$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/4216d54c-7ed1-3bf6-ae9d-255b4d95ad11.roa File: 4216d54c-7ed1-3bf6-ae9d-255b4d95ad11.roa (raw, json) Hash identifier: f1nF0QLREDetR1ElBLvdYaMJmUxN6hT6PLkbdi5G9Ts= Subject key identifier: 4C:2C:50:FE:21:A7:0A:03:1E:B0:26:14:0D:5D:1F:02:1F:67:ED:3F Certificate issuer: /CN=069a90ae-715f-499e-a4f2-06581ebf1247 Certificate serial: 010D0C9F4328584F9F5C3F21BD281297D2958900 Authority key identifier: E4:23:D8:E4:F2:E0:CD:93:BF:B0:52:C1:13:C3:99:5F:E5:C1:77:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/4216d54c-7ed1-3bf6-ae9d-255b4d95ad11.roa Signing time: Sun 25 Oct 2026 19:34:51 +0000 ROA not before: Sun 25 Oct 2026 19:34:51 +0000 ROA not after: Sat 23 Jan 2027 20:34:51 +0000 asID: 63084 IP address blocks: 104.153.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:5c:3f:21:bd:28:12:97:d2:95:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069a90ae-715f-499e-a4f2-06581ebf1247 Validity Not Before: Oct 25 19:34:51 2026 GMT Not After : Jan 23 20:34:51 2027 GMT Subject: CN=5162f17b-2eef-48b6-81cd-7a4f390b3912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:6d:78:b7:12:1e:53:3c:05:4c:52:8b:6c: 5b:b0:44:76:30:17:a1:dc:84:f7:42:83:7e:b2:e2: 1f:92:39:f5:ef:09:4e:5d:1f:74:3c:03:0f:e0:65: 30:12:ce:1d:ea:dc:e5:0c:9c:52:96:98:60:b6:9b: 02:ae:9b:81:44:f0:39:f4:e5:8c:a2:31:2e:d6:13: 81:0a:4b:83:b3:5e:ba:d5:6e:44:43:b2:f2:a1:67: 4a:2b:8d:21:44:f0:08:3c:77:82:14:5d:15:78:17: db:da:83:e9:9f:a4:93:be:6c:89:f4:20:1a:0c:b9: 9d:d7:52:e3:e3:50:fb:1e:05:c6:0a:9e:1b:96:2e: 2a:95:ef:b6:a1:57:70:f6:30:fb:5b:95:8a:b0:4e: a1:db:32:8b:fb:04:98:26:b0:68:42:1b:13:f1:e7: ae:1b:87:61:8b:68:ae:c2:af:a1:45:48:36:b1:d8: c4:25:f8:58:2f:bb:ca:ac:00:03:4c:3e:88:24:d0: c0:88:8d:0e:b1:cd:81:60:18:24:74:11:85:ba:95: a1:d6:34:fc:b5:f7:27:0b:47:c9:94:c0:63:e0:7f: 32:4d:75:f1:04:90:e1:ca:46:ae:c4:c0:bd:58:df: 16:be:42:29:23:73:7a:3f:22:c9:30:bd:c0:cf:3b: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2C:50:FE:21:A7:0A:03:1E:B0:26:14:0D:5D:1F:02:1F:67:ED:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/4216d54c-7ed1-3bf6-ae9d-255b4d95ad11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.crl X509v3 Authority Key Identifier: keyid:E4:23:D8:E4:F2:E0:CD:93:BF:B0:52:C1:13:C3:99:5F:E5:C1:77:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer sbgp-ipAddrBlock: critical IPv4: 104.153.