$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa File: f8d1f784-2db3-30a3-a0be-8fe061020362.roa (raw, json) Hash identifier: KUv0knCRF+UEa2IPQnFKgfF8wbPT/7At63LYbZp6z10= Subject key identifier: 11:81:76:DC:CD:93:02:AA:59:21:50:EB:BF:80:44:C4:D6:EE:B3:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B78D84688608E2E99D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 104.104.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b7:8d:84:68:86:08:e2:e9:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=b5e8477a-c8f2-46b5-9bbf-ebf83e9ecfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:17:f3:8d:95:79:fb:b1:6e:f0:17:a7:e3: 21:f0:e9:d6:76:b5:5f:88:9c:7f:1e:e5:3b:c0:d1: 01:b7:65:a0:e7:15:72:62:d4:9d:0b:09:e4:3b:ef: 35:dc:57:85:c2:9f:39:9d:42:9b:e4:ab:69:e3:af: 02:fb:4d:29:66:35:b9:5d:58:eb:20:f6:81:3e:0d: f2:32:a7:bf:d0:20:02:3d:e8:6f:5e:cb:b4:f6:30: 13:43:9f:d3:e4:e1:d4:dc:9b:c3:f8:ca:fa:6c:c3: 07:07:aa:b8:6e:6c:bd:6b:a7:9f:37:c6:b9:d3:1b: bb:87:3e:1a:d0:3d:fa:59:2a:42:fd:f1:8d:0f:1c: b7:15:33:b6:fa:6c:cc:4b:f2:23:11:92:f4:99:74: a3:07:15:32:2b:53:2f:f8:a7:9a:78:77:1e:29:ca: f7:3d:3d:32:a9:29:23:0a:7e:6e:42:59:f6:9d:62: 3f:61:15:26:7d:b8:d6:76:ef:41:b6:dd:9b:77:7f: a3:68:c3:88:74:e2:4a:ef:81:a6:23:f9:17:9c:5c: c4:49:ef:a7:f1:f4:eb:e9:31:11:54:b5:70:1f:c0: c9:84:72:14:de:1f:d3:d1:34:4a:80:95:24:a0:aa: fe:72:ab:3a:a8:94:a0:e7:e0:60:c3:ac:ef:11:7a: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:81:76:DC:CD:93:02:AA:59:21:50:EB:BF:80:44:C4:D6:EE:B3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8d1f784-2db3-30a3-a0be-8fe061020362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:60:24:41:00:d1:c2:1a:3f:3d:25:2b:28:dd:7d:49:a3:3a: 59:cf:72:91:89:ec:87:33:60:2a:04:01:66:05:4b:98:77:63: 11:65:64:3f:d4:19:cb:30:82:f1:fc:23:fb:9e:0e:52:08:0d: 98:49:2a:6b:35:a5:17:d9:2a:be:a8:4f:e9:a5:ff:eb:48:9e: 2b:41:08:9b:74:64:2d:f4:fc:82:4f:9a:59:4d:cc:40:09:90: 45:52:7f:7d:f2:9f:86:10:3f:87:20:e4:7f:27:9d:d8:d4:f2: 06:de:b4:b9:2f:71:ea:77:5c:ee:4d:75:40:b7:18:07:26:4b: 03:e4:e1:c0:56:1c:0b:3d:f2:5f:7f:e1:0a:6d:a2:06:a6:70: 34:50:b5:40:d5:0a:f9:ba:f9:c4:0c:11:26:6d:14:c4:34:c9: c2:31:01:a3:15:dd:f5:03:67:fb:e5:83:3d:1b:4f:79:3e:00: 2d:d2:10:96:c6:1f:b6:10:a8:49:38:6f:a5:24:78:b4:bd:e7: ba:71:87:8b:41:e3:ad:bc:66:01:88:b6:a0:cf:7c:a5:d7:a1: 29:16:83:93:30:d3:5a:a1:7f:71:4e:c3:0b:4a:40:0c:d8:9c: 5a:96:82:cd:96:e5:b7:49:72:9e:bf:c2:cb:8c:75:f0:03:66: 35:06:fe:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7eNhGiGCOLpnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjVlODQ3N2EtYzhmMi00NmI1LTliYmYtZWJmODNlOWVjZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ0X842VefuxbvAXp+Mh8OnWdrVfiJx/HuU7 wNEBt2Wg5xVyYtSdCwnkO+813FeFwp85nUKb5Ktp468C+00pZjW5XVjrIPaBPg3y Mqe/0CACPehvXsu09jATQ5/T5OHU3JvD+Mr6bMMHB6q4bmy9a6efN8a50xu7hz4a 0D36WSpC/fGNDxy3FTO2+mzMS/IjEZL0mXSjBxUyK1Mv+KeaeHceKcr3PT0yqSkj Cn5uQln2nWI/YRUmfbjWdu9Btt2bd3+jaMOIdOJK74GmI/kXnFzESe+n8fTr6TER VLVwH8DJhHIU3h/T0TRKgJUkoKr+cqs6qJSg5+Bgw6zvEXoW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGBdtzNkwKqWSFQ67+ARMTW7rOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhkMWY3ODQtMmRiMy0z MGEzLWEwYmUtOGZlMDYxMDIwMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGg8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhgJEEA0cIaPz0lKyjdfUmjOlnPcpGJ7IczYCoEAWYFS5h3YxFlZD/U GcswgvH8I/ueDlIIDZhJKms1pRfZKr6oT+ml/+tInitBCJt0ZC30/IJPmllNzEAJ kEVSf33yn4YQP4cg5H8nndjU8gbetLkvcep3XO5NdUC3GAcmSwPk4cBWHAs98l9/ 4QptogamcDRQtUDVCvm6+cQMESZtFMQ0ycIxAaMV3fUDZ/vlgz0bT3k+AC3SEJbG H7YQqEk4b6UkeLS957pxh4tB4628ZgGItqDPfKXXoSkWg5Mw01qhf3FOwwtKQAzY nFqWgs2W5bdJcp6/wsuMdfADZjUG/mc= -----END CERTIFICATE-----Generated at Thu Sep 24 13:34:10 2026 by rpki-client