$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64f56f22-3ae8-3707-b230-dd1c16b1292c.roa File: 64f56f22-3ae8-3707-b230-dd1c16b1292c.roa (raw, json) Hash identifier: 8ELmkM9ala2964w0ktQZTr9KI2RXj1wZQILFLyM7qNI= Subject key identifier: 1F:77:8E:D1:8D:64:F0:27:6C:3F:59:6D:3B:A5:59:09:5D:7A:35:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1B625136CB03B229260A44C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64f56f22-3ae8-3707-b230-dd1c16b1292c.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.107.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:51:36:cb:03:b2:29:26:0a:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=30d05c7b-edfe-4fb6-98a3-d137fb0e4d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:4e:f9:c8:64:56:08:49:de:2c:e1:c8:08: c4:96:68:5f:9a:c5:fd:be:f5:88:a6:b0:88:96:cb: 9c:c1:17:f5:91:c0:8a:c1:c9:3d:01:04:78:2f:4b: 80:44:ea:a5:ad:2a:be:62:b2:2d:7f:0d:57:27:cd: 87:d4:35:7a:41:5a:e5:2a:08:9a:af:c6:08:a4:4c: 7d:3b:8b:16:86:ea:ab:cf:13:e4:12:fc:ca:24:dd: 17:82:fa:f5:94:d0:11:55:be:75:43:8a:af:0d:af: 3f:22:04:7b:0e:b0:19:99:60:2a:17:30:be:8d:81: 1b:81:4d:4d:1c:6a:b8:21:19:1a:4b:7d:90:b0:57: bb:d6:43:d5:d7:72:fc:1b:91:66:87:7f:e3:8a:ab: 0d:0b:05:3e:57:f0:08:49:95:75:d6:51:fe:d8:0e: 58:c2:8d:04:a4:52:65:21:22:c2:bd:2c:e8:42:e5: ba:04:46:4b:9f:f2:b3:04:88:db:63:10:2b:87:61: ce:87:b1:51:bd:26:37:30:bb:ef:32:50:06:4a:b0: 39:71:bd:a1:46:8f:f7:02:0e:d0:b2:13:c0:4b:09: 2c:6e:ce:c7:67:0d:98:dc:2e:ad:a1:e1:41:f0:6e: 27:8a:f8:30:a4:55:c6:25:a5:f7:69:49:d2:4f:df: 85:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:77:8E:D1:8D:64:F0:27:6C:3F:59:6D:3B:A5:59:09:5D:7A:35:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64f56f22-3ae8-3707-b230-dd1c16b1292c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.107.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f4:88:9d:b7:35:b8:49:00:b7:64:03:52:dc:a3:8e:43:d3: d0:2f:8a:a9:4f:33:7a:bf:53:98:bd:5a:0a:1a:2c:d9:9d:d8: da:af:cf:4a:be:8f:0a:62:df:79:eb:39:0f:3b:1b:16:3d:e3: 07:cd:b4:48:76:56:0d:4a:9e:e4:c9:9c:aa:2b:78:0b:df:9c: a1:ad:6b:c7:e4:16:d3:31:60:a3:1b:ed:66:5c:7f:6a:f1:d4: 50:b9:78:16:91:ef:f5:5e:c2:d0:4f:c2:ef:5f:f8:71:88:a8: 58:b4:99:ec:1d:f5:49:f2:67:40:eb:de:0b:7f:dc:27:23:40: 5c:78:63:e0:5b:fe:bc:03:4e:e4:36:ec:72:a8:45:35:e5:c8: 9f:0b:d3:50:04:4c:4d:24:7d:65:40:c2:ec:39:d1:07:61:d0: 6a:eb:29:ca:6c:59:e4:70:7b:df:a6:02:cb:f8:91:32:ef:ef: 49:a9:f8:78:7d:83:0f:50:82:ab:03:32:af:68:dc:41:19:27: 45:0c:ac:d0:14:47:b5:a0:29:4c:03:2a:7d:f9:47:f9:97:51: e2:4d:f0:84:5c:5a:91:b3:8f:2a:f2:4a:ac:9f:4b:a0:65:78: 6d:35:55:2d:5c:47:95:35:18:24:d1:b6:0d:b8:7e:f8:8a:9a: bc:cb:ce:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlE2ywOyKSYKRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MzBkMDVjN2ItZWRmZS00ZmI2LTk4YTMtZDEzN2ZiMGU0ZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRFO+chkVghJ3izhyAjElmhfmsX9vvWIprCI lsucwRf1kcCKwck9AQR4L0uAROqlrSq+YrItfw1XJ82H1DV6QVrlKgiar8YIpEx9 O4sWhuqrzxPkEvzKJN0Xgvr1lNARVb51Q4qvDa8/IgR7DrAZmWAqFzC+jYEbgU1N HGq4IRkaS32QsFe71kPV13L8G5Fmh3/jiqsNCwU+V/AISZV11lH+2A5Ywo0EpFJl ISLCvSzoQuW6BEZLn/KzBIjbYxArh2HOh7FRvSY3MLvvMlAGSrA5cb2hRo/3Ag7Q shPASwksbs7HZw2Y3C6toeFB8G4nivgwpFXGJaX3aUnST9+FfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB93jtGNZPAnbD9ZbTulWQldejUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjRmNTZmMjItM2FlOC0z NzA3LWIyMzAtZGQxYzE2YjEyOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf0iJ23NbhJALdkA1Lco45D09AviqlPM3q/U5i9WgoaLNmd2Nqvz0q+ jwpi33nrOQ87GxY94wfNtEh2Vg1KnuTJnKoreAvfnKGta8fkFtMxYKMb7WZcf2rx 1FC5eBaR7/VewtBPwu9f+HGIqFi0mewd9UnyZ0Dr3gt/3CcjQFx4Y+Bb/rwDTuQ2 7HKoRTXlyJ8L01AETE0kfWVAwuw50Qdh0GrrKcpsWeRwe9+mAsv4kTLv70mp+Hh9 gw9QgqsDMq9o3EEZJ0UMrNAUR7WgKUwDKn35R/mXUeJN8IRcWpGzjyrySqyfS6Bl eG01VS1cR5U1GCTRtg24fviKmrzLznE= -----END CERTIFICATE-----Generated at Mon Sep 28 06:21:27 2026 by rpki-client