$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21a2f866-23dd-3998-ad4c-b46a870d4e48.roa File: 21a2f866-23dd-3998-ad4c-b46a870d4e48.roa (raw, json) Hash identifier: /hLDnCATnjG/wi6zCQsCgP5L4xe2agJNcwFBpMwKghc= Subject key identifier: 8F:80:2C:31:CD:96:A7:BD:8E:56:A3:BB:45:5E:EF:B3:26:A2:63:72 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F1CC7A54FF352BEA7F709D700 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21a2f866-23dd-3998-ad4c-b46a870d4e48.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 62904 IP address blocks: 104.206.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a5:4f:f3:52:be:a7:f7:09:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=5719e989-048d-42d4-b676-f52f324d6b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0e:bd:66:5b:63:55:d8:f6:c5:1f:61:55:1d: 2f:e2:e8:12:02:c1:7f:a2:b6:d5:31:ea:99:b2:77: ea:5e:e4:4e:fd:7b:ab:1f:a9:54:2b:d7:d4:fc:64: 31:4f:97:97:b0:78:04:61:bc:d4:07:8a:ef:a6:e3: 74:8d:11:7e:79:89:bf:56:bf:cf:c3:fd:1c:df:44: 13:f9:d2:45:30:b6:6a:ce:70:85:fe:7c:52:30:b1: 7d:0a:02:0b:aa:64:49:c6:d3:06:86:f9:a2:6a:7c: 86:7d:0f:93:87:92:93:a3:ec:23:89:93:62:b1:4d: 56:6b:28:40:11:44:c1:14:6a:bb:78:c5:bc:4c:3d: 75:03:29:fd:91:0e:b3:4f:db:70:cf:0b:0b:49:b8: 4b:79:45:c8:9f:66:e3:6d:7f:f0:45:50:a9:6e:8e: 1c:a5:0f:fa:12:59:8a:61:c2:fe:de:b0:5e:e3:a6: c8:ef:f5:e2:6a:ab:a3:78:fd:80:32:16:4e:a1:ce: f3:a2:1d:18:e9:6b:0d:62:f5:1e:73:fa:28:46:1b: 83:56:e7:22:30:d8:3d:a2:32:be:92:59:b2:2b:51: 7e:47:cd:44:7e:42:64:ff:3d:6e:88:fe:63:03:28: 4b:49:04:f2:7b:13:4b:b7:52:4f:17:80:be:5c:d3: 6a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:2C:31:CD:96:A7:BD:8E:56:A3:BB:45:5E:EF:B3:26:A2:63:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21a2f866-23dd-3998-ad4c-b46a870d4e48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.206.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ca:39:7c:0b:d9:4f:b5:77:65:60:e2:0e:6c:94:fb:66:bf: 34:61:8c:2b:05:eb:d8:5c:bc:9e:cb:93:8b:5c:2c:90:43:75: 8d:a9:84:b6:4a:c0:0f:9a:16:e0:0f:27:ae:97:dd:90:c4:87: db:19:d9:b9:a5:8c:b0:88:aa:f2:d1:f1:51:76:96:31:07:a6: ba:a5:55:d7:87:e5:4b:72:b7:da:f7:9d:09:36:7d:76:69:a1: 0a:eb:89:d1:36:36:19:c8:bf:f6:29:de:23:a0:4b:57:07:6d: 4d:3f:c3:12:c0:4f:ee:b1:0c:82:88:6c:db:7e:ad:82:c8:43: 63:a2:d2:da:95:52:a6:83:81:a9:a9:ec:98:4d:46:63:48:22: 24:79:34:be:f1:b2:34:36:ed:39:d1:cc:4f:ab:d9:d8:54:0b: 88:08:0b:88:46:9f:7f:36:e4:3a:75:f5:50:d4:d0:90:ab:74: 4d:93:8a:0c:f4:b8:0a:16:4c:82:65:c3:81:0b:5a:97:66:f6: a7:54:a8:a2:0c:1d:63:35:74:b5:42:b0:56:3a:5d:b5:9a:02: b2:7a:02:59:f4:6a:8d:b0:b4:c5:1a:45:d4:05:2f:2e:24:61: bc:14:16:ca:c9:76:9d:57:d7:67:d7:6d:e8:12:ff:5e:dd:90: 14:7e:83:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6VP81K+p/cJ1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NTcxOWU5ODktMDQ4ZC00MmQ0LWI2NzYtZjUyZjMyNGQ2YjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw69ZltjVdj2xR9hVR0v4ugSAsF/orbVMeqZ snfqXuRO/XurH6lUK9fU/GQxT5eXsHgEYbzUB4rvpuN0jRF+eYm/Vr/Pw/0c30QT +dJFMLZqznCF/nxSMLF9CgILqmRJxtMGhvmianyGfQ+Th5KTo+wjiZNisU1WayhA EUTBFGq7eMW8TD11Ayn9kQ6zT9twzwsLSbhLeUXIn2bjbX/wRVCpbo4cpQ/6ElmK YcL+3rBe46bI7/XiaqujeP2AMhZOoc7zoh0Y6WsNYvUec/ooRhuDVuciMNg9ojK+ klmyK1F+R81EfkJk/z1uiP5jAyhLSQTyexNLt1JPF4C+XNNqPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+ALDHNlqe9jlaju0Ve77MmomNyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjFhMmY4NjYtMjNkZC0z OTk4LWFkNGMtYjQ2YTg3MGQ0ZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaM6kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXKOXwL2U+1d2Vg4g5slPtmvzRhjCsF69hcvJ7Lk4tcLJBDdY2phLZK wA+aFuAPJ66X3ZDEh9sZ2bmljLCIqvLR8VF2ljEHprqlVdeH5Utyt9r3nQk2fXZp oQrridE2NhnIv/Yp3iOgS1cHbU0/wxLAT+6xDIKIbNt+rYLIQ2Oi0tqVUqaDgamp 7JhNRmNIIiR5NL7xsjQ27TnRzE+r2dhUC4gIC4hGn3825Dp19VDU0JCrdE2Tigz0 uAoWTIJlw4ELWpdm9qdUqKIMHWM1dLVCsFY6XbWaArJ6Aln0ao2wtMUaRdQFLy4k YbwUFsrJdp1X12fXbegS/17dkBR+g40= -----END CERTIFICATE-----Generated at Sun Sep 27 01:18:48 2026 by rpki-client