$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa File: dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa (raw, json) Hash identifier: 61lyYXImL6tnmTAepnEZKGRkW3DfZfmm5u9Ht9caKl0= Subject key identifier: AA:8C:AD:EA:76:12:69:92:59:75:D4:F9:F9:75:B3:BD:E1:6B:4B:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0D6CF0C727D6D206621CC9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.99.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f0:c7:27:d6:d2:06:62:1c:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=b1361bab-de20-4bdf-a1ca-b40776bdde34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:3a:67:49:6a:89:b0:bf:9e:79:e4:74:d9: 3e:1e:63:5d:db:a6:8f:d4:25:2e:6e:7c:f7:45:cf: 76:28:0c:76:f8:89:01:68:97:bc:cb:3e:1f:3a:09: a7:52:cb:ac:30:cd:8c:2e:7d:12:f9:61:61:16:3f: 95:72:ee:a0:4a:4e:09:b0:d9:23:a9:61:c7:43:71: 35:0c:96:85:5e:6b:8c:0e:65:dd:c9:7e:29:ec:75: a7:54:5b:0d:79:e5:68:28:fd:c9:38:5d:d6:7a:a7: 71:c0:2e:15:f4:77:ae:3e:cf:29:f2:d9:37:07:af: 21:3b:f2:80:e7:27:9c:f4:32:e6:41:5b:93:39:cf: ee:50:f2:89:65:cd:93:cf:95:4e:b7:14:0b:70:82: 3b:a7:a4:63:07:e1:ad:e2:cc:64:2e:ac:db:f1:25: 3d:63:f2:24:c2:46:ed:74:c4:59:03:a4:1e:0a:1c: 6c:01:de:44:e3:30:fc:13:7f:d7:42:57:5d:bb:12: 5b:3e:8a:e9:f2:56:fc:d7:12:82:61:93:1a:47:50: da:9d:7e:12:16:fb:1b:90:7f:c5:2f:b6:99:cf:a4: fd:48:ee:7e:47:3a:e5:c1:ee:85:53:9b:2f:cf:1c: 86:d5:e4:15:19:13:92:01:a6:0b:d8:98:22:ee:87: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8C:AD:EA:76:12:69:92:59:75:D4:F9:F9:75:B3:BD:E1:6B:4B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb8b7eb-cfb2-36f1-950e-a66c94e32370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3b:17:87:ec:a2:c7:9c:90:b9:72:cf:b5:0a:ff:d1:31:2c: 9c:68:0c:df:23:ee:cb:01:25:de:7d:66:1f:e7:bd:2a:9c:44: 85:a1:3e:68:87:26:bd:3b:b3:55:f1:34:46:2f:28:6d:e7:26: 44:89:63:91:60:36:a6:86:4a:a4:6b:c0:07:8d:7b:30:a6:67: 6f:03:28:7f:2f:41:c0:04:83:fe:41:3c:d1:ff:e7:f1:8d:76: 4d:79:cb:a4:ca:21:6f:ac:9e:89:dc:a4:47:8e:d0:3e:90:21: 52:6b:e0:1c:93:55:03:34:58:2f:94:41:9a:1b:a4:5d:bb:23: 19:9a:b9:67:cf:53:dc:b5:2e:98:0e:c9:4b:cb:50:92:5e:49: a8:3e:5f:69:39:6b:7b:4c:c5:10:0a:7c:33:d2:7a:99:25:a4: f4:66:a0:0c:62:8f:90:f0:75:c7:6e:26:35:71:75:b4:53:da: 9f:12:65:d5:cb:8a:da:19:d0:85:f6:db:92:ee:ff:b9:34:50: c7:79:84:a0:e8:34:3e:da:e6:e5:9e:20:09:c5:a6:cc:d7:9d: cd:99:53:97:3a:3a:7c:a1:39:ef:b6:7d:76:11:83:f1:99:2c: cc:4f:b5:eb:a5:8a:c1:b2:a6:56:ff:85:de:da:de:aa:0a:c5: 22:ac:18:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPDHJ9bSBmIcycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YjEzNjFiYWItZGUyMC00YmRmLWExY2EtYjQwNzc2YmRkZTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmc6Z0lqibC/nnnkdNk+HmNd26aP1CUubnz3 Rc92KAx2+IkBaJe8yz4fOgmnUsusMM2MLn0S+WFhFj+Vcu6gSk4JsNkjqWHHQ3E1 DJaFXmuMDmXdyX4p7HWnVFsNeeVoKP3JOF3WeqdxwC4V9HeuPs8p8tk3B68hO/KA 5yec9DLmQVuTOc/uUPKJZc2Tz5VOtxQLcII7p6RjB+Gt4sxkLqzb8SU9Y/Ikwkbt dMRZA6QeChxsAd5E4zD8E3/XQldduxJbPorp8lb81xKCYZMaR1DanX4SFvsbkH/F L7aZz6T9SO5+Rzrlwe6FU5svzxyG1eQVGROSAaYL2Jgi7ofBwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqMrep2EmmSWXXU+fl1s73ha0uPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiOGI3ZWItY2ZiMi0z NmYxLTk1MGUtYTY2Yzk0ZTMyMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ7F4fsoseckLlyz7UK/9ExLJxoDN8j7ssBJd59Zh/nvSqcRIWhPmiH Jr07s1XxNEYvKG3nJkSJY5FgNqaGSqRrwAeNezCmZ28DKH8vQcAEg/5BPNH/5/GN dk15y6TKIW+snoncpEeO0D6QIVJr4ByTVQM0WC+UQZobpF27IxmauWfPU9y1LpgO yUvLUJJeSag+X2k5a3tMxRAKfDPSepklpPRmoAxij5DwdcduJjVxdbRT2p8SZdXL itoZ0IX225Lu/7k0UMd5hKDoND7a5uWeIAnFpszXnc2ZU5c6OnyhOe+2fXYRg/GZ LMxPteulisGyplb/hd7a3qoKxSKsGOk= -----END CERTIFICATE-----Generated at Thu Sep 24 15:52:15 2026 by rpki-client