$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a60f42db-b7a0-3ec7-9456-11646626fcba.roa File: a60f42db-b7a0-3ec7-9456-11646626fcba.roa (raw, json) Hash identifier: OOO5YAMGEB+afxg2i4Q94Ie1QsVhAgOn/uaO/jCkxXs= Subject key identifier: 6E:65:9E:A9:1B:E1:BC:EF:BA:4F:19:1B:81:5F:CE:39:84:23:76:74 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F5B862C90BE347FC394DCB197 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a60f42db-b7a0-3ec7-9456-11646626fcba.roa Signing time: Thu 01 Oct 2026 12:24:21 +0000 ROA not before: Thu 01 Oct 2026 12:24:21 +0000 ROA not after: Wed 30 Dec 2026 13:24:21 +0000 asID: 834 IP address blocks: 104.140.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:86:2c:90:be:34:7f:c3:94:dc:b1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 1 12:24:21 2026 GMT Not After : Dec 30 13:24:21 2026 GMT Subject: CN=ba76df9f-bf5c-4ee9-9756-3766ce141e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:78:28:e2:1b:f1:da:9e:70:84:43:25:f0:06: e4:d5:cb:f5:4b:5f:b1:64:13:d7:f9:ec:06:94:25: ca:86:c2:4c:9f:75:af:de:e3:13:b4:07:4b:84:e5: 57:c6:c4:92:c2:ca:85:74:87:a5:1c:a1:98:d8:19: 26:f3:da:96:89:2b:d2:ad:72:91:3f:84:e9:4d:58: 3f:a9:c1:c3:84:a4:1f:c4:3b:48:5d:92:60:f0:24: fc:3f:cc:e2:22:5a:9b:96:2d:f2:24:b2:45:71:d4: de:36:71:7b:f5:0b:e1:3c:f2:27:67:21:01:61:1a: da:1d:52:ac:55:de:be:a8:df:1d:d5:c3:3a:94:c3: 78:a8:30:d1:33:21:3f:c8:0e:f7:1f:b6:e4:5e:bd: 72:f3:b8:25:3e:b6:84:68:17:7a:c3:22:05:80:db: 81:99:43:3d:21:d6:35:07:83:b5:35:24:0c:af:94: af:f8:65:63:a7:30:bb:23:b5:45:f6:55:fa:62:64: d7:a1:29:a1:8f:b4:f6:13:3b:71:8b:c3:17:ff:8d: 5e:0c:c5:83:ff:9f:24:d4:a9:79:37:09:1c:c2:bc: 97:7e:b7:12:73:ae:29:51:59:f8:8c:da:12:ed:70: 47:98:06:de:45:84:4d:2f:89:0d:83:64:94:b3:d0: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:65:9E:A9:1B:E1:BC:EF:BA:4F:19:1B:81:5F:CE:39:84:23:76:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a60f42db-b7a0-3ec7-9456-11646626fcba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0d:98:61:37:c4:9f:63:aa:92:6d:e1:7c:cb:61:21:1b:de: 6b:96:a7:00:9b:0c:38:41:1e:57:cd:e0:2e:b9:d2:42:c0:03: fc:7c:45:66:fc:f5:04:29:d7:06:f0:44:2c:61:ba:82:0a:48: 03:d7:9a:64:d6:b1:2c:12:fb:c8:61:27:c3:12:a1:62:f8:bd: 25:4e:8d:51:8b:3e:7c:ea:34:e9:09:74:e1:9a:2d:d1:a5:09: c9:62:af:17:f9:91:85:1e:55:26:52:d8:2d:88:99:5c:e9:b6: d2:5b:b7:de:36:9f:74:99:e3:04:0d:5f:42:de:72:2d:44:79: 00:f4:39:b7:25:2d:53:6f:ea:88:7b:ac:62:2f:6a:70:7e:28: af:68:c0:3b:ab:71:71:d5:84:cd:4e:7c:f0:82:d6:e0:c6:90: 68:83:59:b8:0e:8f:c4:e3:e1:4b:84:56:77:54:7e:10:0e:b0: dd:59:34:99:96:32:f8:12:4b:77:cb:92:96:3b:d9:8d:f1:6a: c4:da:97:44:4b:63:55:61:1e:48:9b:10:f4:bd:60:57:ab:66: a1:33:09:ad:c9:70:be:37:a5:d8:99:5e:b6:db:71:03:1b:8c: 5f:db:5c:db:0b:5b:08:cf:0a:d0:b2:ab:b1:a9:83:aa:1d:51: 07:ce:7e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9bhiyQvjR/w5TcsZcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MTAwMTEyMjQyMVoXDTI2MTIzMDEzMjQyMVowLzEtMCsGA1UEAxMk YmE3NmRmOWYtYmY1Yy00ZWU5LTk3NTYtMzc2NmNlMTQxZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHgo4hvx2p5whEMl8Abk1cv1S1+xZBPX+ewG lCXKhsJMn3Wv3uMTtAdLhOVXxsSSwsqFdIelHKGY2Bkm89qWiSvSrXKRP4TpTVg/ qcHDhKQfxDtIXZJg8CT8P8ziIlqbli3yJLJFcdTeNnF79QvhPPInZyEBYRraHVKs Vd6+qN8d1cM6lMN4qDDRMyE/yA73H7bkXr1y87glPraEaBd6wyIFgNuBmUM9IdY1 B4O1NSQMr5Sv+GVjpzC7I7VF9lX6YmTXoSmhj7T2Eztxi8MX/41eDMWD/58k1Kl5 NwkcwryXfrcSc64pUVn4jNoS7XBHmAbeRYRNL4kNg2SUs9AzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5lnqkb4bzvuk8ZG4FfzjmEI3Z0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTYwZjQyZGItYjdhMC0z ZWM3LTk0NTYtMTE2NDY2MjZmY2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIx1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABINmGE3xJ9jqpJt4XzLYSEb3muWpwCbDDhBHlfN4C650kLAA/x8RWb8 9QQp1wbwRCxhuoIKSAPXmmTWsSwS+8hhJ8MSoWL4vSVOjVGLPnzqNOkJdOGaLdGl Cclirxf5kYUeVSZS2C2ImVzpttJbt942n3SZ4wQNX0Leci1EeQD0ObclLVNv6oh7 rGIvanB+KK9owDurcXHVhM1OfPCC1uDGkGiDWbgOj8Tj4UuEVndUfhAOsN1ZNJmW MvgSS3fLkpY72Y3xasTal0RLY1VhHkibEPS9YFerZqEzCa3JcL43pdiZXrbbcQMb jF/bXNsLWwjPCtCyq7Gpg6odUQfOfog= -----END CERTIFICATE-----Generated at Sat Oct 10 23:26:11 2026 by rpki-client