$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa File: 3468e988-70e4-3dfd-a14d-360d7a837fb0.roa (raw, json) Hash identifier: SNpERKc5oWXAT0BUBPH3WNj3rIenRFCd+/Nd254E4O0= Subject key identifier: 3D:2F:93:F6:0B:7D:49:09:F2:8D:02:7A:A8:46:51:57:EE:5D:AF:A8 Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Certificate serial: 010D0C9F4328584F4973AC896A01D5E7488C0F40 Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393336 IP address blocks: 104.193.226.0/24 maxlen: 24 162.250.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ac:89:6a:01:d5:e7:48:8c:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=984c4f0e-5637-4c1c-9c7c-5be5bdf2d701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:d0:e1:c9:7d:b9:09:32:9c:87:2b:4b:fa: 0d:5d:51:62:64:df:35:9f:a0:eb:ce:be:61:ec:00: 0c:20:41:62:0d:4e:f2:f5:e6:a6:72:53:c7:6e:28: 85:86:1c:0f:6b:0a:39:0f:20:45:b7:82:0b:85:fb: 59:02:4a:e0:b9:cf:41:6c:e5:08:54:f9:d9:54:ee: ca:0a:a9:fc:a8:18:e8:c6:fa:dd:9d:b2:cf:84:ab: 74:b8:4b:d7:34:d4:08:e9:f2:e1:f7:b6:eb:9b:f4: f3:b9:be:9f:f6:d9:ce:cd:67:10:fd:d1:da:84:69: 22:b5:fd:fe:b8:a5:93:51:ec:58:b7:1e:ba:d6:bb: 73:2a:00:ce:cc:27:c3:45:60:d8:8b:ed:bb:08:92: 3a:63:51:e0:14:a4:c9:65:c6:01:9b:3b:75:21:ba: d0:2b:97:19:f6:f1:35:01:10:75:22:ee:60:31:c3: 7a:9a:8f:53:f9:00:4a:4b:3f:b3:d9:f8:b2:92:d6: 2c:55:1f:3f:64:ad:18:b7:29:ac:67:6f:fe:1d:34: 5e:1c:63:1a:79:22:ee:a3:6a:24:f1:ae:1a:7e:81: df:c0:ef:be:47:9e:de:03:34:e2:d2:7b:00:52:c3: a4:b5:2a:b7:9f:99:4f:42:d8:d5:bf:e0:bb:88:c8: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2F:93:F6:0B:7D:49:09:F2:8D:02:7A:A8:46:51:57:EE:5D:AF:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3468e988-70e4-3dfd-a14d-360d7a837fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl X509v3 Authority Key Identifier: keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer sbgp-ipAddrBlock: critical IPv4: 104.193.226.0/24 162.250.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:3d:18:3f:31:72:f8:7e:04:21:eb:a9:de:30:1a:06:80:ce: d1:33:94:44:d9:1c:72:fe:4a:d4:b9:94:c8:53:a8:58:59:c0: 7f:8a:6d:d6:72:b7:5e:98:e5:f7:0f:b3:25:37:7c:e4:7b:2e: 43:c0:c6:71:ef:e1:20:82:b5:84:42:2e:c7:b3:1a:b1:c1:57: ba:f7:11:35:59:89:bf:e5:a1:c9:bb:08:bd:70:40:5d:0d:59: dd:1e:0f:35:45:26:a2:19:c3:fa:18:03:cc:1b:dd:6b:22:f6: 3b:0a:5c:78:1c:49:62:b8:61:3e:40:c1:cb:e0:6a:32:2c:56: 2c:06:f3:bb:84:b2:08:bc:a5:9c:00:90:16:c7:e3:21:c2:07: 13:95:23:2a:6f:33:23:65:40:e7:d3:69:e1:6a:d6:fd:e2:2b: 2e:61:cf:25:3e:2d:f5:2d:42:f0:aa:93:04:c3:e7:b3:76:1c: 42:58:e6:8f:99:41:0c:d0:17:15:e1:be:10:c7:1f:c8:2f:8a: d5:0c:9b:27:94:a6:05:d6:d1:69:47:0f:73:44:22:99:a9:98: a1:13:88:dc:2d:36:2f:20:77:b1:1c:c0:e0:f2:fd:b7:dc:e2: 73:4c:7f:8b:16:fe:c4:9b:fe:53:40:78:db:71:fa:50:8e:27: ae:17:cc:0b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc6yJagHV50iMD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0YjJlZDgtMWEyYS00YmQxLWI3MDktNzQ3OWRiN2M0 ZWE5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTg0YzRmMGUtNTYzNy00YzFjLTljN2MtNWJlNWJkZjJkNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3PQ4cl9uQkynIcrS/oNXVFiZN81n6Drzr5h 7AAMIEFiDU7y9eamclPHbiiFhhwPawo5DyBFt4ILhftZAkrguc9BbOUIVPnZVO7K Cqn8qBjoxvrdnbLPhKt0uEvXNNQI6fLh97brm/Tzub6f9tnOzWcQ/dHahGkitf3+ uKWTUexYtx661rtzKgDOzCfDRWDYi+27CJI6Y1HgFKTJZcYBmzt1IbrQK5cZ9vE1 ARB1Iu5gMcN6mo9T+QBKSz+z2fiyktYsVR8/ZK0YtymsZ2/+HTReHGMaeSLuo2ok 8a4afoHfwO++R57eAzTi0nsAUsOktSq3n5lPQtjVv+C7iMgoJwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFD0vk/YLfUkJ8o0CeqhGUVfuXa+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OTRi MmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5ZGI3YzRlYTkvMzQ2OGU5ODgtNzBlNC0z ZGZkLWExNGQtMzYwZDdhODM3ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTk0YjJlZDgtMWEyYS00YmQxLWI3 MDktNzQ3OWRiN2M0ZWE5Lzk5NGIyZWQ4LTFhMmEtNGJkMS1iNzA5LTc0NzlkYjdj NGVhOS5jcmwwHwYDVR0jBBgwFoAUkH1OvQyn9d0T/0KVHpr0mzPpeXwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OTRiMmVkOC0xYTJhLTRiZDEtYjcwOS03NDc5 ZGI3YzRlYTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaMHiAwQA ovrrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI49GD8xcvh+BCHrqd4wGgaAztEzlETZHHL+StS5lMhTqFhZ wH+KbdZyt16Y5fcPsyU3fOR7LkPAxnHv4SCCtYRCLsezGrHBV7r3ETVZib/locm7 CL1wQF0NWd0eDzVFJqIZw/oYA8wb3Wsi9jsKXHgcSWK4YT5AwcvgajIsViwG87uE sgi8pZwAkBbH4yHCBxOVIypvMyNlQOfTaeFq1v3iKy5hzyU+LfUtQvCqkwTD57N2 HEJY5o+ZQQzQFxXhvhDHH8gvitUMmyeUpgXW0WlHD3NEIpmpmKETiNwtNi8gd7Ec wODy/bfc4nNMf4sW/sSb/lNAeNtx+lCOJ64XzAs= -----END CERTIFICATE-----Generated at Sat Sep 26 01:57:10 2026 by rpki-client