$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/ecfb1c07-e465-3e37-971c-9032e523277a.roa File: ecfb1c07-e465-3e37-971c-9032e523277a.roa (raw, json) Hash identifier: mip1UATC66DZe7NfDfDVVYUWnfUwoLGl9IeJJmcXHZU= Subject key identifier: 48:E7:9D:0A:7F:33:8C:71:A4:C8:B5:E9:83:80:71:AC:72:E1:D2:DC Certificate issuer: /CN=069a90ae-715f-499e-a4f2-06581ebf1247 Certificate serial: 010D0C9F4328584F9F8CACE362E4EA5B3D4BA720 Authority key identifier: E4:23:D8:E4:F2:E0:CD:93:BF:B0:52:C1:13:C3:99:5F:E5:C1:77:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/ecfb1c07-e465-3e37-971c-9032e523277a.roa Signing time: Sun 25 Oct 2026 21:12:25 +0000 ROA not before: Sun 25 Oct 2026 21:12:25 +0000 ROA not after: Sat 23 Jan 2027 22:12:25 +0000 asID: 26262 IP address blocks: 104.153.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:8c:ac:e3:62:e4:ea:5b:3d:4b:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069a90ae-715f-499e-a4f2-06581ebf1247 Validity Not Before: Oct 25 21:12:25 2026 GMT Not After : Jan 23 22:12:25 2027 GMT Subject: CN=26216453-f335-4618-b229-5506a15e96d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:1a:79:62:d2:97:0e:cd:33:5d:12:c3:97: 47:11:c6:0c:c3:b0:c6:f0:30:14:8d:2f:24:5a:4c: d6:0d:96:42:9e:20:a5:46:b2:da:b1:d4:ee:82:6d: b6:25:46:db:0a:c6:88:49:f6:f8:0e:05:37:74:16: 61:a5:38:27:30:f0:d4:30:3d:70:e5:34:d8:d5:c5: 30:4c:78:c5:cb:1b:ce:ab:57:1f:77:35:c4:11:46: e6:08:a2:99:b9:fc:50:be:e4:8e:f2:c7:42:a8:48: a0:45:b7:cd:4b:9e:81:79:69:11:39:49:57:a0:74: d2:46:9d:dd:c2:48:30:2e:1d:4c:61:08:bd:f2:6e: eb:27:07:97:b9:ad:3e:f6:51:3b:50:41:f1:09:2a: f5:26:a9:1f:f8:6b:f6:24:3a:31:52:02:69:13:aa: 5d:65:c3:c9:f1:0b:ec:3c:83:48:0f:a7:b4:9b:88: a5:6c:6c:b4:44:76:7e:0c:81:11:73:0b:e4:9a:56: 21:5a:7a:e3:65:83:81:c5:1d:d3:68:51:5c:0b:15: b6:68:28:7f:ee:72:4f:3f:df:98:6e:01:8f:09:11: c8:64:be:46:57:a8:94:38:9b:ed:82:ea:5b:c7:be: 48:97:5d:dc:cd:e6:d7:73:1e:bd:94:60:18:d1:ce: db:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:9D:0A:7F:33:8C:71:A4:C8:B5:E9:83:80:71:AC:72:E1:D2:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/ecfb1c07-e465-3e37-971c-9032e523277a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247/069a90ae-715f-499e-a4f2-06581ebf1247.crl X509v3 Authority Key Identifier: keyid:E4:23:D8:E4:F2:E0:CD:93:BF:B0:52:C1:13:C3:99:5F:E5:C1:77:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/069a90ae-715f-499e-a4f2-06581ebf1247.cer sbgp-ipAddrBlock: critical IPv4: 104.153.