$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa File: 94da6f54-9255-374b-a408-2e35886a522d.roa (raw, json) Hash identifier: Ng6Bt2mBKvdVWG1JuahzDg8o9CmQNSgb+hUeVVabJAw= Subject key identifier: A8:20:86:6F:D6:57:BA:20:2A:A4:66:D1:1B:6F:E6:95:00:17:C0:57 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584ECD37207AB1B4919E36892FC0 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 40948 IP address blocks: 104.152.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:20:7a:b1:b4:91:9e:36:89:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=6bd224a5-1d11-4639-9103-7d6d9bfb0c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:9a:56:ff:c3:60:3e:a3:37:09:14:3a:f4: ce:ff:a5:c3:48:fc:72:27:3c:59:a1:d0:1d:a8:ad: 64:bf:cc:3f:fd:ca:77:1a:30:c1:70:1e:e7:33:cd: a5:a5:cb:1d:6f:22:33:65:93:12:95:8b:6d:ed:f1: fc:ef:8b:17:35:47:81:ec:0a:a7:97:82:f0:0d:fc: ee:32:44:5d:a6:0d:8f:82:fd:26:94:27:1d:4a:58: 33:e5:42:54:22:81:2b:4c:1e:72:13:e8:47:3a:0d: 28:94:e9:fc:80:17:1d:b8:52:f4:bf:ca:bb:2e:3b: 48:c8:d3:36:c5:c4:d1:e4:8a:13:da:57:e1:22:a6: a6:c3:36:61:89:00:86:d3:92:ba:a8:fd:92:dd:ab: 6b:02:0e:96:b3:91:39:88:1a:a8:23:57:5a:4b:92: c6:c9:7c:de:01:1b:d2:b7:09:a9:bf:0c:c5:35:42: d2:2a:89:0b:4c:bc:b1:67:79:53:71:0e:ac:91:b3: 65:c1:0e:6c:45:04:ac:d6:8b:6e:20:8c:f2:30:99: 30:ac:ae:96:0f:ac:14:af:9d:98:2c:ad:e0:ef:68: cc:ca:38:74:1d:40:f1:d7:b0:73:f6:5a:f5:68:5c: 77:21:33:1a:c2:5c:32:70:19:99:d7:eb:44:27:24: 19:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:20:86:6F:D6:57:BA:20:2A:A4:66:D1:1B:6F:E6:95:00:17:C0:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/94da6f54-9255-374b-a408-2e35886a522d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:7b:54:ca:10:50:d1:32:fc:e5:22:77:ac:40:94:00:bb:c7: f6:07:19:98:6b:aa:f6:5e:50:fa:21:08:dc:d1:20:de:a6:a6: b9:e5:1e:e5:61:f9:26:6f:30:b3:fd:2a:46:15:bd:b5:e5:a1: 0d:f5:e9:77:b9:99:d8:ec:ce:fa:a4:0f:4f:27:b3:49:f4:65: b3:d7:11:e5:ea:e7:11:41:97:1d:92:28:c9:55:57:df:6d:60: 1e:24:b6:eb:ca:7f:4a:35:f8:59:f7:d0:08:9b:4d:a1:e0:f9: 76:68:1b:d9:b9:7a:aa:1c:32:0b:6b:fd:58:cb:04:15:2b:9c: dc:2e:a3:54:66:e2:1c:4c:13:33:46:7a:cd:43:ec:1a:54:58: b9:33:75:b9:a9:a8:87:c9:96:25:a1:cc:f2:3c:2c:dc:ed:2d: 83:d8:9e:22:f0:41:21:62:4a:aa:07:97:a6:2e:75:7d:1e:b4: 4e:80:fa:5b:bf:af:9f:a6:54:ee:a2:ca:33:49:83:23:4f:51: 96:14:4d:f2:df:a4:17:2d:2e:98:c1:af:6f:02:3a:7f:b7:3c: f0:11:22:d1:f4:ae:b2:f4:28:12:aa:ce:4a:e7:5a:e2:04:ea: e6:21:aa:1e:70:37:a2:d8:ef:c5:5d:90:35:e5:a3:05:9e:34: 42:04:ba:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyB6sbSRnjaJL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NmJkMjI0YTUtMWQxMS00NjM5LTkxMDMtN2Q2ZDliZmIwYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEqaVv/DYD6jNwkUOvTO/6XDSPxyJzxZodAd qK1kv8w//cp3GjDBcB7nM82lpcsdbyIzZZMSlYtt7fH874sXNUeB7Aqnl4LwDfzu MkRdpg2Pgv0mlCcdSlgz5UJUIoErTB5yE+hHOg0olOn8gBcduFL0v8q7LjtIyNM2 xcTR5IoT2lfhIqamwzZhiQCG05K6qP2S3atrAg6Ws5E5iBqoI1daS5LGyXzeARvS twmpvwzFNULSKokLTLyxZ3lTcQ6skbNlwQ5sRQSs1otuIIzyMJkwrK6WD6wUr52Y LK3g72jMyjh0HUDx17Bz9lr1aFx3ITMawlwycBmZ1+tEJyQZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgghm/WV7ogKqRm0Rtv5pUAF8BXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvOTRkYTZmNTQtOTI1NS0z NzRiLWE0MDgtMmUzNTg4NmE1MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ7VMoQUNEy/OUid6xAlAC7x/YHGZhrqvZeUPohCNzRIN6mprnlHuVh +SZvMLP9KkYVvbXloQ316Xe5mdjszvqkD08ns0n0ZbPXEeXq5xFBlx2SKMlVV99t YB4ktuvKf0o1+Fn30AibTaHg+XZoG9m5eqocMgtr/VjLBBUrnNwuo1Rm4hxMEzNG es1D7BpUWLkzdbmpqIfJliWhzPI8LNztLYPYniLwQSFiSqoHl6YudX0etE6A+lu/ r5+mVO6iyjNJgyNPUZYUTfLfpBctLpjBr28COn+3PPARItH0rrL0KBKqzkrnWuIE 6uYhqh5wN6LY78VdkDXlowWeNEIEuhI= -----END CERTIFICATE-----Generated at Tue Sep 29 18:48:41 2026 by rpki-client