$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa File: e38a345b-3007-3bfd-a88b-6b24141726d3.roa (raw, json) Hash identifier: T6C1e1hwOwFF4wh/zxI9xEBa0WHaOgEEPcMbtBm1WRI= Subject key identifier: 52:25:B8:68:77:ED:E4:A0:D5:1C:13:3D:42:A0:0D:08:11:33:B0:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B9E631C640026742AA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 104.86.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b9:e6:31:c6:40:02:67:42:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=4a1f7965-dc3c-40ca-9dc2-24c7d44ace56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:e6:d0:bd:18:81:58:34:9c:bf:58:75:81: c9:23:53:c5:71:59:7e:77:60:0f:fc:c8:14:52:af: 65:12:2a:62:09:fd:9b:97:60:41:4d:80:0d:9a:d0: fc:97:af:2a:51:17:57:d9:73:78:bd:fc:73:7a:f5: 98:bf:bd:11:0f:34:a4:01:43:df:13:78:98:9d:6f: 34:92:01:b0:6d:7a:40:94:c3:eb:92:04:14:de:99: 8f:a7:38:10:e6:70:8d:3f:3e:08:99:05:ab:7b:91: 71:38:19:34:48:1d:64:a7:4e:89:cb:42:02:0b:ae: 94:90:9b:f8:80:61:38:d1:45:33:e6:3b:a5:b5:5e: bf:08:a8:de:db:30:36:8f:b4:f5:3c:2d:c4:b8:ec: 43:4d:d3:bf:a3:72:fa:8c:60:1a:9d:01:6d:07:9b: 7b:36:62:e6:09:8a:86:b2:2d:50:2b:ac:a1:32:86: cd:7f:37:2d:76:93:6c:2b:3e:92:fa:74:fd:0c:af: 2e:b7:e6:41:9d:e3:4e:eb:5f:30:eb:f8:65:70:ee: fc:9b:72:8b:a4:22:45:11:04:dd:f0:45:44:f6:b9: 9b:34:c1:66:c3:b3:92:b1:95:56:a1:c1:d6:e9:b6: 51:cb:a4:56:e4:90:49:09:a9:a0:46:fd:6d:1d:31: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:25:B8:68:77:ED:E4:A0:D5:1C:13:3D:42:A0:0D:08:11:33:B0:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:55:0c:8d:2d:73:da:77:65:55:ab:ab:58:a2:b3:f5:3f:54: 40:36:b2:9a:a9:d4:b8:8d:4a:0c:66:29:85:ba:26:fd:d0:89: 43:3c:4e:dc:65:9f:36:09:f0:04:36:64:72:b6:eb:58:43:97: 48:2d:c1:66:4d:40:cb:ae:aa:b3:d0:39:0d:7e:26:c2:a4:89: 14:d6:da:03:16:de:38:84:e2:97:fb:c4:7c:72:f9:f6:21:b8: 5b:4b:6a:9b:0d:cd:28:3f:12:6c:9a:2e:a0:96:c7:52:23:43: 86:fc:be:38:79:92:d0:93:b8:37:4f:05:a4:7d:20:4b:b1:f0: 6a:76:ee:72:7f:d3:f2:38:29:22:33:c9:35:ea:62:61:21:46: f0:50:1d:8f:24:b6:c0:7a:1d:71:93:01:1f:72:93:ea:79:ce: c0:3c:4a:cc:0f:be:94:1e:2a:9b:89:64:61:29:dc:f2:5e:95: 2c:7a:21:14:72:59:bb:ac:be:af:65:18:df:10:e1:5a:82:2f: 8b:2f:bc:21:28:29:02:35:7b:a0:98:93:8b:a9:ca:c4:3c:ae: 9f:e9:df:1d:69:34:84:8e:82:76:26:69:40:96:04:da:95:6e: e1:a1:6d:2d:c5:21:53:c4:8b:d6:75:c2:d9:05:2f:e6:d3:67: 1d:25:d8:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7nmMcZAAmdCqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NGExZjc5NjUtZGMzYy00MGNhLTlkYzItMjRjN2Q0NGFjZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFrm0L0YgVg0nL9YdYHJI1PFcVl+d2AP/MgU Uq9lEipiCf2bl2BBTYANmtD8l68qURdX2XN4vfxzevWYv70RDzSkAUPfE3iYnW80 kgGwbXpAlMPrkgQU3pmPpzgQ5nCNPz4ImQWre5FxOBk0SB1kp06Jy0ICC66UkJv4 gGE40UUz5jultV6/CKje2zA2j7T1PC3EuOxDTdO/o3L6jGAanQFtB5t7NmLmCYqG si1QK6yhMobNfzctdpNsKz6S+nT9DK8ut+ZBneNO618w6/hlcO78m3KLpCJFEQTd 8EVE9rmbNMFmw7OSsZVWocHW6bZRy6RW5JBJCamgRv1tHTFOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIluGh37eSg1RwTPUKgDQgRM7D7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM4YTM0NWItMzAwNy0z YmZkLWE4OGItNmIyNDE0MTcyNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhVDI0tc9p3ZVWrq1iis/U/VEA2spqp1LiNSgxmKYW6Jv3QiUM8Ttxl nzYJ8AQ2ZHK261hDl0gtwWZNQMuuqrPQOQ1+JsKkiRTW2gMW3jiE4pf7xHxy+fYh uFtLapsNzSg/EmyaLqCWx1IjQ4b8vjh5ktCTuDdPBaR9IEux8Gp27nJ/0/I4KSIz yTXqYmEhRvBQHY8ktsB6HXGTAR9yk+p5zsA8SswPvpQeKpuJZGEp3PJelSx6IRRy Wbusvq9lGN8Q4VqCL4svvCEoKQI1e6CYk4upysQ8rp/p3x1pNISOgnYmaUCWBNqV buGhbS3FIVPEi9Z1wtkFL+bTZx0l2MY= -----END CERTIFICATE-----Generated at Sun Oct 4 09:22:05 2026 by rpki-client