$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ea00c92b-b7ed-3f0f-82c7-94fe4fd0b1f6.roa File: ea00c92b-b7ed-3f0f-82c7-94fe4fd0b1f6.roa (raw, json) Hash identifier: Tn9lyVrE0IDrit3OrvfV5AemWGc6vOah9pb6SRVT6/0= Subject key identifier: 87:A7:48:A5:F0:FD:D6:56:C4:CC:98:DA:1A:2B:26:1C:0E:78:D6:4F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F9072DA825A9ED8C02CD18880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ea00c92b-b7ed-3f0f-82c7-94fe4fd0b1f6.roa Signing time: Tue 20 Oct 2026 11:23:16 +0000 ROA not before: Tue 20 Oct 2026 11:23:16 +0000 ROA not after: Mon 18 Jan 2027 12:23:16 +0000 asID: 210387 IP address blocks: 104.243.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:72:da:82:5a:9e:d8:c0:2c:d1:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 11:23:16 2026 GMT Not After : Jan 18 12:23:16 2027 GMT Subject: CN=b84f0068-ddb3-4441-9020-cb7e4bf5b12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b1:9d:57:75:42:88:12:be:b9:8f:89:af:cf: d5:1a:36:a9:26:02:0d:c0:92:eb:35:56:c7:cd:8e: c3:b1:ba:27:27:ec:ab:63:cc:26:80:d5:8e:46:44: dd:1a:31:4a:6c:20:f9:5b:70:04:bc:e4:4d:cf:24: c9:c2:8b:4c:4e:eb:ff:9c:15:dc:64:6c:b7:2b:9f: ff:c3:80:e4:3d:90:12:1b:15:71:f9:04:f9:2a:66: 57:a9:09:32:ce:e2:4e:ec:16:ab:15:73:19:60:6f: e4:33:22:ed:6e:c6:9f:49:a2:f2:96:4b:51:1f:71: 91:74:51:e5:af:0f:1f:44:71:ee:38:1a:45:3d:b2: 5f:3f:7e:81:ca:41:5f:42:6c:2f:0c:d8:71:59:4b: ed:24:16:ab:2f:f0:f6:3a:d9:8d:b2:5c:35:73:dc: b0:07:52:a0:1d:cf:f5:9d:58:6e:6c:21:7d:ad:08: 39:3a:cd:4c:97:4d:95:6d:84:c5:c6:c8:42:0a:ed: 9e:5e:5a:25:93:65:89:6f:e1:5a:71:f2:7b:e9:3f: 67:bf:86:ff:c8:ef:73:92:c6:9d:f8:5d:94:b1:5a: 5a:39:2e:6a:24:46:90:f3:f6:6f:22:bd:9e:86:a5: f7:3d:e5:1d:2e:9b:a2:84:fc:8f:7f:ab:f3:45:33: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A7:48:A5:F0:FD:D6:56:C4:CC:98:DA:1A:2B:26:1C:0E:78:D6:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ea00c92b-b7ed-3f0f-82c7-94fe4fd0b1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:65:2a:5c:3c:49:2e:ed:95:1b:85:79:0f:76:68:b6:03:97: 8b:9f:2d:04:7c:7d:f4:85:ec:f1:9c:49:5d:46:29:eb:a1:f2: f2:29:d7:9f:01:07:d0:93:b6:75:c3:80:c5:a3:e2:74:91:bc: 96:d8:a8:78:25:21:43:1b:46:68:a4:84:93:b9:17:a5:8d:fc: 5d:a9:e5:57:91:5f:6b:a0:3e:9d:0a:8e:2e:cc:f2:e0:4f:a6: b7:b7:d3:d0:74:76:00:1f:62:ea:f9:26:22:f4:27:79:e3:4f: 06:41:ab:59:84:06:32:f5:fd:b1:11:42:25:cf:11:ea:ab:d0: 60:09:0a:75:01:d3:60:d1:c2:c0:4e:35:b5:3e:dc:93:17:77: 26:57:4b:b8:65:4d:e3:5a:3d:e5:83:82:4d:be:cf:88:16:c4: d8:5a:ee:15:e1:c6:08:2a:eb:4d:f9:5b:5a:6e:b8:58:ed:6f: 18:e2:fb:93:87:aa:9d:2c:b1:84:b9:79:22:16:e7:0e:28:78: 54:47:9e:30:2a:82:1a:89:34:ab:e0:8c:b5:64:44:8c:70:4c: c0:4e:15:2f:24:17:f2:e5:90:de:f0:e9:5e:40:0c:29:57:1a: 1e:a9:4a:ad:8b:d2:0d:70:f8:4c:36:be:fb:bc:3a:7a:4d:7b: 2e:59:47:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QctqCWp7YwCzRiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyMDExMjMxNloXDTI3MDExODEyMjMxNlowLzEtMCsGA1UEAxMk Yjg0ZjAwNjgtZGRiMy00NDQxLTkwMjAtY2I3ZTRiZjViMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrGdV3VCiBK+uY+Jr8/VGjapJgINwJLrNVbH zY7DsbonJ+yrY8wmgNWORkTdGjFKbCD5W3AEvORNzyTJwotMTuv/nBXcZGy3K5// w4DkPZASGxVx+QT5KmZXqQkyzuJO7BarFXMZYG/kMyLtbsafSaLylktRH3GRdFHl rw8fRHHuOBpFPbJfP36BykFfQmwvDNhxWUvtJBarL/D2OtmNslw1c9ywB1KgHc/1 nVhubCF9rQg5Os1Ml02VbYTFxshCCu2eXlolk2WJb+FacfJ76T9nv4b/yO9zksad +F2UsVpaOS5qJEaQ8/ZvIr2ehqX3PeUdLpuihPyPf6vzRTMhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIenSKXw/dZWxMyY2horJhwOeNZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZWEwMGM5MmItYjdlZC0z ZjBmLTgyYzctOTRmZTRmZDBiMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVlKlw8SS7tlRuFeQ92aLYDl4ufLQR8ffSF7PGcSV1GKeuh8vIp158B B9CTtnXDgMWj4nSRvJbYqHglIUMbRmikhJO5F6WN/F2p5VeRX2ugPp0Kji7M8uBP pre309B0dgAfYur5JiL0J3njTwZBq1mEBjL1/bERQiXPEeqr0GAJCnUB02DRwsBO NbU+3JMXdyZXS7hlTeNaPeWDgk2+z4gWxNha7hXhxggq6035W1puuFjtbxji+5OH qp0ssYS5eSIW5w4oeFRHnjAqghqJNKvgjLVkRIxwTMBOFS8kF/LlkN7w6V5ADClX Gh6pSq2L0g1w+Ew2vvu8OnpNey5ZR0M= -----END CERTIFICATE-----Generated at Sun Oct 25 07:57:50 2026 by rpki-client