$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa File: 3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json) Hash identifier: e2lx/gh4ZIC5Mo4SSaFDhs9nxzjxAr0R0hE+bZ9IdGY= Subject key identifier: 96:2C:18:93:39:CB:DA:97:82:B1:18:53:DA:AE:A3:D6:08:87:7E:6D Certificate issuer: /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Certificate serial: 010D0C9F4328584F497704DFDEBC131AC3BD5680 Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9712 IP address blocks: 104.251.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:04:df:de:bc:13:1a:c3:bd:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38aaa0c5-00a3-4139-aa35-4551ae5cadc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:e2:47:a0:8d:10:0f:a8:50:42:31:84:03: 1d:ef:b5:fa:31:15:9e:80:89:53:4c:40:b5:93:d1: 85:df:f6:46:cb:8f:60:9c:aa:15:42:08:31:fe:ed: 73:67:f3:69:ae:a3:58:78:f8:b3:bd:51:bd:c3:30: 80:b3:8b:c8:98:43:23:c1:26:1e:1a:3c:fa:bf:71: ec:94:3c:c4:9b:6a:fe:dc:0f:82:62:bf:c0:53:1a: 6f:20:8f:e0:ec:37:10:69:60:ba:1c:0d:b7:e1:d6: 7d:53:04:fc:14:75:d8:9c:c6:f7:9a:b3:6e:d5:1d: f4:dd:9b:62:b5:21:6c:67:53:87:03:a3:bd:2c:63: f8:88:3e:35:ba:4b:01:89:bb:32:06:b0:5a:81:25: 19:81:a7:19:60:90:54:e5:fb:e5:df:e9:b5:ab:35: 6f:2a:f1:81:28:b1:2a:74:1f:0e:28:7e:4b:de:e0: fe:49:ef:db:2b:14:87:ac:fc:ce:b4:cc:9b:55:bb: 2a:f4:36:55:84:dc:33:b5:ec:be:71:5d:24:d9:71: f7:a2:12:f7:a0:de:db:b2:b6:25:ac:2c:d9:c4:b0: c6:e8:6d:fd:fc:79:49:b2:c5:4b:0c:0d:ac:03:fb: 13:6e:6e:15:dd:62:5b:5c:b9:e3:35:28:9e:47:73: 68:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:18:93:39:CB:DA:97:82:B1:18:53:DA:AE:A3:D6:08:87:7E:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl X509v3 Authority Key Identifier: keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer sbgp-ipAddrBlock: critical IPv4: 104.251.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:21:7e:09:2b:7e:08:59:87:d0:d2:0a:5e:3c:e2:e9:7b:08: d3:c3:3e:bd:c6:08:97:35:e0:31:a5:11:90:b7:1a:8b:3d:49: eb:78:af:e5:47:2a:8f:12:b9:c6:63:b3:90:9d:4f:3f:e5:dd: fb:2b:76:0b:3c:1b:b3:7b:bf:09:87:35:bf:ee:16:01:23:15: 0e:a7:e1:72:0c:05:36:43:c8:6c:d8:3e:85:74:c4:26:31:bd: 55:41:d1:87:c8:d5:d5:57:d3:29:38:46:5e:71:5e:3f:f9:34: ab:f2:cb:40:74:7f:55:c6:f9:8c:40:02:19:03:53:80:09:fb: 9c:0e:71:15:8d:35:e9:74:88:d5:83:9e:c6:c6:0e:3e:99:93: cd:1a:7e:bc:b9:70:f9:84:0d:ad:46:08:d1:b9:a8:e4:7d:f7: 45:98:00:97:4b:8b:78:15:15:7d:03:f2:b4:fa:31:ef:dc:25: c4:f3:6f:56:94:eb:e9:72:99:42:a7:7c:0f:a8:84:de:69:87: b3:99:54:a6:33:34:84:18:ef:1f:e7:45:8f:a5:65:ae:1b:d0: 49:f0:7f:d1:f5:d7:14:4e:d8:ac:47:72:d0:b0:49:0c:9d:b2: f2:73:ad:bf:00:53:e7:ae:a1:c5:43:c7:46:9a:6a:a5:40:dc: 25:89:21:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdwTf3rwTGsO9VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFiZGUwN2ItMjg4OC00NTkyLTgxNDUtZjRiY2QzZTNh MTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhhYWEwYzUtMDBhMy00MTM5LWFhMzUtNDU1MWFlNWNhZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2biR6CNEA+oUEIxhAMd77X6MRWegIlTTEC1 k9GF3/ZGy49gnKoVQggx/u1zZ/NprqNYePizvVG9wzCAs4vImEMjwSYeGjz6v3Hs lDzEm2r+3A+CYr/AUxpvII/g7DcQaWC6HA234dZ9UwT8FHXYnMb3mrNu1R303Zti tSFsZ1OHA6O9LGP4iD41uksBibsyBrBagSUZgacZYJBU5fvl3+m1qzVvKvGBKLEq dB8OKH5L3uD+Se/bKxSHrPzOtMybVbsq9DZVhNwztey+cV0k2XH3ohL3oN7bsrYl rCzZxLDG6G39/HlJssVLDA2sA/sTbm4V3WJbXLnjNSieR3NoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYsGJM5y9qXgrEYU9quo9YIh35tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJk ZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJjZDNlM2ExMmEvM2ExNDAzZjEtMDFiYy0z MmY5LTk3MzQtYjFkZmM2ZGNkNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjFiZGUwN2ItMjg4OC00NTkyLTgx NDUtZjRiY2QzZTNhMTJhL2IxYmRlMDdiLTI4ODgtNDU5Mi04MTQ1LWY0YmNkM2Uz YTEyYS5jcmwwHwYDVR0jBBgwFoAUK+RPWssBQtxS7Wsbo+me/XzGY7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMWJkZTA3Yi0yODg4LTQ1OTItODE0NS1mNGJj ZDNlM2ExMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFghfgkrfghZh9DSCl484ul7CNPDPr3GCJc14DGlEZC3Gos9Set4r+VH Ko8SucZjs5CdTz/l3fsrdgs8G7N7vwmHNb/uFgEjFQ6n4XIMBTZDyGzYPoV0xCYx vVVB0YfI1dVX0yk4Rl5xXj/5NKvyy0B0f1XG+YxAAhkDU4AJ+5wOcRWNNel0iNWD nsbGDj6Zk80afry5cPmEDa1GCNG5qOR990WYAJdLi3gVFX0D8rT6Me/cJcTzb1aU 6+lymUKnfA+ohN5ph7OZVKYzNIQY7x/nRY+lZa4b0Enwf9H11xRO2KxHctCwSQyd svJzrb8AU+euocVDx0aaaqVA3CWJISI= -----END CERTIFICATE-----Generated at Sun Oct 4 13:23:30 2026 by rpki-client