$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa File: 407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa (raw, json) Hash identifier: fo8bdxbQodIFCwj4ZjQGbIX7cOXqnE0oV86zuPep98A= Subject key identifier: DD:A1:43:78:CC:3C:E7:70:30:2A:D6:93:48:77:ED:86:5B:DD:68:95 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4C3D4AA81EF8FDF495A9AA80 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 16433 IP address blocks: 104.243.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4a:a8:1e:f8:fd:f4:95:a9:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bd1054e9-b1f7-4a62-a742-0f355b6f6b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:7b:9a:3a:69:27:a3:f6:65:86:c5:65:84: cd:91:cc:b0:31:a8:b0:53:be:ad:13:65:8f:e5:a0: 38:95:86:91:a1:28:28:49:cb:c5:65:2a:88:55:a7: 0d:be:7a:d8:3d:e8:45:33:c5:6f:39:a9:78:ed:1d: 36:e7:18:69:38:68:d6:2d:6f:7e:ee:28:f1:59:93: b6:7b:4a:54:f8:91:d5:b5:8c:de:59:76:5b:bc:16: 68:45:66:87:ba:6d:b9:16:37:27:5a:7e:33:fd:1c: 1c:82:58:65:ca:32:bc:04:4b:3d:32:40:eb:2b:38: 82:36:2f:28:59:6f:2f:62:eb:ba:ab:f0:d9:63:cb: 63:7e:83:f3:46:a6:22:58:ed:32:29:03:ab:ac:20: 74:19:ef:96:10:ab:f5:9c:f9:6a:65:d0:f2:fe:8a: 62:84:48:40:e8:96:95:12:3d:81:d1:78:aa:b3:d9: cf:5e:8e:da:cf:18:f7:1d:87:2f:ca:5b:10:42:35: 96:96:7e:a2:ed:58:5e:4e:08:cc:57:27:67:16:f2: 54:bd:af:ae:09:9d:b1:13:8b:4d:94:25:8d:bc:fb: 0e:de:a6:66:59:ae:ac:c8:b6:12:a5:ae:4d:49:70: cd:ab:62:b6:31:a9:9f:d6:85:73:a6:89:95:0a:ec: 35:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A1:43:78:CC:3C:E7:70:30:2A:D6:93:48:77:ED:86:5B:DD:68:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/407efa0a-c8e5-3548-a20d-e972dc73fbb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 104.243.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:34:09:84:22:93:3b:1b:6a:37:77:75:e3:3d:0a:6d:a1:78: 48:e9:7d:31:34:23:03:02:cc:f7:e9:48:1f:7b:d3:a8:64:a6: 17:e0:f2:b6:3c:15:88:fb:d1:59:12:5f:a9:37:f1:dd:80:4f: 61:ba:27:37:bd:42:14:65:02:67:89:38:f3:29:0a:9f:db:38: e6:9d:97:72:9d:1f:79:e7:f1:59:5e:cf:1d:51:21:81:fb:de: e2:38:a6:0e:7b:4d:14:c1:d2:b3:eb:c2:82:7a:01:61:73:41: 94:1d:41:3c:d4:83:a8:78:a6:68:09:e0:5c:a8:4c:ae:3a:99: a2:34:59:a2:1b:f7:c4:2b:72:56:1a:a6:5a:3d:a8:fb:7c:93: 1c:63:b8:27:a0:67:77:ff:83:b2:ec:7b:1b:13:92:41:61:77: 93:29:ca:ad:8a:d3:12:4a:92:83:f7:00:5b:bb:37:f8:e0:20: 08:04:75:48:50:87:51:3f:34:9b:64:e6:34:30:28:b4:74:95: 92:3f:66:a7:b4:45:c9:6e:07:ec:50:42:e0:b6:d8:cf:36:14: 46:4a:bb:0b:11:50:d8:4d:f7:5b:bb:1a:ac:6f:1c:f4:db:ee: 4a:19:e4:1a:cc:e3:e6:2b:07:56:2c:80:c5:53:ff:ae:e4:fb: e6:f0:38:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUqoHvj99JWpqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmQxMDU0ZTktYjFmNy00YTYyLWE3NDItMGYzNTViNmY2YjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC97mjppJ6P2ZYbFZYTNkcywMaiwU76tE2WP 5aA4lYaRoSgoScvFZSqIVacNvnrYPehFM8VvOal47R025xhpOGjWLW9+7ijxWZO2 e0pU+JHVtYzeWXZbvBZoRWaHum25FjcnWn4z/RwcglhlyjK8BEs9MkDrKziCNi8o WW8vYuu6q/DZY8tjfoPzRqYiWO0yKQOrrCB0Ge+WEKv1nPlqZdDy/opihEhA6JaV Ej2B0Xiqs9nPXo7azxj3HYcvylsQQjWWln6i7VheTgjMVydnFvJUva+uCZ2xE4tN lCWNvPsO3qZmWa6syLYSpa5NSXDNq2K2Mamf1oVzpomVCuw1+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2hQ3jMPOdwMCrWk0h37YZb3WiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNDA3ZWZhMGEtYzhlNS0z NTQ4LWEyMGQtZTk3MmRjNzNmYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaPNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY0CYQikzsbajd3deM9Cm2heEjpfTE0IwMCzPfpSB9706hkphfg8rY8 FYj70VkSX6k38d2AT2G6Jze9QhRlAmeJOPMpCp/bOOadl3KdH3nn8Vlezx1RIYH7 3uI4pg57TRTB0rPrwoJ6AWFzQZQdQTzUg6h4pmgJ4FyoTK46maI0WaIb98QrclYa plo9qPt8kxxjuCegZ3f/g7LsexsTkkFhd5Mpyq2K0xJKkoP3AFu7N/jgIAgEdUhQ h1E/NJtk5jQwKLR0lZI/Zqe0RcluB+xQQuC22M82FEZKuwsRUNhN91u7GqxvHPTb 7koZ5BrM4+YrB1YsgMVT/67k++bwODM= -----END CERTIFICATE-----Generated at Sun Sep 27 14:06:11 2026 by rpki-client