$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8688102d-4742-369e-9939-b710065fbcd2.roa File: 8688102d-4742-369e-9939-b710065fbcd2.roa (raw, json) Hash identifier: FUTtlkHjuMcK2Ij+e0pi6fv6BJKVnE8aNmEUH3RTAf4= Subject key identifier: 65:26:37:BF:A6:B1:C1:22:78:3D:C4:E1:8B:AA:B2:C4:78:4E:79:C7 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F7BB310138679B60107BF8C40 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8688102d-4742-369e-9939-b710065fbcd2.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 32043 IP address blocks: 104.241.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:10:13:86:79:b6:01:07:bf:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=4b6bdb13-e52d-425d-a48e-d9cc5d932034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:62:4c:09:ae:78:d3:99:f4:07:1e:08:ca: 08:a2:c1:90:52:ab:1f:ba:d7:01:a3:e3:1f:71:44: d9:24:f1:a2:d3:85:55:06:bc:d7:32:0f:3e:85:f5: d4:2b:b0:18:4e:f6:0d:9f:50:ac:0b:46:67:01:d3: ee:b1:8a:19:04:f7:28:40:c9:91:3c:4c:aa:8f:c7: b4:95:9f:08:6b:44:1f:27:54:b7:bf:aa:a3:37:d7: c5:67:ab:b3:67:f4:82:29:75:63:08:91:5b:ab:9b: 47:21:ed:da:f1:64:fd:90:b5:f7:73:45:68:52:23: 76:a9:1f:8e:69:24:01:c6:0a:bb:f1:16:46:a7:22: 76:f3:c4:a5:02:8d:d2:2b:2b:8b:3e:46:32:74:5f: 5b:f5:07:e3:b8:a4:cb:9d:91:ec:bd:d5:11:80:2b: 5a:b8:7c:37:8a:c1:f5:a9:4b:39:28:f6:55:61:ac: fb:09:33:bf:6e:5d:02:81:42:da:c6:cf:af:73:09: 73:f4:9a:33:3e:1e:f2:bb:d7:91:2c:80:fc:43:26: 5f:d0:90:14:45:f1:6c:20:e3:32:d3:e4:8a:ad:0d: fc:a3:60:41:01:81:fe:d2:4c:12:7b:fc:ad:3e:a5: 23:a6:e0:95:8c:76:d1:52:9b:ad:8a:b8:95:1a:2b: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:26:37:BF:A6:B1:C1:22:78:3D:C4:E1:8B:AA:B2:C4:78:4E:79:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/8688102d-4742-369e-9939-b710065fbcd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0f:ae:8a:ae:91:9c:4f:9b:b0:c0:be:da:10:45:b5:e7:cc: a3:61:b9:83:a2:f6:29:bf:a1:3e:db:ba:23:07:01:56:8a:fa: fb:bb:d2:0d:65:7d:71:cb:cd:6f:38:21:2a:85:ea:c4:9c:9f: 76:48:5f:a1:64:fa:57:d3:a6:13:81:fc:0e:27:01:29:20:13: 17:03:a8:53:9e:ef:50:d3:4f:82:2c:90:08:1f:18:b0:cf:e6: f1:83:d8:c7:a2:17:bb:5b:a8:16:b6:47:36:e5:a9:be:2c:12: 3a:0d:95:20:d0:e5:8b:d4:3f:87:b3:00:ab:fd:43:22:1a:d2: f7:bf:bd:c4:f7:b3:f5:10:43:a6:4a:15:2c:ba:8b:75:00:4e: ea:f5:49:d6:95:4c:90:f0:82:a7:57:97:16:84:dc:e0:c3:86: ed:5f:0b:62:68:c0:44:57:e7:c5:52:55:6c:5f:66:98:24:7f: 1b:b5:af:54:ee:b0:e7:8e:6e:92:9f:4c:30:ff:0a:f6:58:9a: 0f:f7:e3:b0:ba:a4:1c:42:ff:cb:20:69:6c:89:bc:02:1c:9b: 68:98:82:7a:18:33:08:4f:a6:39:3b:27:f7:44:29:ce:70:c7: 0d:db:b2:66:9d:ca:dc:e2:fe:36:b5:83:a7:f7:2e:43:59:b9: 56:ed:0f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sxAThnm2AQe/jEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NGI2YmRiMTMtZTUyZC00MjVkLWE0OGUtZDljYzVkOTMyMDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL5iTAmueNOZ9AceCMoIosGQUqsfutcBo+Mf cUTZJPGi04VVBrzXMg8+hfXUK7AYTvYNn1CsC0ZnAdPusYoZBPcoQMmRPEyqj8e0 lZ8Ia0QfJ1S3v6qjN9fFZ6uzZ/SCKXVjCJFbq5tHIe3a8WT9kLX3c0VoUiN2qR+O aSQBxgq78RZGpyJ288SlAo3SKyuLPkYydF9b9QfjuKTLnZHsvdURgCtauHw3isH1 qUs5KPZVYaz7CTO/bl0CgULaxs+vcwlz9JozPh7yu9eRLID8QyZf0JAURfFsIOMy 0+SKrQ38o2BBAYH+0kwSe/ytPqUjpuCVjHbRUputiriVGis0pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUmN7+mscEieD3E4YuqssR4TnnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvODY4ODEwMmQtNDc0Mi0z NjllLTk5MzktYjcxMDA2NWZiY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYProqukZxPm7DAvtoQRbXnzKNhuYOi9im/oT7buiMHAVaK+vu70g1l fXHLzW84ISqF6sScn3ZIX6Fk+lfTphOB/A4nASkgExcDqFOe71DTT4IskAgfGLDP 5vGD2MeiF7tbqBa2Rzblqb4sEjoNlSDQ5YvUP4ezAKv9QyIa0ve/vcT3s/UQQ6ZK FSy6i3UATur1SdaVTJDwgqdXlxaE3ODDhu1fC2JowERX58VSVWxfZpgkfxu1r1Tu sOeObpKfTDD/CvZYmg/347C6pBxC/8sgaWyJvAIcm2iYgnoYMwhPpjk7J/dEKc5w xw3bsmadytzi/ja1g6f3LkNZuVbtDzU= -----END CERTIFICATE-----Generated at Mon Oct 19 22:16:44 2026 by rpki-client