$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa File: caafa691-29e7-3acd-9bec-67691a876be2.roa (raw, json) Hash identifier: If5K0iMk5ly2aqbiTzvugosuZzgT/dRL7YqsBT9MbC8= Subject key identifier: E6:CF:81:96:20:2E:F3:C1:6C:13:C3:EF:7E:55:CE:6B:45:60:10:3B Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584F31B7C1D89344B5ABB820E380 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 23470 IP address blocks: 104.128.72.0/24 maxlen: 24 104.128.73.0/24 maxlen: 24 104.128.74.0/24 maxlen: 24 104.128.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c1:d8:93:44:b5:ab:b8:20:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=6dac2c67-765a-4a22-bd91-07d193779036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:68:b7:f5:fe:1d:5e:65:42:d6:62:79:2e: 52:5c:c4:bb:d0:c8:62:f7:b3:bd:4f:49:26:f1:62: 2a:af:42:0b:22:4e:64:1b:36:f6:03:a1:03:b0:98: b9:86:79:16:0d:cd:68:19:0d:94:f7:40:7a:b3:ec: 7c:4a:46:be:bf:0f:9c:f4:c9:16:a9:ba:bc:ad:de: 53:89:06:93:48:15:b0:a0:5f:d1:b8:62:d7:ae:2d: e0:99:39:d6:f9:4b:9f:8c:27:a6:78:52:cb:f2:96: 69:fb:91:ab:d3:38:58:f5:60:c1:c0:39:60:ca:22: a2:31:2c:37:50:c0:bb:e4:81:aa:c9:bb:bb:a7:94: 68:2b:55:d0:bc:86:46:a0:a7:c1:6f:d5:0b:3e:a0: 71:fc:57:e7:6b:65:a9:50:2c:39:78:8b:6e:a6:14: 21:33:1d:a9:fe:92:2c:c6:f8:f5:ba:7c:f6:3f:40: 34:cf:a8:92:e3:18:42:3c:95:2a:6e:a1:c0:da:33: 42:78:4c:22:25:5c:90:b6:f3:2d:68:46:7b:7e:c4: 9e:ad:57:89:fb:3f:89:62:94:b9:6b:f3:f3:b4:bb: 8b:61:8e:02:8c:20:c5:bb:ef:7d:50:5d:b2:ba:70: 75:2f:44:d9:1e:5f:cd:44:f1:6d:d0:ad:3d:48:66: 14:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CF:81:96:20:2E:F3:C1:6C:13:C3:EF:7E:55:CE:6B:45:60:10:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/caafa691-29e7-3acd-9bec-67691a876be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 104.128.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:be:cd:c0:b0:1d:05:f4:50:f4:8a:99:46:3c:5e:c2:cf:83: b0:27:ca:c9:f3:2a:e0:54:a9:cf:11:3d:8b:1a:45:c7:83:37: 45:62:07:37:c9:50:e0:02:69:85:b5:bf:a2:64:c3:7b:71:28: 49:00:16:31:ff:d6:24:68:34:82:a3:c2:4f:61:c4:3a:c8:bc: 0f:4b:19:c4:be:d0:ef:37:e9:8f:4e:91:b2:a7:3b:0c:38:7f: 62:99:32:b4:ab:91:75:f5:d2:2d:07:51:8a:36:86:d1:9b:e6: 43:0c:77:2a:9d:28:e6:90:2d:23:6e:f0:d1:a8:82:b3:40:df: 81:79:6b:ef:ed:23:17:5a:fe:88:12:ea:17:03:0c:0e:89:3b: fd:7b:4e:5b:65:ef:de:f6:13:79:a4:13:68:12:32:63:ed:6c: 00:f5:19:75:5a:c9:46:88:4b:35:f9:7d:67:0c:f1:23:76:87: b2:f0:23:7f:60:49:4a:be:d0:49:65:6e:a5:62:14:8b:dd:94: d8:97:4d:14:6a:7c:a6:fb:53:dd:d1:07:92:4f:e6:81:6c:5c: f5:ef:6e:31:2f:e5:88:29:19:2d:bd:98:26:a9:1b:fd:97:e0: b9:08:4b:94:27:b1:c6:d0:f1:07:dd:db:91:e9:5f:63:58:58: 86:22:0d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8HYk0S1q7gg44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NmRhYzJjNjctNzY1YS00YTIyLWJkOTEtMDdkMTkzNzc5MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Zot/X+HV5lQtZieS5SXMS70Mhi97O9T0km 8WIqr0ILIk5kGzb2A6EDsJi5hnkWDc1oGQ2U90B6s+x8Ska+vw+c9MkWqbq8rd5T iQaTSBWwoF/RuGLXri3gmTnW+UufjCemeFLL8pZp+5Gr0zhY9WDBwDlgyiKiMSw3 UMC75IGqybu7p5RoK1XQvIZGoKfBb9ULPqBx/Ffna2WpUCw5eItuphQhMx2p/pIs xvj1unz2P0A0z6iS4xhCPJUqbqHA2jNCeEwiJVyQtvMtaEZ7fsSerVeJ+z+JYpS5 a/PztLuLYY4CjCDFu+99UF2yunB1L0TZHl/NRPFt0K09SGYUyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObPgZYgLvPBbBPD735VzmtFYBA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvY2FhZmE2OTEtMjllNy0z YWNkLTliZWMtNjc2OTFhODc2YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK+zcCwHQX0UPSKmUY8XsLPg7AnysnzKuBUqc8RPYsaRceDN0ViBzfJ UOACaYW1v6Jkw3txKEkAFjH/1iRoNIKjwk9hxDrIvA9LGcS+0O836Y9OkbKnOww4 f2KZMrSrkXX10i0HUYo2htGb5kMMdyqdKOaQLSNu8NGogrNA34F5a+/tIxda/ogS 6hcDDA6JO/17Tltl7972E3mkE2gSMmPtbAD1GXVayUaISzX5fWcM8SN2h7LwI39g SUq+0EllbqViFIvdlNiXTRRqfKb7U93RB5JP5oFsXPXvbjEv5YgpGS29mCapG/2X 4LkIS5QnscbQ8Qfd25HpX2NYWIYiDfQ= -----END CERTIFICATE-----Generated at Thu Oct 8 13:30:15 2026 by rpki-client