$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/394eaf77-d41e-3522-87b9-2b6b368cebf3.roa File: 394eaf77-d41e-3522-87b9-2b6b368cebf3.roa (raw, json) Hash identifier: yJEa8co77srPWai321DDKg5I3LC46b9DaF60ztWovpk= Subject key identifier: D5:86:6E:65:2A:BE:86:32:A7:CB:F1:26:9D:0F:D5:2C:2D:EF:33:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4973EACBB94F3FF1E92DC3A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/394eaf77-d41e-3522-87b9-2b6b368cebf3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63949 IP address blocks: 104.200.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ea:cb:b9:4f:3f:f1:e9:2d:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0908ddfa-b5e0-4715-b339-0834200bd021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:6c:1c:35:ae:04:88:07:aa:83:9a:e6:77: 26:a2:25:91:b7:db:c8:e8:5e:9f:ae:a0:ea:1d:de: 3a:52:76:e0:a0:a1:79:1b:9f:f3:cf:1d:8b:e7:8a: 18:2e:5f:02:c6:71:a6:01:fd:bb:1d:aa:9c:8c:bb: c9:0f:57:a0:0b:86:b7:dc:25:01:56:63:1b:3a:6b: 1c:a7:2d:c9:4f:54:e8:d5:e5:a4:75:f7:15:67:2c: bf:c0:76:fe:ba:b4:9d:51:a4:0d:36:72:88:5c:b4: 6d:2d:4d:fd:f1:a9:b2:a7:ee:f1:cd:50:3b:da:55: 43:a4:f9:70:29:74:e2:0c:d7:f7:6a:50:9f:df:da: 40:54:cb:d4:27:4b:a8:96:4b:61:0e:3f:04:9c:88: fd:de:46:a0:3e:ef:6c:b2:4a:97:3e:12:84:d4:37: 00:6f:e1:c9:8f:40:17:b7:89:f2:47:5c:f7:b3:33: e4:a8:38:fd:f3:68:f7:2e:f7:e8:cb:36:87:cb:a5: 28:40:0e:3d:80:8b:bc:0a:03:13:92:55:ef:fe:26: 98:2c:29:2c:40:02:20:c7:7c:e3:6f:a7:dc:76:db: 20:98:76:34:00:b0:66:90:cb:75:88:b5:db:f2:27: d1:4c:ba:2f:11:ad:d1:1b:8b:5a:81:19:67:22:c4: bd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:86:6E:65:2A:BE:86:32:A7:CB:F1:26:9D:0F:D5:2C:2D:EF:33:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/394eaf77-d41e-3522-87b9-2b6b368cebf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.200.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:28:4b:91:8e:54:60:8e:d9:cd:0f:79:c7:e9:56:46:0b:f3: 2f:bd:fe:fe:c2:1c:da:e1:c9:e4:cb:82:88:73:83:a9:ca:4c: 3d:37:af:21:52:85:7a:96:91:fe:52:4b:da:36:25:05:36:d5: b9:95:68:c0:eb:9b:ff:2e:95:6a:41:bb:34:d3:13:07:f3:5e: 34:b6:f6:2e:f4:d7:41:df:e7:b5:46:cb:23:c4:b3:e6:ce:a2: cd:10:de:0b:96:43:b6:48:1a:63:02:3b:73:0b:b0:06:e0:80: aa:85:95:f5:39:67:fa:4e:18:24:39:e0:12:ba:e6:39:8b:d6: 2f:1f:a0:95:21:23:85:20:f2:19:b7:54:7f:e6:0e:52:da:ad: 00:c7:8c:13:54:55:dd:8a:45:b8:87:90:d6:9f:ea:27:d6:65: 17:06:0b:61:ec:5b:d1:a8:08:1d:9f:61:1b:ac:fa:e3:d7:e8: f5:04:27:f1:7d:90:72:89:3c:57:ca:36:a8:46:37:38:fb:89: 80:85:93:51:54:4f:b5:08:78:71:4c:95:29:ac:8d:82:2f:25: fe:ba:ef:03:bd:c9:78:f9:b6:a5:26:fe:46:35:2d:54:2b:55: 57:ea:3c:0b:1f:22:a1:c6:6b:95:75:38:58:e7:de:35:84:23: 44:0a:c5:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+rLuU8/8ektw6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDkwOGRkZmEtYjVlMC00NzE1LWIzMzktMDgzNDIwMGJkMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA049sHDWuBIgHqoOa5ncmoiWRt9vI6F6frqDq Hd46UnbgoKF5G5/zzx2L54oYLl8CxnGmAf27HaqcjLvJD1egC4a33CUBVmMbOmsc py3JT1To1eWkdfcVZyy/wHb+urSdUaQNNnKIXLRtLU398amyp+7xzVA72lVDpPlw KXTiDNf3alCf39pAVMvUJ0uolkthDj8EnIj93kagPu9sskqXPhKE1DcAb+HJj0AX t4nyR1z3szPkqDj982j3LvfoyzaHy6UoQA49gIu8CgMTklXv/iaYLCksQAIgx3zj b6fcdtsgmHY0ALBmkMt1iLXb8ifRTLovEa3RG4tagRlnIsS97QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWGbmUqvoYyp8vxJp0P1Swt7zNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk0ZWFmNzctZDQxZS0z NTIyLTg3YjktMmI2YjM2OGNlYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAoS5GOVGCO2c0PecfpVkYL8y+9/v7CHNrhyeTLgohzg6nKTD03ryFS hXqWkf5SS9o2JQU21bmVaMDrm/8ulWpBuzTTEwfzXjS29i7010Hf57VGyyPEs+bO os0Q3guWQ7ZIGmMCO3MLsAbggKqFlfU5Z/pOGCQ54BK65jmL1i8foJUhI4Ug8hm3 VH/mDlLarQDHjBNUVd2KRbiHkNaf6ifWZRcGC2HsW9GoCB2fYRus+uPX6PUEJ/F9 kHKJPFfKNqhGNzj7iYCFk1FUT7UIeHFMlSmsjYIvJf667wO9yXj5tqUm/kY1LVQr VVfqPAsfIqHGa5V1OFjn3jWEI0QKxQc= -----END CERTIFICATE-----Generated at Sat Sep 26 14:27:12 2026 by rpki-client