$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eaacd5a2-e64a-3187-8529-be099e5e69cb.roa File: eaacd5a2-e64a-3187-8529-be099e5e69cb.roa (raw, json) Hash identifier: guYacz9A/dpnxQT2D3TkKlM+mxbPhJ3zRlPTNoUiQRk= Subject key identifier: BC:C3:AA:2A:D5:60:F7:FC:4C:92:D3:5E:0F:72:2D:2C:21:EB:29:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584FBAA12B683788BB06973C21A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eaacd5a2-e64a-3187-8529-be099e5e69cb.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 16625 IP address blocks: 104.85.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:2b:68:37:88:bb:06:97:3c:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=5bec2731-18c8-471a-83bf-379f3fa4b34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:78:ff:03:09:04:20:e1:28:45:03:a6:ae: e2:b4:22:d4:0c:80:29:da:a8:c0:cd:f2:9d:30:46: a6:a7:ab:65:34:b9:a8:7a:0c:9b:89:b4:38:fc:d9: e1:ec:a8:f8:a7:5b:d3:13:1b:5c:54:9b:98:92:2d: b8:8e:a1:f0:cf:64:d6:f8:bc:96:11:ee:2a:08:22: de:cd:6a:7e:c9:51:cb:dd:02:73:49:a0:cb:38:2a: 74:e7:6e:f4:aa:a8:64:3a:bb:c8:21:67:83:7c:fb: 76:81:a6:0a:29:55:1d:56:e5:8d:a4:d2:5c:9a:42: 2c:85:97:87:97:ce:00:4d:d8:1a:75:56:27:06:e2: 10:3d:0d:9e:f7:ac:23:39:0d:36:fb:1f:d8:97:e5: 6b:cf:aa:8c:1f:61:72:72:60:0d:96:4e:65:91:f5: b2:1e:f2:a1:e9:a8:41:ac:31:d6:03:82:f5:5f:82: 89:0d:88:91:84:43:68:dd:0d:91:59:21:fe:17:0d: d1:cb:0e:b3:7f:58:be:d3:b8:45:6e:df:0c:77:6a: 36:50:f5:89:f5:77:1c:56:91:a4:5f:4a:7b:e2:e8: 7e:42:ef:5e:e3:7a:48:a2:fb:b5:14:59:4a:1d:3b: 25:60:b4:9b:1f:9c:e6:5c:8a:e2:0f:cc:ff:ca:dc: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C3:AA:2A:D5:60:F7:FC:4C:92:D3:5E:0F:72:2D:2C:21:EB:29:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eaacd5a2-e64a-3187-8529-be099e5e69cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.85.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:99:f3:2b:61:a9:cb:07:42:96:5e:16:5c:9c:6e:f3:9a:aa: be:78:50:00:99:dc:6f:a5:ac:aa:2b:d2:b9:54:a5:75:36:26: f5:cd:88:25:3c:f7:2f:82:99:f3:44:46:30:19:3c:c7:6f:c8: 1c:f5:38:2f:9d:80:19:53:aa:38:b4:86:e3:49:ef:a9:ae:2f: 8e:1c:e5:a6:86:8e:bc:57:9f:5f:ac:b0:d9:bd:ff:81:00:5f: 50:33:2a:42:7c:d4:b5:bc:16:21:dd:8f:c1:4d:f5:d2:2b:d5: 1e:40:aa:f5:1f:82:ae:f2:7e:86:d3:c5:ab:1b:af:7e:d2:e4: 55:46:0b:0e:3a:d7:ca:64:fb:7d:1a:e5:2a:a6:8e:68:56:75: 80:6d:4c:b8:85:cc:23:c1:31:b9:d9:28:84:63:b1:11:18:eb: 2f:12:aa:37:5e:0a:7e:a0:ca:9e:6f:d9:78:34:12:ec:cb:0b: 23:47:b7:ee:11:7d:82:36:46:37:67:7c:98:75:4b:4c:7a:a5: 66:0c:23:98:a2:29:a6:49:0c:52:58:de:97:83:cf:2a:cd:37: 4f:be:05:a9:b1:4a:78:80:27:28:b1:c8:cd:5f:bb:e0:b0:fb: 10:65:98:27:81:0c:40:22:45:c5:a1:bf:a4:ce:e8:4d:d4:d8: 27:38:6a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oStoN4i7Bpc8IaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk NWJlYzI3MzEtMThjOC00NzFhLTgzYmYtMzc5ZjNmYTRiMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWt4/wMJBCDhKEUDpq7itCLUDIAp2qjAzfKd MEamp6tlNLmoegybibQ4/Nnh7Kj4p1vTExtcVJuYki24jqHwz2TW+LyWEe4qCCLe zWp+yVHL3QJzSaDLOCp05270qqhkOrvIIWeDfPt2gaYKKVUdVuWNpNJcmkIshZeH l84ATdgadVYnBuIQPQ2e96wjOQ02+x/Yl+Vrz6qMH2FycmANlk5lkfWyHvKh6ahB rDHWA4L1X4KJDYiRhENo3Q2RWSH+Fw3Ryw6zf1i+07hFbt8Md2o2UPWJ9XccVpGk X0p74uh+Qu9e43pIovu1FFlKHTslYLSbH5zmXIriD8z/yty2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzDqirVYPf8TJLTXg9yLSwh6ynTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWFhY2Q1YTItZTY0YS0z MTg3LTg1MjktYmUwOTllNWU2OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaFX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGZ8ythqcsHQpZeFlycbvOaqr54UACZ3G+lrKor0rlUpXU2JvXNiCU8 9y+CmfNERjAZPMdvyBz1OC+dgBlTqji0huNJ76muL44c5aaGjrxXn1+ssNm9/4EA X1AzKkJ81LW8FiHdj8FN9dIr1R5AqvUfgq7yfobTxasbr37S5FVGCw4618pk+30a 5SqmjmhWdYBtTLiFzCPBMbnZKIRjsREY6y8SqjdeCn6gyp5v2Xg0EuzLCyNHt+4R fYI2RjdnfJh1S0x6pWYMI5iiKaZJDFJY3peDzyrNN0++BamxSniAJyixyM1fu+Cw +xBlmCeBDEAiRcWhv6TO6E3U2Cc4amQ= -----END CERTIFICATE-----Generated at Sun Nov 15 14:59:45 2026 by rpki-client