd:bf:1f:91:63:1a:e9:b5: 89:09:84:50:e5:1d:d4:67:14:7a:87:d0:05:4f:98: a1:dc:2a:5e:94:6d:55:9c:b7:94:ad:27:5b:72:e5: 03:bb:de:de:8f:5e:56:5b:f6:76:f4:5b:80:50:c4: 96:38:67:ab:32:2b:89:e6:24:d3:10:ec:32:9e:6f: bd:7d:42:eb:0b:f9:66:39:b0:38:13:91:e2:32:35: db:09:2e:f6:6f:71:61:ef:d0:cd:8d:d0:05:c7:bd: 1f:9f:a9:9f:0f:1d:1e:7c:dd:fa:14:f0:49:d7:4e: 53:71:27:77:0a:66:6b:e0:f7:6d:71:da:58:fb:a0: b2:f9:34:6e:3e:50:53:d3:aa:c4:13:5b:30:38:1d: 97:d2:21:b4:f0:45:ab:85:6e:1f:da:ed:00:25:9e: 0d:f3:45:57:cf:29:62:58:de:44:cd:24:3a:4c:f4: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:33:45:A8:9F:B1:CF:03:3C:A1:C4:28:26:EB:9D:44:1E:F4:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dcf8fe2d-2fa7-3700-90ee-6e543461a21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:83:ac:84:ce:ec:f0:0e:2e:32:72:36:7e:63:c1:16:66:e5: b6:d2:29:06:ae:03:e4:19:59:64:b9:2a:c4:f0:6c:52:c3:67: 1b:a6:54:e9:fb:b3:17:50:d0:4b:b1:e4:86:93:d4:80:74:e7: b9:96:5e:15:7d:9e:52:6e:9c:99:25:12:4b:06:90:08:55:32: 6b:43:8c:a5:b5:d0:5e:b9:2c:d5:ae:ae:e7:44:e1:3d:93:17: 57:9b:96:e7:21:c4:2f:0b:d3:99:81:22:6f:fa:62:92:3e:93: 15:71:9e:29:69:40:ea:b2:78:21:ea:54:68:c8:e9:07:0f:e2: f7:a9:82:39:fa:af:f1:28:33:99:df:55:3c:42:50:4a:7d:3f: 6c:a1:08:36:0f:89:e5:a2:c7:1f:da:cf:23:0c:b3:95:90:21: 7a:14:f8:95:c5:0d:64:f3:be:ff:90:4a:6d:cd:72:47:d0:56: 4a:44:94:de:ca:ed:eb:1f:b5:59:e5:89:40:e7:e1:3e:bc:02: 32:c0:db:b5:92:cb:dc:f0:e6:9e:10:dc:2c:3f:70:d1:42:8f: 58:3c:f1:09:f4:07:a3:35:de:da:b2:51:f7:fc:56:f3:d0:cc: 5a:1a:e9:46:2c:4c:5c:cf:43:a1:94:ad:33:6e:dd:86:6b:45: e5:90:75:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhOBVzc9DJ0+wLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDcxYTEzZjEtZjkwMi00OTgwLWEzZmYtZTcyZTFlYTljZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUohmF+o+Yo8DSPnd1iwwRRw7b4cei0vVBGP 6rTmVHvJZUM03cAfTQf1FJ0w1WW22DvgHxcOKV9TThoHMrWV4gpLiok3MBWArVba fvq38Adlvb8fkWMa6bWJCYRQ5R3UZxR6h9AFT5ih3CpelG1VnLeUrSdbcuUDu97e j15WW/Z29FuAUMSWOGerMiuJ5iTTEOwynm+9fULrC/lmObA4E5HiMjXbCS72b3Fh 79DNjdAFx70fn6mfDx0efN36FPBJ105TcSd3CmZr4PdtcdpY+6Cy+TRuPlBT06rE E1swOB2X0iG08EWrhW4f2u0AJZ4N80VXzyliWN5EzSQ6TPS0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgVM0Won7HPAzyhxCgm651EHvSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGNmOGZlMmQtMmZhNy0z NzAwLTkwZWUtNmU1NDM0NjFhMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJp2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaDrITO7PAOLjJyNn5jwRZm5bbSKQauA+QZWWS5KsTwbFLDZxumVOn7 sxdQ0Eux5IaT1IB057mWXhV9nlJunJklEksGkAhVMmtDjKW10F65LNWurudE4T2T F1ebluchxC8L05mBIm/6YpI+kxVxnilpQOqyeCHqVGjI6QcP4vepgjn6r/EoM5nf VTxCUEp9P2yhCDYPieWixx/azyMMs5WQIXoU+JXFDWTzvv+QSm3NckfQVkpElN7K 7esftVnliUDn4T68AjLA27WSy9zw5p4Q3Cw/cNFCj1g88Qn0B6M13tqyUff8VvPQ zFoa6UYsTFzPQ6GUrTNu3YZrReWQdZs= -----END CERTIFICATE-----Generated at Sun Sep 27 15:50:35 2026 by rpki-client