$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa File: fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa (raw, json) Hash identifier: znd3gYaz9qX38Wj50IB2m4ZSJmomtOVnCskdZ4NsUoQ= Subject key identifier: 6D:AF:BC:65:1C:92:94:6F:D6:2E:91:4D:75:37:F8:DA:F1:F2:31:70 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584FCCC688152635A13F98CA8840 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 395793 IP address blocks: 104.241.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:88:15:26:35:a1:3f:98:ca:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=b6a0fc10-1c7f-4cd2-a88b-dbbda2d626f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:4c:fc:d4:1c:28:bd:bd:ad:06:c2:45:15: f6:8c:1f:b7:c8:92:f3:a0:60:5f:d5:c0:81:3f:72: 0e:67:d9:b8:af:31:1d:ab:28:27:56:82:2a:04:6f: 86:01:5f:15:e9:8c:09:11:70:b1:1f:b0:2c:39:36: 25:87:ef:8c:f2:93:8e:d7:72:3e:07:8e:fc:52:b5: f6:0f:e6:81:bb:91:ab:65:2c:08:0c:c6:47:fc:3c: fd:a8:2e:23:17:fe:c5:7b:8b:77:da:9c:67:89:e3: e5:01:a1:2c:81:89:e9:7b:d0:76:1e:a7:8d:1a:26: f5:d6:66:85:08:d1:df:10:9c:3c:05:c8:5d:ff:73: cf:01:87:86:ee:fb:aa:29:ed:ad:16:28:60:f1:32: d2:37:5f:42:ff:f9:36:95:4e:27:6f:85:00:1a:4c: 45:b6:e3:20:6e:09:3f:8a:9a:3c:c2:13:ee:89:75: 72:5f:b3:01:dc:28:86:b5:18:af:f6:8b:29:b5:39: 36:9b:f4:b3:89:da:29:11:7e:e3:8e:ec:cc:68:d2: a6:1b:73:75:02:14:86:76:1b:f3:39:17:b4:84:39: 29:a3:ef:d0:5b:42:55:d2:bf:fe:6e:1f:5d:c8:b2: 29:85:08:61:5a:b3:fd:d9:9e:83:48:0f:21:5f:dd: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AF:BC:65:1C:92:94:6F:D6:2E:91:4D:75:37:F8:DA:F1:F2:31:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/fb2158a1-e1a4-3c3b-a330-dbbd9af27de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7d:f5:35:2b:98:a1:27:4f:ff:42:9b:28:35:82:b9:93:30: 59:8e:e5:a4:0c:3e:86:c1:df:dd:f9:c9:76:f3:7e:2e:a4:4f: 7a:c9:28:7b:d6:ea:56:55:a6:e1:f9:57:2b:69:d2:3b:db:c3: d0:81:ad:11:1b:e9:63:a9:5e:04:9e:d7:75:18:52:e6:5f:a6: f1:44:7e:d0:d8:8f:3e:cf:4a:d2:40:cd:ec:60:4f:a4:7d:ab: eb:16:02:86:3f:6e:fc:e8:06:4a:15:8b:c7:71:7f:be:00:51: 26:a9:a6:02:23:02:97:93:c1:2a:62:92:23:ee:f3:24:95:bd: 26:24:75:b1:e4:7f:24:a6:ce:43:53:6d:4c:96:42:31:91:ef: 28:ef:42:09:1b:f1:a0:0c:64:60:49:5b:55:8a:ae:ab:3b:2d: 62:0d:17:c2:6e:c6:23:52:76:fd:05:1c:24:2d:3b:58:60:b0: 42:41:f5:5a:ce:1f:b2:40:12:1e:49:b8:e4:a3:16:f2:bc:74: f4:7d:d6:d4:fc:a5:92:53:8d:6b:6c:ce:81:66:55:ee:6e:fd: 09:db:f0:03:92:9d:6e:18:05:a9:df:83:87:10:39:f0:fd:b8: 9c:69:68:68:77:5b:72:59:22:29:11:77:97:ac:af:d0:45:20: 22:c6:0e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/MxogVJjWhP5jKiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk YjZhMGZjMTAtMWM3Zi00Y2QyLWE4OGItZGJiZGEyZDYyNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZtM/NQcKL29rQbCRRX2jB+3yJLzoGBf1cCB P3IOZ9m4rzEdqygnVoIqBG+GAV8V6YwJEXCxH7AsOTYlh++M8pOO13I+B478UrX2 D+aBu5GrZSwIDMZH/Dz9qC4jF/7Fe4t32pxniePlAaEsgYnpe9B2HqeNGib11maF CNHfEJw8Bchd/3PPAYeG7vuqKe2tFihg8TLSN19C//k2lU4nb4UAGkxFtuMgbgk/ ipo8whPuiXVyX7MB3CiGtRiv9osptTk2m/SzidopEX7jjuzMaNKmG3N1AhSGdhvz ORe0hDkpo+/QW0JV0r/+bh9dyLIphQhhWrP92Z6DSA8hX93QWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2vvGUckpRv1i6RTXU3+Nrx8jFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvZmIyMTU4YTEtZTFhNC0z YzNiLWEzMzAtZGJiZDlhZjI3ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt99TUrmKEnT/9Cmyg1grmTMFmO5aQMPobB3935yXbzfi6kT3rJKHvW 6lZVpuH5Vytp0jvbw9CBrREb6WOpXgSe13UYUuZfpvFEftDYjz7PStJAzexgT6R9 q+sWAoY/bvzoBkoVi8dxf74AUSappgIjApeTwSpikiPu8ySVvSYkdbHkfySmzkNT bUyWQjGR7yjvQgkb8aAMZGBJW1WKrqs7LWINF8JuxiNSdv0FHCQtO1hgsEJB9VrO H7JAEh5JuOSjFvK8dPR91tT8pZJTjWtszoFmVe5u/Qnb8AOSnW4YBanfg4cQOfD9 uJxpaGh3W3JZIikRd5esr9BFICLGDl4= -----END CERTIFICATE-----Generated at Sun Nov 15 10:36:39 2026 by rpki-client