$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/5e1849a1-b471-3c28-a787-49bff6af88a3.roa File: 5e1849a1-b471-3c28-a787-49bff6af88a3.roa (raw, json) Hash identifier: HBlqm1pjPyHAw1o2KiOl9EGvBgSnV2evcLWBzYFVO6A= Subject key identifier: 3C:08:53:15:F2:C9:0D:10:22:D3:52:4E:10:C4:67:46:49:FC:30:8C Certificate issuer: /CN=600a0c34-b295-4a8a-881f-3680b0957d65 Certificate serial: 010D0C9F4328584F45B66D75CDF3E1ADD0915D20 Authority key identifier: CF:1E:6D:31:0E:A9:F7:89:CF:5F:F7:84:CD:F8:40:3E:89:48:CD:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/5e1849a1-b471-3c28-a787-49bff6af88a3.roa Signing time: Wed 23 Sep 2026 16:53:48 +0000 ROA not before: Wed 23 Sep 2026 16:53:48 +0000 ROA not after: Tue 22 Dec 2026 17:53:48 +0000 asID: 395071 IP address blocks: 104.192.120.0/21 maxlen: 21 192.64.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/600a0c34-b295-4a8a-881f-3680b0957d65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/600a0c34-b295-4a8a-881f-3680b0957d65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:b6:6d:75:cd:f3:e1:ad:d0:91:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=600a0c34-b295-4a8a-881f-3680b0957d65 Validity Not Before: Sep 23 16:53:48 2026 GMT Not After : Dec 22 17:53:48 2026 GMT Subject: CN=59ff4f4c-3391-445d-9f25-a0ae39bcc666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:30:fa:24:dd:52:86:09:4a:0a:93:4f:c8: b4:9b:90:e5:bb:59:e5:d8:a6:88:30:f1:aa:e6:84: 50:0c:91:df:d9:f5:ed:15:ad:b2:eb:73:df:d9:0e: 84:48:b4:f3:e1:bc:80:66:9a:4d:c1:82:47:63:72: a0:de:56:43:74:b6:c6:12:f0:09:4b:4e:54:82:f1: 23:f1:d9:12:9c:d0:6d:1b:05:74:93:61:23:b7:62: e4:8f:51:b0:77:9e:9f:bb:e1:7c:dd:a3:66:64:cd: c7:f7:d8:26:e7:4b:6a:38:45:f9:76:b7:c4:a4:92: 3e:a7:c6:22:04:89:db:bf:22:c4:78:19:de:f0:53: 1d:98:a9:02:7f:1c:37:5e:ef:18:2f:e4:bb:7d:2e: 9f:4f:e7:e8:23:29:32:64:61:26:40:1d:47:72:bc: 64:86:2b:cb:51:f9:f9:1c:c9:0b:18:db:a9:d5:90: ea:84:12:92:f4:67:27:7f:9f:19:78:9f:3f:a4:bf: d6:6c:d3:2a:dc:2f:74:63:d9:40:d9:ed:58:a4:88: ac:f6:77:fa:93:e1:4e:23:a3:be:8f:d0:47:fc:d7: be:d8:30:d3:3c:3d:79:d4:61:b0:3f:d7:7d:e9:bd: c7:51:9f:16:16:b0:09:eb:45:7d:61:5b:7b:0e:7e: 2a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:53:15:F2:C9:0D:10:22:D3:52:4E:10:C4:67:46:49:FC:30:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/5e1849a1-b471-3c28-a787-49bff6af88a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65/600a0c34-b295-4a8a-881f-3680b0957d65.crl X509v3 Authority Key Identifier: keyid:CF:1E:6D:31:0E:A9:F7:89:CF:5F:F7:84:CD:F8:40:3E:89:48:CD:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/600a0c34-b295-4a8a-881f-3680b0957d65.cer sbgp-ipAddrBlock: critical IPv4: 104.192.120.0/21 192.64.