$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa File: 14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa (raw, json) Hash identifier: ApBbWU4VPjoe8KMFGY/dhJGEIXmjZvMb+QZ9RIWjgoI= Subject key identifier: 1D:0B:22:B6:C6:C5:39:D6:DC:3E:09:D9:2A:A1:AF:0E:83:B0:D3:E3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F506D554285C6C96F03834500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 104.243.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:55:42:85:c6:c9:6f:03:83:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d1c859cb-7c5a-4dd6-b5c5-69b1e054f7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:fb:29:82:32:35:c0:dd:17:8c:63:fa:89: ae:5f:10:ec:77:bb:c8:af:32:2c:cd:41:7c:d2:fe: 8c:88:b6:a5:d1:db:dc:47:3b:26:4a:4d:09:2f:78: 23:5e:f3:cb:34:72:d8:3d:96:dc:e4:4b:b9:62:85: 02:1d:ce:84:2d:f9:f4:58:7d:de:2f:e9:39:d7:24: 8f:00:fe:a8:e2:00:4b:31:54:c6:8f:b6:d4:5c:cd: 35:e1:e9:28:11:bf:19:6e:fa:8e:12:7e:9e:00:61: 01:0b:d3:86:90:6a:cb:70:15:a1:77:fd:17:72:43: b8:4b:be:af:20:40:db:cd:7c:72:05:18:07:79:41: 18:75:c7:30:c1:15:71:b5:ee:0b:36:79:af:29:b4: 16:0e:90:9e:3b:23:1d:3b:1b:ee:c0:9e:65:43:1c: 38:b8:03:ad:39:4b:c3:d2:7f:1d:d5:ea:2d:a1:2d: 05:20:8d:b7:26:6c:ea:12:2d:cd:57:65:09:04:a8: 59:74:06:79:72:01:b2:52:ac:13:fa:68:8c:8b:83: aa:a7:be:fb:97:13:20:34:5c:aa:9b:d7:84:6b:91: e5:d1:61:fc:83:ec:f3:0d:39:59:5d:84:a4:7f:67: a4:43:af:9b:19:04:a3:e5:98:34:97:55:95:65:df: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0B:22:B6:C6:C5:39:D6:DC:3E:09:D9:2A:A1:AF:0E:83:B0:D3:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/14fd48c2-5fdb-3225-95ad-b27fcc46e894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e8:a6:ba:38:dd:af:6c:96:a4:8f:2e:14:af:35:58:94:b5: 3c:30:d2:5e:af:98:7c:84:3d:94:a5:fb:37:ec:e3:16:66:89: b0:34:3d:b8:39:08:51:2d:ec:a3:26:9c:ce:e6:bc:55:77:9f: 1a:ce:f8:55:46:0b:25:27:ba:d8:c3:d0:00:11:18:18:93:8c: 32:f9:28:6e:e5:55:ed:52:94:1f:03:40:ad:4f:69:c3:e6:22: 3d:36:86:da:cf:bd:5f:21:66:74:09:e5:e8:a0:c2:de:4d:05: b1:12:2d:8a:00:58:60:c3:b4:1a:31:32:cb:bd:ea:47:45:e5: 88:ec:09:ff:1f:ca:ac:6d:83:6d:92:8e:60:0f:e2:97:63:ef: 31:33:40:f2:e6:01:33:70:69:33:56:17:05:a4:58:33:19:8e: a3:69:d2:68:76:b0:a8:ef:ed:89:30:4f:78:c9:89:a2:58:cb: d2:e2:eb:3b:f5:9a:b6:11:79:9f:b7:6a:cb:69:96:80:5b:27: a0:8c:63:50:84:6e:ca:64:a6:92:8a:93:56:a1:70:99:5e:b4: de:a4:ba:ad:0b:00:21:8a:de:2e:3c:2c:b7:91:a0:08:8a:7a: f6:ad:86:22:92:47:f5:82:c2:60:78:e2:09:af:33:77:a7:d9: b5:97:29:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVVChcbJbwODRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDFjODU5Y2ItN2M1YS00ZGQ2LWI1YzUtNjliMWUwNTRmN2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBz7KYIyNcDdF4xj+omuXxDsd7vIrzIszUF8 0v6MiLal0dvcRzsmSk0JL3gjXvPLNHLYPZbc5Eu5YoUCHc6ELfn0WH3eL+k51ySP AP6o4gBLMVTGj7bUXM014ekoEb8ZbvqOEn6eAGEBC9OGkGrLcBWhd/0XckO4S76v IEDbzXxyBRgHeUEYdccwwRVxte4LNnmvKbQWDpCeOyMdOxvuwJ5lQxw4uAOtOUvD 0n8d1eotoS0FII23JmzqEi3NV2UJBKhZdAZ5cgGyUqwT+miMi4Oqp777lxMgNFyq m9eEa5Hl0WH8g+zzDTlZXYSkf2ekQ6+bGQSj5Zg0l1WVZd+0hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0LIrbGxTnW3D4J2Sqhrw6DsNPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTRmZDQ4YzItNWZkYi0z MjI1LTk1YWQtYjI3ZmNjNDZlODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABropro43a9slqSPLhSvNViUtTww0l6vmHyEPZSl+zfs4xZmibA0Pbg5 CFEt7KMmnM7mvFV3nxrO+FVGCyUnutjD0AARGBiTjDL5KG7lVe1SlB8DQK1PacPm Ij02htrPvV8hZnQJ5eigwt5NBbESLYoAWGDDtBoxMsu96kdF5YjsCf8fyqxtg22S jmAP4pdj7zEzQPLmATNwaTNWFwWkWDMZjqNp0mh2sKjv7YkwT3jJiaJYy9Li6zv1 mrYReZ+3astploBbJ6CMY1CEbspkppKKk1ahcJletN6kuq0LACGK3i48LLeRoAiK evathiKSR/WCwmB44gmvM3en2bWXKe4= -----END CERTIFICATE-----Generated at Mon Oct 26 08:44:20 2026 by rpki-client