$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa File: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (raw, json) Hash identifier: st5Kjy+7Rqjbe3A2cJNv5PX1Yujdjc0Y5BCtABNe2PY= Subject key identifier: 20:A9:6A:E0:D1:06:8C:7F:E3:EC:68:82:E6:00:DE:B3:6B:0E:A3:09 Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584F51D2A9BB9FC4AFDE58F19680 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 21748 IP address blocks: 104.37.232.0/21 maxlen: 24 2606:8b40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:a9:bb:9f:c4:af:de:58:f1:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=97857ec5-17a0-4ecc-adb1-01a9cc04073d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f2:58:d2:98:1d:79:cd:82:e4:88:d0:3b:e2: b7:df:4b:03:5a:2b:53:40:fc:9a:66:4c:94:54:0c: e1:34:a2:f6:31:0b:ec:e8:6d:a1:98:d8:0c:a4:cd: f4:f0:9e:0c:22:90:d3:e4:82:1e:85:4a:44:00:89: fe:d4:c9:01:03:11:2d:e8:b2:44:50:25:bc:1c:7c: 29:3e:1f:d1:ef:84:b8:37:76:1a:b9:2b:8a:d2:58: dd:da:08:49:72:8b:1b:12:88:70:f6:4e:1a:d0:89: 4b:5d:76:a4:89:93:c8:5e:ad:a9:e2:9b:f2:a6:32: 87:33:d1:23:96:7f:b7:24:9e:0f:9c:94:6a:30:63: f6:ce:6e:71:80:c7:76:f5:5d:dc:64:5e:b1:1a:fe: b4:df:3b:28:c1:4d:f8:b5:0c:93:b6:fc:a9:e8:9c: e6:4a:d0:a2:6d:e2:23:9c:a4:3c:2c:d4:f6:26:2e: 7d:73:95:e7:02:e7:5e:6e:60:cb:e1:10:0f:8a:cc: d9:3d:6d:bc:7d:85:23:1c:04:f8:ea:21:6c:fd:ef: be:b4:bd:aa:d0:09:b4:7f:b7:75:0a:d5:40:5f:74: 96:7d:e5:28:1c:8e:9e:2b:55:e6:79:27:d7:7a:29: 12:43:ff:99:85:ee:bc:90:cd:99:f2:a9:41:c7:d7: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A9:6A:E0:D1:06:8C:7F:E3:EC:68:82:E6:00:DE:B3:6B:0E:A3:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: 104.37.232.0/21 IPv6: 2606:8b40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ca:64:7f:1e:a0:57:01:94:c0:01:21:ab:56:33:45:ac:3b: b7:a0:64:1f:ab:df:5b:2c:ed:f6:9d:1d:b0:28:76:c8:d4:39: bd:ff:72:69:aa:98:f3:8d:45:67:a3:6d:ff:b6:3a:ff:b5:8f: 9d:cd:25:a3:7f:4f:03:3c:2c:b9:2a:0d:eb:92:14:74:d6:dc: 22:d4:6b:07:98:a3:56:f9:f0:25:bf:4e:8c:f3:65:3a:a7:ac: ff:7a:84:ed:0f:d0:61:80:55:0d:87:71:d2:8c:15:da:1d:ed: 80:14:07:22:07:db:76:c0:d3:b6:a9:a8:19:35:84:51:64:3d: a7:af:5e:ae:a8:1f:a2:05:95:a4:93:1b:0d:63:5e:5a:b4:af: cf:df:53:07:9d:97:66:e7:42:9a:1d:20:11:6e:f6:ef:34:2c: 8c:67:e1:fc:71:5d:cb:24:5c:01:48:17:67:b2:a2:07:51:bf: 25:ab:dd:26:b6:33:ff:40:2e:2e:1c:66:7c:ab:72:ce:1c:b2: 2b:f1:fd:9c:76:ed:05:0d:14:cc:4b:cd:77:c4:3c:4f:7c:7c: 9b:33:48:e8:50:4b:db:44:4a:72:9e:4d:12:1b:b6:da:4e:b8: 53:ef:fc:56:ad:16:33:d1:b3:2b:0a:71:6d:9d:13:b2:6b:ef: 5a:9b:07:d9 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9R0qm7n8Sv3ljxloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OTc4NTdlYzUtMTdhMC00ZWNjLWFkYjEtMDFhOWNjMDQwNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fJY0pgdec2C5IjQO+K330sDWitTQPyaZkyU VAzhNKL2MQvs6G2hmNgMpM308J4MIpDT5IIehUpEAIn+1MkBAxEt6LJEUCW8HHwp Ph/R74S4N3YauSuK0ljd2ghJcosbEohw9k4a0IlLXXakiZPIXq2p4pvypjKHM9Ej ln+3JJ4PnJRqMGP2zm5xgMd29V3cZF6xGv603zsowU34tQyTtvyp6JzmStCibeIj nKQ8LNT2Ji59c5XnAudebmDL4RAPiszZPW28fYUjHAT46iFs/e++tL2q0Am0f7d1 CtVAX3SWfeUoHI6eK1XmeSfXeikSQ/+Zhe68kM2Z8qlBx9dwywIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCCpauDRBox/4+xoguYA3rNrDqMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvOGYyYzUwN2YtOTg4MC0z YTBhLThlNmEtMmQ5Y2M1ZDFlOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaCXoMA0E AgACMAcDBQAmBotAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGvKZH8eoFcBlMABIatWM0WsO7egZB+r31ss 7fadHbAodsjUOb3/cmmqmPONRWejbf+2Ov+1j53NJaN/TwM8LLkqDeuSFHTW3CLU aweYo1b58CW/TozzZTqnrP96hO0P0GGAVQ2HcdKMFdod7YAUByIH23bA07apqBk1 hFFkPaevXq6oH6IFlaSTGw1jXlq0r8/fUwedl2bnQpodIBFu9u80LIxn4fxxXcsk XAFIF2eyogdRvyWr3Sa2M/9ALi4cZnyrcs4csivx/Zx27QUNFMxLzXfEPE98fJsz SOhQS9tESnKeTRIbttpOuFPv/FatFjPRsysKcW2dE7Jr71qbB9k= -----END CERTIFICATE-----Generated at Wed Oct 7 07:42:15 2026 by rpki-client