$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f04ac53-8dbd-3d30-b91c-0f9e6bb9ba97.roa File: 4f04ac53-8dbd-3d30-b91c-0f9e6bb9ba97.roa (raw, json) Hash identifier: 12HggkTlGPLlRlo/GzXBXQUeNfJ7Elwxgb22cDC1yRg= Subject key identifier: 38:AF:DA:71:2C:50:B6:E3:25:CB:6B:D8:BB:96:7B:FA:2B:C8:BC:5F Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F3E541D0E3268F63D445AF840 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f04ac53-8dbd-3d30-b91c-0f9e6bb9ba97.roa Signing time: Mon 21 Sep 2026 01:25:03 +0000 ROA not before: Mon 21 Sep 2026 01:25:03 +0000 ROA not after: Sun 20 Dec 2026 02:25:03 +0000 asID: 54600 IP address blocks: 104.233.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:54:1d:0e:32:68:f6:3d:44:5a:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 21 01:25:03 2026 GMT Not After : Dec 20 02:25:03 2026 GMT Subject: CN=46c18951-7e52-4255-91b0-ba4b057593cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:e3:cd:0e:56:5c:73:ee:0c:52:f9:5e:5c: 32:d1:8e:eb:f5:e5:03:21:a1:7c:62:19:0b:63:4c: e6:bc:0a:11:8c:51:60:e0:fa:9e:d5:16:6c:dd:80: b6:4b:ef:26:97:1c:cc:dc:08:de:7c:83:9c:83:16: 00:5e:fa:b5:7d:e8:17:7b:11:5d:83:b0:c7:29:96: 88:a6:c4:b7:5e:9c:2a:9c:c6:9b:28:a6:7b:48:9b: b8:ca:fc:35:9f:0e:82:b0:f1:ec:69:6d:df:d2:9f: a9:ab:e3:b2:1d:df:08:af:bd:5c:2b:7f:e1:c5:b2: 4c:44:9e:f9:5d:f9:45:db:c9:12:5d:0d:f7:e2:56: 2e:c4:b0:8a:a6:2b:cc:64:9a:1a:8b:aa:41:e2:dd: 4d:c3:30:c2:39:e0:4c:51:e8:78:9b:bb:2c:2a:24: da:95:8d:44:cc:c1:3e:6b:ea:24:cf:3b:f5:0b:17: ed:56:84:8c:52:26:0d:bd:e5:38:52:83:f8:ef:66: 4b:74:e5:ff:7e:36:64:5f:44:48:c6:f7:dc:8d:fc: a3:52:03:f1:f4:08:c6:c7:9e:4a:d5:74:05:f1:2a: 67:92:48:95:37:32:12:72:58:de:23:cb:a8:4a:9d: 8e:c2:cc:35:3e:6d:d4:9f:f0:9f:c3:6d:68:e0:cb: 60:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AF:DA:71:2C:50:B6:E3:25:CB:6B:D8:BB:96:7B:FA:2B:C8:BC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f04ac53-8dbd-3d30-b91c-0f9e6bb9ba97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3a:2f:64:b6:0f:96:7a:8d:d6:e0:3b:8d:c2:15:75:ed:4c: e5:c2:ea:4e:fb:a0:71:36:27:55:ce:29:23:f5:2a:d1:bb:fa: f6:d2:27:e3:d1:8b:4f:19:ff:17:21:84:06:63:7f:92:aa:b4: 78:f7:86:5f:e3:d2:aa:98:fe:c8:af:32:c3:99:78:3f:14:1e: 8b:6b:c3:6a:6b:d3:35:f7:6f:e4:ea:70:32:48:f3:51:77:18: cb:90:b1:0c:50:50:6a:c1:7f:05:24:10:51:43:af:cb:7b:b1: 57:7b:cf:5f:a7:b3:da:05:68:7d:56:68:e4:9d:c2:8e:83:7d: 3c:df:e6:3b:5e:a0:c2:64:59:a5:73:84:72:ee:51:8c:8c:4b: 9c:0d:eb:1d:ab:71:8b:33:a0:e7:58:cb:d5:17:40:e0:5d:a3: 1d:6b:b0:37:ce:4a:0d:60:74:53:95:5a:c1:a7:24:3c:4b:e7: de:ff:f5:bd:7c:6e:36:60:ae:42:a2:92:bc:fd:8f:a6:c5:a6: 8e:c1:47:5b:5f:6c:6b:84:f7:16:f8:bb:3f:0b:6f:2c:f4:de: 18:a2:52:d3:d3:66:12:6a:39:93:31:38:f5:2b:d6:82:c0:a3: fb:e9:db:63:28:fa:7a:f4:81:a1:3b:0e:7b:05:0a:fb:36:b6: c5:62:33:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+VB0OMmj2PURa+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDkyMTAxMjUwM1oXDTI2MTIyMDAyMjUwM1owLzEtMCsGA1UEAxMk NDZjMTg5NTEtN2U1Mi00MjU1LTkxYjAtYmE0YjA1NzU5M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTLjzQ5WXHPuDFL5Xlwy0Y7r9eUDIaF8YhkL Y0zmvAoRjFFg4Pqe1RZs3YC2S+8mlxzM3AjefIOcgxYAXvq1fegXexFdg7DHKZaI psS3XpwqnMabKKZ7SJu4yvw1nw6CsPHsaW3f0p+pq+OyHd8Ir71cK3/hxbJMRJ75 XflF28kSXQ334lYuxLCKpivMZJoai6pB4t1NwzDCOeBMUeh4m7ssKiTalY1EzME+ a+okzzv1CxftVoSMUiYNveU4UoP472ZLdOX/fjZkX0RIxvfcjfyjUgPx9AjGx55K 1XQF8SpnkkiVNzIScljeI8uoSp2Owsw1Pm3Un/Cfw21o4MtgDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiv2nEsULbjJctr2LuWe/oryLxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNGYwNGFjNTMtOGRiZC0z ZDMwLWI5MWMtMGY5ZTZiYjliYTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOmeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE46L2S2D5Z6jdbgO43CFXXtTOXC6k77oHE2J1XOKSP1KtG7+vbSJ+PR i08Z/xchhAZjf5KqtHj3hl/j0qqY/sivMsOZeD8UHotrw2pr0zX3b+TqcDJI81F3 GMuQsQxQUGrBfwUkEFFDr8t7sVd7z1+ns9oFaH1WaOSdwo6DfTzf5jteoMJkWaVz hHLuUYyMS5wN6x2rcYszoOdYy9UXQOBdox1rsDfOSg1gdFOVWsGnJDxL597/9b18 bjZgrkKikrz9j6bFpo7BR1tfbGuE9xb4uz8Lbyz03hiiUtPTZhJqOZMxOPUr1oLA o/vp22Mo+nr0gaE7DnsFCvs2tsViM24= -----END CERTIFICATE-----Generated at Thu Sep 24 10:21:08 2026 by rpki-client