$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa File: f21189fb-e23d-3eb9-89ca-2076fda69f76.roa (raw, json) Hash identifier: s3iGw3XRmDZCTFaBL/AVo/OLXhEfMxPs6BajN853IUQ= Subject key identifier: 56:73:D0:F7:DD:D7:C3:9C:55:C8:26:0D:D8:0B:6D:E3:55:30:1C:5C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CC860D61C82537368D500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.154.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:c8:60:d6:1c:82:53:73:68:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=723ea0a8-8f9e-49be-915e-ac419b0258ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3e:54:6e:67:c1:ef:c6:5e:c3:90:20:04:b0: 3a:ba:69:60:75:8c:71:1e:c1:ca:7f:b0:ed:c3:74: cf:27:36:b3:2d:d0:f6:ff:32:7f:f3:f8:05:90:39: d5:a0:f6:6d:68:5b:7a:fa:d0:f7:ae:b1:d8:46:a8: 8c:d5:6c:6b:b5:5f:39:2b:1c:28:3f:3a:ee:6b:86: 9d:1b:33:ac:8c:c2:e3:0a:33:59:c5:43:53:87:b7: ba:9d:fd:54:b5:37:80:6f:e4:38:60:91:25:75:d7: 02:5b:46:bf:27:87:40:d2:48:02:29:c2:43:72:97: cf:9a:3a:02:04:e0:e4:0a:eb:4e:f8:ad:ce:59:b8: 15:7a:3d:e9:48:c2:68:78:4a:fe:97:d5:87:95:22: ed:ee:43:52:72:58:ae:23:82:b6:56:9f:6e:24:4c: c2:05:be:fb:68:30:5c:bd:ff:8d:5f:c7:dc:0b:c5: c4:8d:17:6d:1d:2d:c0:10:65:18:5e:7b:cb:1d:b5: 27:18:17:1e:06:f6:c6:13:50:2b:3f:58:b9:b6:5f: 44:86:1f:50:7c:fb:69:2c:7e:9c:59:e2:55:61:1a: 7c:44:1d:0e:50:4d:78:a1:78:0d:5e:d1:db:c5:69: 0e:34:ac:bf:27:0c:e2:d7:ac:a9:d8:18:4d:04:63: bf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:73:D0:F7:DD:D7:C3:9C:55:C8:26:0D:D8:0B:6D:E3:55:30:1C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f21189fb-e23d-3eb9-89ca-2076fda69f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a0:3c:df:9c:fe:38:f1:df:5a:96:f1:2b:e6:b6:d6:60:85: ba:76:98:f3:f0:2f:fa:f6:6f:5c:f1:8a:3a:8f:2b:c6:95:3d: b3:3a:55:33:a0:9a:27:e2:e1:c6:f7:61:bc:5c:41:e8:f6:04: ea:c6:6d:03:63:1a:df:1c:27:f4:9e:88:37:cd:a4:97:ec:ed: f1:de:d1:70:db:e4:d3:ab:88:42:0c:50:82:92:78:09:16:82: 93:7d:66:d2:87:88:fd:b1:3e:64:20:4f:de:07:b9:3e:48:9e: a1:05:74:62:85:2b:2f:95:4a:82:b8:1e:78:b1:23:62:53:21: 69:d9:83:88:92:c9:b0:d0:aa:ff:15:7e:4d:87:e1:67:c7:0c: 32:9d:e5:0c:19:69:3b:8a:3b:9c:8a:d2:00:fe:cc:c8:89:f3: 43:c7:c1:ac:2c:16:21:1b:92:c7:1e:11:65:d5:7d:5a:67:c6: 81:2b:6a:a8:68:06:9e:97:fb:eb:bd:66:0f:ec:40:af:f4:9d: 1b:80:3b:bd:99:2f:c5:76:32:d5:f9:d2:3e:14:ba:a1:c3:95: 7d:1f:10:60:af:ba:08:ec:38:5e:2b:dd:27:f7:e4:a2:19:e5: 15:ab:a5:fc:ab:0b:ff:48:f9:78:a6:1d:7e:77:02:ff:f8:6c: d6:32:ab:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfMhg1hyCU3No1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzIzZWEwYTgtOGY5ZS00OWJlLTkxNWUtYWM0MTliMDI1OGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T5UbmfB78Zew5AgBLA6umlgdYxxHsHKf7Dt w3TPJzazLdD2/zJ/8/gFkDnVoPZtaFt6+tD3rrHYRqiM1WxrtV85KxwoPzrua4ad GzOsjMLjCjNZxUNTh7e6nf1UtTeAb+Q4YJElddcCW0a/J4dA0kgCKcJDcpfPmjoC BODkCutO+K3OWbgVej3pSMJoeEr+l9WHlSLt7kNScliuI4K2Vp9uJEzCBb77aDBc vf+NX8fcC8XEjRdtHS3AEGUYXnvLHbUnGBceBvbGE1ArP1i5tl9Ehh9QfPtpLH6c WeJVYRp8RB0OUE14oXgNXtHbxWkONKy/Jwzi16yp2BhNBGO/DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZz0Pfd18OcVcgmDdgLbeNVMBxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjIxMTg5ZmItZTIzZC0z ZWI5LTg5Y2EtMjA3NmZkYTY5Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFigPN+c/jjx31qW8SvmttZghbp2mPPwL/r2b1zxijqPK8aVPbM6VTOg mifi4cb3YbxcQej2BOrGbQNjGt8cJ/SeiDfNpJfs7fHe0XDb5NOriEIMUIKSeAkW gpN9ZtKHiP2xPmQgT94HuT5InqEFdGKFKy+VSoK4HnixI2JTIWnZg4iSybDQqv8V fk2H4WfHDDKd5QwZaTuKO5yK0gD+zMiJ80PHwawsFiEbksceEWXVfVpnxoEraqho Bp6X++u9Zg/sQK/0nRuAO72ZL8V2MtX50j4UuqHDlX0fEGCvugjsOF4r3Sf35KIZ 5RWrpfyrC/9I+XimHX53Av/4bNYyq+0= -----END CERTIFICATE-----Generated at Sun Sep 27 09:52:36 2026 by rpki-client