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f3:19:07:19:69:ea:85:9b:4e:28:61:1f:14:79:2a:45:ed: 43:b4:4a:1f:27:4e:84:a5:7e:29:97:98:fa:89:c8:94:4b:ed: 86:23:1b:a1:3c:3c:e0:05:8f:2a:6b:e7:b6:f8:30:18:09:e7: a5:de:95:2d:b0:16:6f:7d:06:a6:a0:94:db:2b:30:7a:03:74: 94:78:73:16:75:61:1c:4e:4f:fd:f0:b7:8f:1f:70:42:45:95: f6:97:bc:d5:05:fe:c4:8e:b8:b4:9a:96:06:c5:09:43:18:1d: 60:70:cc:9c:ef:d8:a8:45:06:0d:5e:67:7f:a7:70:36:24:b0: c4:1c:d2:b2:36:7e:5c:be:ce:6a:1b:8b:fd:2c:90:a1:46:ac: 4a:1f:79:7a:29:ac:53:a6:f8:05:8a:d0:d6:4c:e2:a9:7b:e7: 32:4b:96:78:56:1f:39:c3:ec:14:f9:2f:5c:4e:a9:7c:d7:2c: a7:34:da:1c:63:d6:08:f3:76:fa:6b:76:95:f7:dc:15:ea:4d: 26:67:c1:6e:af:14:e1:3d:a0:32:dc:59:37:ae:04:4c:16:de: bb:e5:44:8c:7e:31:2d:f7:6b:2b:bc:5a:2a:82:e6:8a:d3:cf: cb:02:48:4b:2d:5b:1c:e5:38:50:be:b1:04:4b:dd:8a:a8:dc: fd:13:28:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+fXD8hvSgSl9KViQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY5YTkwYWUtNzE1Zi00OTllLWE0ZjItMDY1ODFlYmYx MjQ3MB4XDTI2MTAyNTE5MzQ1MVoXDTI3MDEyMzIwMzQ1MVowLzEtMCsGA1UEAxMk NTE2MmYxN2ItMmVlZi00OGI2LTgxY2QtN2E0ZjM5MGIzOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9BteLcSHlM8BUxSi2xbsER2MBeh3IT3QoN+ suIfkjn17wlOXR90PAMP4GUwEs4d6tzlDJxSlphgtpsCrpuBRPA59OWMojEu1hOB CkuDs1661W5EQ7LyoWdKK40hRPAIPHeCFF0VeBfb2oPpn6STvmyJ9CAaDLmd11Lj 41D7HgXGCp4bli4qle+2oVdw9jD7W5WKsE6h2zKL+wSYJrBoQhsT8eeuG4dhi2iu wq+hRUg2sdjEJfhYL7vKrAADTD6IJNDAiI0Osc2BYBgkdBGFupWh1jT8tfcnC0fJ lMBj4H8yTXXxBJDhykauxMC9WN8WvkIpI3N6PyLJML3AzzuzDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwsUP4hpwoDHrAmFA1dHwIfZ+0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wNjlh OTBhZS03MTVmLTQ5OWUtYTRmMi0wNjU4MWViZjEyNDcvNDIxNmQ1NGMtN2VkMS0z YmY2LWFlOWQtMjU1YjRkOTVhZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMDY5YTkwYWUtNzE1Zi00OTllLWE0 ZjItMDY1ODFlYmYxMjQ3LzA2OWE5MGFlLTcxNWYtNDk5ZS1hNGYyLTA2NTgxZWJm MTI0Ny5jcmwwHwYDVR0jBBgwFoAU5CPY5PLgzZO/sFLBE8OZX+XBd+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8wNjlhOTBhZS03MTVmLTQ5OWUtYTRmMi0wNjU4 MWViZjEyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJlKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7zGQcZaeqFm04oYR8UeSpF7UO0Sh8nToSlfimXmPqJyJRL7YYjG6E8 POAFjypr57b4MBgJ56XelS2wFm99BqaglNsrMHoDdJR4cxZ1YRxOT/3wt48fcEJF lfaXvNUF/sSOuLSalgbFCUMYHWBwzJzv2KhFBg1eZ3+ncDYksMQc0rI2fly+zmob i/0skKFGrEofeXoprFOm+AWK0NZM4ql75zJLlnhWHznD7BT5L1xOqXzXLKc02hxj 1gjzdvprdpX33BXqTSZnwW6vFOE9oDLcWTeuBEwW3rvlRIx+MS33ayu8WiqC5orT z8sCSEstWxzlOFC+sQRL3Yqo3P0TKDs= -----END CERTIFICATE-----Generated at Sun Nov 1 16:35:54 2026 by rpki-client