$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa File: eb71a70a-24f1-3abd-8225-b45fd87b3249.roa (raw, json) Hash identifier: Oc86EsKEHbgyVU7o3dNpwgVoM5ONvnGgxI4p3GulsyM= Subject key identifier: 1E:D5:70:F9:F6:3D:4A:1A:10:08:8D:6D:68:75:AE:EB:D6:14:B0:B9 Certificate issuer: /CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3 Certificate serial: 010D0C9F4328584F0D6CE8106A99DFE2205B5A80 Authority key identifier: 2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 54060 IP address blocks: 164.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e8:10:6a:99:df:e2:20:5b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=d2307557-6ac6-4997-88a4-97209f34b434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:44:ce:f0:17:94:5d:82:8e:78:b1:5c:c1:29: 46:b5:52:f1:43:1d:7c:97:1e:6a:4e:de:20:ee:cb: 57:96:15:b9:30:75:7c:12:d0:ad:11:a3:49:18:12: 51:ee:7e:96:23:ad:b2:59:dc:dc:37:3c:64:81:d7: f7:46:34:60:0c:2f:9b:47:38:38:7a:bc:c1:75:15: f8:53:87:f2:89:c6:f4:62:30:df:8a:5b:9c:95:4a: 50:ba:1a:54:dd:49:e2:3a:ea:1f:36:95:3d:af:4f: 84:b5:be:59:1d:23:5c:24:80:21:b2:3c:01:99:84: f9:3d:33:0c:53:4a:fe:be:15:cd:2b:4c:69:5c:78: 1c:31:76:ec:5f:2d:45:ba:13:de:35:12:72:05:c5: 1e:31:0f:6e:88:04:b2:aa:46:cc:e8:89:d4:99:25: 55:6e:22:21:f2:46:98:67:0e:89:59:46:1a:5f:e1: 89:a3:5d:e5:19:66:c2:00:c9:f2:15:8a:f1:ee:21: 12:f5:1f:94:58:5c:f2:91:18:7a:4a:65:66:aa:9c: bf:14:5c:6a:6f:50:01:c9:7f:dc:07:a7:a6:fb:a7: f9:45:d5:56:29:f9:eb:ce:ce:d0:5e:5c:c0:7c:08: c5:82:8f:3c:fa:fa:1f:48:6f:af:6e:56:9b:37:3f: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D5:70:F9:F6:3D:4A:1A:10:08:8D:6D:68:75:AE:EB:D6:14:B0:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl X509v3 Authority Key Identifier: keyid:2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer sbgp-ipAddrBlock: critical IPv4: 164.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:51:80:45:2e:43:d8:38:62:a1:73:9f:fd:7f:f3:11:d3:21: 1d:e8:62:ae:9b:80:0d:27:d5:da:ff:4d:61:c5:e3:49:c7:d1: 56:81:27:6a:9b:b6:27:3e:31:1c:85:43:37:53:92:f6:9b:c7: c4:76:b5:2e:cf:6f:3e:59:ac:f7:50:8a:49:bb:ec:14:62:a6: 86:78:4a:ad:c6:36:72:93:1b:6c:74:fb:d9:51:69:3e:e6:46: ff:e2:1b:06:02:e1:43:85:3e:46:c5:07:58:fa:8d:77:92:18: 6e:34:f1:2d:31:28:16:93:11:64:25:1d:ce:db:c2:a0:8a:d5: 1b:42:88:90:b2:e1:7f:cb:fd:af:29:4b:bc:08:fa:b3:31:5e: 47:c6:2b:6f:2d:81:15:77:86:77:fb:7a:08:c9:3e:fe:03:b0: ac:00:48:23:98:13:78:47:5b:45:14:12:1b:65:97:1f:dd:7e: e7:1e:7f:9b:71:0e:f5:cf:99:b9:bb:3a:7c:cc:ee:bc:19:e1: 31:03:49:bc:ad:cf:32:6f:f3:0e:a9:4f:f8:9a:b7:5f:0b:7b: 67:c8:3e:b8:00:f3:21:5e:1e:26:d2:9c:42:af:49:5e:6d:52: 1f:a4:77:66:cc:19:35:17:6b:b3:8b:e4:0d:b0:e6:7e:0c:5a: a7:b5:e7:55 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8NbOgQapnf4iBbWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4MWQ3YzAtODIxNy00M2YyLTkwNDctNWU2YzBiODVh OGUzMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDIzMDc1NTctNmFjNi00OTk3LTg4YTQtOTcyMDlmMzRiNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUTO8BeUXYKOeLFcwSlGtVLxQx18lx5qTt4g 7stXlhW5MHV8EtCtEaNJGBJR7n6WI62yWdzcNzxkgdf3RjRgDC+bRzg4erzBdRX4 U4fyicb0YjDfiluclUpQuhpU3UniOuofNpU9r0+Etb5ZHSNcJIAhsjwBmYT5PTMM U0r+vhXNK0xpXHgcMXbsXy1FuhPeNRJyBcUeMQ9uiASyqkbM6InUmSVVbiIh8kaY Zw6JWUYaX+GJo13lGWbCAMnyFYrx7iES9R+UWFzykRh6SmVmqpy/FFxqb1AByX/c B6em+6f5RdVWKfnrzs7QXlzAfAjFgo88+vofSG+vblabNz/xiQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB7VcPn2PUoaEAiNbWh1ruvWFLC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82Yzgx ZDdjMC04MjE3LTQzZjItOTA0Ny01ZTZjMGI4NWE4ZTMvZWI3MWE3MGEtMjRmMS0z YWJkLTgyMjUtYjQ1ZmQ4N2IzMjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmM4MWQ3YzAtODIxNy00M2YyLTkw NDctNWU2YzBiODVhOGUzLzZjODFkN2MwLTgyMTctNDNmMi05MDQ3LTVlNmMwYjg1 YThlMy5jcmwwHwYDVR0jBBgwFoAULWu8/Lk4uSzUugcMG8G50t3xoaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82YzgxZDdjMC04MjE3LTQzZjItOTA0Ny01ZTZj MGI4NWE4ZTMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaVGARS5D2DhioXOf/X/zEdMhHehirpuADSfV2v9NYcXjScfRVoEnapu2 Jz4xHIVDN1OS9pvHxHa1Ls9vPlms91CKSbvsFGKmhnhKrcY2cpMbbHT72VFpPuZG /+IbBgLhQ4U+RsUHWPqNd5IYbjTxLTEoFpMRZCUdztvCoIrVG0KIkLLhf8v9rylL vAj6szFeR8Yrby2BFXeGd/t6CMk+/gOwrABII5gTeEdbRRQSG2WXH91+5x5/m3EO 9c+Zubs6fMzuvBnhMQNJvK3PMm/zDqlP+Jq3Xwt7Z8g+uADzIV4eJtKcQq9JXm1S H6R3ZswZNRdrs4vkDbDmfgxap7XnVQ== -----END CERTIFICATE-----Generated at Wed Oct 7 00:13:37 2026 by rpki-client