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f0:94:75:8c:fa:55:25:fa:94:d6:de:56:76:99:c3:e8:c6: 8f:85:75:e7:b0:0b:49:fe:bd:93:39:b7:24:45:ab:37:0f:95: 00:ba:ba:78:35:c1:96:6d:e0:cd:35:5e:4f:c6:c2:53:86:02: 08:6c:4f:16:e8:91:c3:02:c5:62:ba:79:ef:9f:20:a0:41:dc: 4e:57:e3:14:9c:10:c0:9f:48:59:38:ff:b7:5d:62:59:d5:ec: ac:34:0c:5b:37:d4:53:83:e7:59:c8:30:4e:45:ba:c6:51:74: 00:e5:5f:05:07:64:5a:a1:15:68:0d:47:3b:79:02:b3:e3:ab: eb:56:e0:2c:f1:42:a1:a9:4f:93:7f:6e:a1:69:fd:86:dc:41: 06:19:9f:99:f8:8f:93:4c:ef:55:50:35:aa:cc:02:34:36:77: 35:42:88:02:02:8b:bb:9d:56:7c:e5:46:50:17:11:67:c0:e5: aa:45:59:43:46:43:9e:cb:c9:a1:e9:10:aa:13:2c:ba:f7:b9: 52:4c:f7:3a:25:0a:28:46:11:71:1d:db:45:50:3d:bf:21:ed: 5a:75:9e:f5:94:6b:5e:fe:03:21:ba:b3:98:a2:17:13:aa:08: 59:09:58:b8:60:ba:81:d2:97:6a:3a:db:35:58:a4:38:8e:42: cc:1d:ac:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+fjKzjYuTqWz1LpyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY5YTkwYWUtNzE1Zi00OTllLWE0ZjItMDY1ODFlYmYx MjQ3MB4XDTI2MTAyNTIxMTIyNVoXDTI3MDEyMzIyMTIyNVowLzEtMCsGA1UEAxMk MjYyMTY0NTMtZjMzNS00NjE4LWIyMjktNTUwNmExNWU5NmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSgaeWLSlw7NM10Sw5dHEcYMw7DG8DAUjS8k WkzWDZZCniClRrLasdTugm22JUbbCsaISfb4DgU3dBZhpTgnMPDUMD1w5TTY1cUw THjFyxvOq1cfdzXEEUbmCKKZufxQvuSO8sdCqEigRbfNS56BeWkROUlXoHTSRp3d wkgwLh1MYQi98m7rJweXua0+9lE7UEHxCSr1Jqkf+Gv2JDoxUgJpE6pdZcPJ8Qvs PINID6e0m4ilbGy0RHZ+DIERcwvkmlYhWnrjZYOBxR3TaFFcCxW2aCh/7nJPP9+Y bgGPCRHIZL5GV6iUOJvtgupbx75Il13czebXcx69lGAY0c7bMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjnnQp/M4xxpMi16YOAcaxy4dLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wNjlh OTBhZS03MTVmLTQ5OWUtYTRmMi0wNjU4MWViZjEyNDcvZWNmYjFjMDctZTQ2NS0z ZTM3LTk3MWMtOTAzMmU1MjMyNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMDY5YTkwYWUtNzE1Zi00OTllLWE0 ZjItMDY1ODFlYmYxMjQ3LzA2OWE5MGFlLTcxNWYtNDk5ZS1hNGYyLTA2NTgxZWJm MTI0Ny5jcmwwHwYDVR0jBBgwFoAU5CPY5PLgzZO/sFLBE8OZX+XBd+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8wNjlhOTBhZS03MTVmLTQ5OWUtYTRmMi0wNjU4 MWViZjEyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJlLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfwlHWM+lUl+pTW3lZ2mcPoxo+FdeewC0n+vZM5tyRFqzcPlQC6ung1 wZZt4M01Xk/GwlOGAghsTxbokcMCxWK6ee+fIKBB3E5X4xScEMCfSFk4/7ddYlnV 7Kw0DFs31FOD51nIME5FusZRdADlXwUHZFqhFWgNRzt5ArPjq+tW4CzxQqGpT5N/ bqFp/YbcQQYZn5n4j5NM71VQNarMAjQ2dzVCiAICi7udVnzlRlAXEWfA5apFWUNG Q57LyaHpEKoTLLr3uVJM9zolCihGEXEd20VQPb8h7Vp1nvWUa17+AyG6s5iiFxOq CFkJWLhguoHSl2o62zVYpDiOQswdrEc= -----END CERTIFICATE-----Generated at Sun Nov 1 14:44:46 2026 by rpki-client