$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa File: bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa (raw, json) Hash identifier: sJ6qow4pIf0sLcmEn9HOO/hszISp4qNoYFJHtQJHpx8= Subject key identifier: 14:64:33:DC:ED:E4:71:15:CE:0C:A6:F1:85:3B:E9:CF:46:80:01:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE38C9758F1890F0EA66C21E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 35994 IP address blocks: 104.120.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:97:58:f1:89:0f:0e:a6:6c:21:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=823a391f-ab90-448e-8a6b-6c701a06fb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:6b:05:4d:7f:0a:8d:4d:f2:d0:f8:e4:2e: 19:88:cc:67:31:5c:4a:1f:f5:bd:72:bb:87:d9:76: ac:78:5b:47:d4:b2:a5:bc:35:63:25:6d:45:1a:2f: 25:af:8d:9e:6a:98:8f:2c:68:92:c5:0e:d6:cb:22: 01:ab:53:2d:65:cc:89:43:7b:e7:77:4c:89:48:a2: 5e:fb:c6:79:f1:2e:05:58:eb:25:75:78:23:b5:d1: c6:83:b8:83:da:9a:98:8f:c5:1e:7d:55:f1:54:bb: 71:dd:35:d4:bc:1e:17:a0:7d:c4:3b:37:44:92:4a: 9f:1a:be:cf:8a:95:f9:09:3f:88:c6:84:83:5b:1b: 78:98:58:84:40:b9:23:43:35:f6:f1:10:bb:7b:96: 90:e3:26:95:5a:c3:b5:56:38:2f:c2:3b:e9:19:9b: cc:d3:d7:5a:6a:52:e3:bd:67:cd:e4:2c:9c:81:da: da:a5:0f:e0:e6:f8:7b:a9:da:17:e6:61:c9:c5:54: c3:ab:fc:12:62:14:d4:fc:1a:0c:6e:db:ea:f5:9b: 4d:ce:71:2e:7b:76:7d:cd:c3:8f:52:c9:88:e7:86: 59:6b:aa:a8:48:06:05:c1:3c:5f:e4:1e:dd:ed:fe: 10:b1:95:ac:8c:2d:a0:1b:7a:36:55:f4:1c:da:59: 38:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:64:33:DC:ED:E4:71:15:CE:0C:A6:F1:85:3B:E9:CF:46:80:01:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:83:68:7f:1b:19:65:c6:a9:c8:27:4c:e9:b3:26:9c:7e:81: 52:1b:fa:02:24:22:6d:c4:78:40:c8:4b:b1:20:94:d1:71:c6: 7f:a7:22:51:cf:e4:97:c2:bc:59:1b:69:c3:54:0a:3f:34:d3: bf:72:f6:38:b2:39:33:79:87:94:82:15:27:a7:fe:d8:b4:40: e0:8f:23:1e:5c:e4:65:6d:a0:68:be:9f:6f:3a:5f:bc:0d:60: 01:44:3d:04:9b:73:a9:ba:bd:a6:08:02:ca:62:de:46:c6:77: f8:56:7b:cf:20:a0:bb:49:b0:51:b2:f9:b4:66:00:0b:1e:ac: 93:08:55:a7:5d:af:c7:e8:91:f4:fd:3b:39:b7:f3:59:fb:6b: 69:5f:8e:2b:81:ea:cf:15:cc:c9:57:fb:de:1e:52:dc:48:00: c4:8c:3a:7d:82:ae:cf:68:10:71:b5:87:48:3b:9e:6d:85:b5: 02:34:73:ed:60:9b:f0:2a:13:45:f3:05:aa:b0:73:c7:81:94: c4:2b:7f:70:da:a0:50:cd:48:bb:b4:53:13:dd:7a:ab:ed:e2: c1:2a:7c:5e:76:6b:81:4a:8c:e0:12:3f:9e:b8:a9:00:9f:24: 9e:7a:b4:83:f3:f8:a2:95:0b:bd:50:54:d1:ad:30:a3:b9:40: df:e6:67:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJdY8YkPDqZsIeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk ODIzYTM5MWYtYWI5MC00NDhlLThhNmItNmM3MDFhMDZmYjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPBrBU1/Co1N8tD45C4ZiMxnMVxKH/W9cruH 2XaseFtH1LKlvDVjJW1FGi8lr42eapiPLGiSxQ7WyyIBq1MtZcyJQ3vnd0yJSKJe +8Z58S4FWOsldXgjtdHGg7iD2pqYj8UefVXxVLtx3TXUvB4XoH3EOzdEkkqfGr7P ipX5CT+IxoSDWxt4mFiEQLkjQzX28RC7e5aQ4yaVWsO1VjgvwjvpGZvM09daalLj vWfN5CycgdrapQ/g5vh7qdoX5mHJxVTDq/wSYhTU/BoMbtvq9ZtNznEue3Z9zcOP UsmI54ZZa6qoSAYFwTxf5B7d7f4QsZWsjC2gG3o2VfQc2lk4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRkM9zt5HEVzgym8YU76c9GgAGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNhOGNjYWItNGY3My0z ZGQzLWFiYzEtZDhhMzc4MzY3MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiDaH8bGWXGqcgnTOmzJpx+gVIb+gIkIm3EeEDIS7EglNFxxn+nIlHP 5JfCvFkbacNUCj80079y9jiyOTN5h5SCFSen/ti0QOCPIx5c5GVtoGi+n286X7wN YAFEPQSbc6m6vaYIAspi3kbGd/hWe88goLtJsFGy+bRmAAserJMIVaddr8fokfT9 Ozm381n7a2lfjiuB6s8VzMlX+94eUtxIAMSMOn2Crs9oEHG1h0g7nm2FtQI0c+1g m/AqE0XzBaqwc8eBlMQrf3DaoFDNSLu0UxPdeqvt4sEqfF52a4FKjOASP564qQCf JJ56tIPz+KKVC71QVNGtMKO5QN/mZx4= -----END CERTIFICATE-----Generated at Sat Sep 5 04:32:42 2026 by rpki-client