$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c3598e4-63f2-3f67-8303-22fe135985e0.roa File: 7c3598e4-63f2-3f67-8303-22fe135985e0.roa (raw, json) Hash identifier: U7C6cBfF0SLxFWo8ZqrtyxJscQvbeRP0voe0+c/e9cE= Subject key identifier: A3:8E:67:EE:09:B5:8C:01:73:B4:C0:0D:07:DD:FD:20:38:B4:23:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B60733343F320E822220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c3598e4-63f2-3f67-8303-22fe135985e0.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.100.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b6:07:33:34:3f:32:0e:82:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=517435a8-b13a-4f07-a540-a42e9e33b352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:ee:bb:1c:2d:a9:5c:27:14:92:49:4e:20: b0:35:28:37:ee:9d:70:a1:7f:f1:7b:57:c9:54:73: bc:5f:42:25:bb:fc:2b:87:4c:ff:db:4c:45:bf:78: 01:35:1f:39:bc:28:a8:c2:cb:e4:74:98:a0:94:ef: 5d:f5:f0:bf:d0:60:1c:d8:00:7e:31:2c:8b:4b:6f: a2:5b:6b:e3:34:00:cc:38:0d:44:e5:ad:e8:d8:e4: 5a:54:d6:a5:13:42:e9:68:5d:c6:f6:1c:cd:9c:8e: 87:bc:b8:12:2b:2b:9d:48:71:b7:fe:43:92:71:4f: 0c:19:f9:32:2a:4c:cd:67:16:c8:44:ae:f7:c8:7d: 33:0e:6c:19:e2:0f:69:f7:60:76:d4:91:d5:d6:9a: 60:6a:e8:5c:d6:2b:c4:37:89:56:5e:18:c5:d7:17: fa:08:50:13:93:3c:5d:10:8b:5d:95:83:3c:cf:ff: 61:62:8e:d1:f0:e1:9e:13:bc:72:3f:5f:c3:88:ae: a2:3e:7c:45:68:6c:96:76:8d:6b:a3:32:ee:63:45: e3:68:9a:f7:23:cc:82:1e:d1:cf:42:08:42:ad:5c: a5:40:0d:93:02:7f:de:14:9a:26:86:df:79:05:a5: d3:68:e7:88:29:8e:4d:9d:75:a2:c5:74:05:68:e7: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:67:EE:09:B5:8C:01:73:B4:C0:0D:07:DD:FD:20:38:B4:23:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c3598e4-63f2-3f67-8303-22fe135985e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.100.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:32:f4:c9:86:da:c1:e2:f5:55:3c:51:20:e9:2d:48:f6:c1: f9:7e:a0:7e:fe:02:27:1e:80:38:2c:ce:00:fc:f5:3b:8b:6b: 22:46:fc:62:71:9d:1c:e4:56:e7:ee:c9:7d:9e:40:5f:df:50: df:8d:d8:bc:cd:25:c9:1a:38:01:70:10:0e:a4:fd:ac:1e:b8: 3e:41:49:ba:4b:47:21:df:85:ff:5e:d4:c9:62:fe:1e:bc:f8: 89:c4:f4:d9:79:d4:f8:92:19:c6:fd:63:5b:16:53:86:4f:30: ba:29:dd:d2:13:26:c6:d7:be:69:06:5e:11:af:aa:5c:33:09: b2:91:d7:be:05:c6:c9:99:1c:86:c4:98:15:62:2e:c0:4a:90: b5:21:f1:bc:d3:48:96:d7:9b:2e:46:45:61:b0:5a:22:44:b4: a5:bc:41:f5:63:72:58:e5:6e:ba:d6:7a:82:9e:fd:8e:a8:07: 42:57:64:68:2d:32:36:cc:80:c4:93:2e:a1:82:55:b2:ef:43: e2:32:a1:fb:54:58:33:e3:56:c6:eb:1a:95:33:e2:bd:f1:71: 49:56:d2:d8:69:cf:37:45:d8:cb:c7:b5:ad:c4:a4:e1:5f:22: f9:06:87:20:f0:8e:07:d9:b1:0a:5d:37:a1:c3:e0:78:03:58: 19:73:bf:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7YHMzQ/Mg6CIiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NTE3NDM1YTgtYjEzYS00ZjA3LWE1NDAtYTQyZTllMzNiMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmanuuxwtqVwnFJJJTiCwNSg37p1woX/xe1fJ VHO8X0Ilu/wrh0z/20xFv3gBNR85vCiowsvkdJiglO9d9fC/0GAc2AB+MSyLS2+i W2vjNADMOA1E5a3o2ORaVNalE0LpaF3G9hzNnI6HvLgSKyudSHG3/kOScU8MGfky KkzNZxbIRK73yH0zDmwZ4g9p92B21JHV1ppgauhc1ivEN4lWXhjF1xf6CFATkzxd EItdlYM8z/9hYo7R8OGeE7xyP1/DiK6iPnxFaGyWdo1rozLuY0XjaJr3I8yCHtHP QghCrVylQA2TAn/eFJomht95BaXTaOeIKY5NnXWixXQFaOez+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOOZ+4JtYwBc7TADQfd/SA4tCOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2MzNTk4ZTQtNjNmMi0z ZjY3LTgzMDMtMjJmZTEzNTk4NWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwy9MmG2sHi9VU8USDpLUj2wfl+oH7+AicegDgszgD89TuLayJG/GJx nRzkVufuyX2eQF/fUN+N2LzNJckaOAFwEA6k/aweuD5BSbpLRyHfhf9e1Mli/h68 +InE9Nl51PiSGcb9Y1sWU4ZPMLop3dITJsbXvmkGXhGvqlwzCbKR174FxsmZHIbE mBViLsBKkLUh8bzTSJbXmy5GRWGwWiJEtKW8QfVjcljlbrrWeoKe/Y6oB0JXZGgt MjbMgMSTLqGCVbLvQ+IyoftUWDPjVsbrGpUz4r3xcUlW0thpzzdF2MvHta3EpOFf IvkGhyDwjgfZsQpdN6HD4HgDWBlzvxo= -----END CERTIFICATE-----Generated at Mon Sep 28 16:45:14 2026 by rpki-client