$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33425db4-4e99-3d7c-b7cd-78751e508f4e.roa File: 33425db4-4e99-3d7c-b7cd-78751e508f4e.roa (raw, json) Hash identifier: fiKzuNnIx90uYP3j6B4y29ImOMMr25+8SQ4nmp1MxK4= Subject key identifier: 1C:39:96:35:27:5B:28:80:0C:35:E6:A9:27:32:E5:A5:6B:10:8D:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584FBED12CFEDD5B0DD95FA7AA60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33425db4-4e99-3d7c-b7cd-78751e508f4e.roa Signing time: Fri 06 Nov 2026 02:00:14 +0000 ROA not before: Fri 06 Nov 2026 02:00:14 +0000 ROA not after: Thu 04 Feb 2027 02:00:14 +0000 asID: 16625 IP address blocks: 104.115.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:be:d1:2c:fe:dd:5b:0d:d9:5f:a7:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 6 02:00:14 2026 GMT Not After : Feb 4 02:00:14 2027 GMT Subject: CN=dc7b1be8-ff6e-458b-841f-18eebc5b9fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:a7:21:b6:e7:bb:f4:48:e2:d7:3b:61:05: 21:4b:e5:8c:f8:ca:16:cf:c1:08:28:1a:17:a9:9c: e4:89:f6:5e:03:eb:84:2a:15:02:f9:e7:94:53:d0: 86:12:c0:fc:13:df:66:65:19:c9:90:a1:7b:45:ca: 1e:6a:3b:fd:fb:aa:26:cf:50:ab:b3:a2:a4:72:c6: f6:14:3b:3b:a6:39:81:2a:aa:87:af:a1:58:07:26: 14:3d:2b:8a:31:41:1f:b0:28:a4:5d:6c:d9:9d:91: 10:4b:76:68:99:5f:bd:88:84:1b:04:e0:eb:95:2e: 50:86:43:ce:3e:4c:90:12:e7:4d:8c:77:ac:8a:cc: 10:22:7d:4e:0e:5e:26:e9:04:a7:fd:87:78:f2:38: e2:ec:90:70:2f:d0:c6:fa:52:e2:6c:c1:e7:ee:c3: c6:55:97:d5:ee:ec:59:16:6a:f0:01:29:ee:3c:eb: d2:db:54:cb:98:19:67:2e:56:fc:6a:04:18:70:5c: 90:80:d0:71:da:8b:8e:ab:61:e6:ea:95:87:db:fc: bb:b7:bc:bd:38:03:58:e4:76:92:ae:c8:3c:67:8d: f4:ae:2c:b2:35:ed:40:88:35:68:7c:7b:d3:59:92: be:1c:e5:54:88:ca:d0:87:7e:39:3b:05:6d:bb:e7: a3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:39:96:35:27:5B:28:80:0C:35:E6:A9:27:32:E5:A5:6B:10:8D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33425db4-4e99-3d7c-b7cd-78751e508f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.115.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:39:9b:e9:d7:83:4e:9e:7b:0a:0b:3b:28:fd:4e:23:24:66: b1:59:fc:d6:36:25:70:92:fe:e9:b1:ef:b6:3d:d3:1f:91:9e: 9e:49:08:94:33:fa:7d:79:75:07:e5:b5:29:9b:9d:5e:1a:af: 1e:47:5e:88:23:67:c0:11:4e:2a:32:1f:a7:82:68:93:0c:3a: ac:6f:8c:69:77:53:22:b8:70:26:b6:67:64:87:3a:37:25:fd: 61:ed:33:9b:16:2a:66:76:62:37:ac:74:86:b5:38:e0:1f:72: ca:d6:b7:bc:56:ef:d6:91:91:7d:67:37:d6:8b:2b:bc:11:f2: 91:ff:13:40:bd:03:67:00:8d:ce:0b:de:e0:9f:82:5d:37:c3: d1:11:db:8c:1a:ab:72:cd:e3:69:52:63:5f:dc:aa:b2:4a:85: 93:f2:22:a3:88:6d:27:cf:0f:70:8b:99:09:a9:27:f5:9a:e3: 3e:c3:07:87:53:08:12:24:49:3f:72:b5:39:78:5c:ae:79:b0: 81:ad:99:73:d9:0e:29:88:52:bd:10:d4:70:12:3b:bd:96:c0: 15:f1:6b:8b:07:4d:8a:ed:9f:33:2f:75:7f:bf:45:01:8d:b8: 05:ec:58:1e:2b:9b:f7:ac:16:43:79:3d:ca:29:d3:8d:5b:2c: 3a:54:fc:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE++0Sz+3VsN2V+nqmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTEwNjAyMDAxNFoXDTI3MDIwNDAyMDAxNFowLzEtMCsGA1UEAxMk ZGM3YjFiZTgtZmY2ZS00NThiLTg0MWYtMThlZWJjNWI5ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuCnIbbnu/RI4tc7YQUhS+WM+MoWz8EIKBoX qZzkifZeA+uEKhUC+eeUU9CGEsD8E99mZRnJkKF7Rcoeajv9+6omz1Crs6Kkcsb2 FDs7pjmBKqqHr6FYByYUPSuKMUEfsCikXWzZnZEQS3ZomV+9iIQbBODrlS5QhkPO PkyQEudNjHesiswQIn1ODl4m6QSn/Yd48jji7JBwL9DG+lLibMHn7sPGVZfV7uxZ FmrwASnuPOvS21TLmBlnLlb8agQYcFyQgNBx2ouOq2Hm6pWH2/y7t7y9OANY5HaS rsg8Z430riyyNe1AiDVofHvTWZK+HOVUiMrQh345OwVtu+ej/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw5ljUnWyiADDXmqScy5aVrEI3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzM0MjVkYjQtNGU5OS0z ZDdjLWI3Y2QtNzg3NTFlNTA4ZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaHPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc5m+nXg06eewoLOyj9TiMkZrFZ/NY2JXCS/umx77Y90x+Rnp5JCJQz +n15dQfltSmbnV4arx5HXogjZ8ARTioyH6eCaJMMOqxvjGl3UyK4cCa2Z2SHOjcl /WHtM5sWKmZ2YjesdIa1OOAfcsrWt7xW79aRkX1nN9aLK7wR8pH/E0C9A2cAjc4L 3uCfgl03w9ER24waq3LN42lSY1/cqrJKhZPyIqOIbSfPD3CLmQmpJ/Wa4z7DB4dT CBIkST9ytTl4XK55sIGtmXPZDimIUr0Q1HASO72WwBXxa4sHTYrtnzMvdX+/RQGN uAXsWB4rm/esFkN5Pcop041bLDpU/L4= -----END CERTIFICATE-----Generated at Sun Nov 15 12:18:40 2026 by rpki-client