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8f:c5:da:93:fb:6c:29:61:a2:b9:2b:9d:a1:d7:cb:d0:b9: 74:7f:73:f7:95:7f:8e:c0:45:17:f3:49:e7:54:8b:87:a0:06: 86:60:8f:ab:32:9e:ac:83:ba:44:7e:d7:9c:70:6d:75:85:45: 20:bf:46:dc:cf:99:83:9f:ef:d8:10:53:7f:23:da:82:0f:d2: f7:00:70:cd:c5:76:5b:8c:ba:f4:e8:6d:d4:e2:2f:e0:b3:98: 72:96:6f:8b:60:f0:eb:45:f2:73:4b:fd:03:e5:7a:9d:9e:ab: 40:4a:1b:70:35:1b:93:5b:a6:6a:80:ac:f1:11:fd:b2:de:aa: a9:a9:61:70:89:f0:c2:0e:e6:02:a8:19:34:33:15:b3:6d:ca: 91:12:1a:ce:2e:15:e4:1d:75:99:f5:e7:bd:63:36:67:2a:97: a5:fa:70:90:17:48:f1:c2:94:84:99:28:69:f5:ee:96:21:0e: b2:b5:f7:c3:a9:f2:e1:55:58:3a:f3:39:95:41:9c:c8:43:df: 83:de:9c:b3:22:18:0f:d2:64:b9:9a:77:53:a4:8a:53:3a:b4: 30:25:5f:51:a9:66:b7:a6:00:1d:63:a0:3a:e0:86:54:ac:c2: ee:79:6f:51:a2:8f:e5:09:ab:86:d7:df:42:da:5c:c3:b0:96: 92:3a:54:f2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Ftm11zfPhrdCRXSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwYTBjMzQtYjI5NS00YThhLTg4MWYtMzY4MGIwOTU3 ZDY1MB4XDTI2MDkyMzE2NTM0OFoXDTI2MTIyMjE3NTM0OFowLzEtMCsGA1UEAxMk NTlmZjRmNGMtMzM5MS00NDVkLTlmMjUtYTBhZTM5YmNjNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreEw+iTdUoYJSgqTT8i0m5Dlu1nl2KaIMPGq 5oRQDJHf2fXtFa2y63Pf2Q6ESLTz4byAZppNwYJHY3Kg3lZDdLbGEvAJS05UgvEj 8dkSnNBtGwV0k2Ejt2Lkj1Gwd56fu+F83aNmZM3H99gm50tqOEX5drfEpJI+p8Yi BInbvyLEeBne8FMdmKkCfxw3Xu8YL+S7fS6fT+foIykyZGEmQB1HcrxkhivLUfn5 HMkLGNup1ZDqhBKS9Gcnf58ZeJ8/pL/WbNMq3C90Y9lA2e1YpIis9nf6k+FOI6O+ j9BH/Ne+2DDTPD151GGwP9d96b3HUZ8WFrAJ60V9YVt7Dn4qTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDwIUxXyyQ0QItNSThDEZ0ZJ/DCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82MDBh MGMzNC1iMjk1LTRhOGEtODgxZi0zNjgwYjA5NTdkNjUvNWUxODQ5YTEtYjQ3MS0z YzI4LWE3ODctNDliZmY2YWY4OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNjAwYTBjMzQtYjI5NS00YThhLTg4 MWYtMzY4MGIwOTU3ZDY1LzYwMGEwYzM0LWIyOTUtNGE4YS04ODFmLTM2ODBiMDk1 N2Q2NS5jcmwwHwYDVR0jBBgwFoAUzx5tMQ6p94nPX/eEzfhAPolIzdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS82MDBhMGMzNC1iMjk1LTRhOGEtODgxZi0zNjgw YjA5NTdkNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDaMB4AwQE wECAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFGPxdqT+2wpYaK5K52h18vQuXR/c/eVf47ARRfzSedUi4eg BoZgj6synqyDukR+15xwbXWFRSC/RtzPmYOf79gQU38j2oIP0vcAcM3FdluMuvTo bdTiL+CzmHKWb4tg8OtF8nNL/QPlep2eq0BKG3A1G5NbpmqArPER/bLeqqmpYXCJ 8MIO5gKoGTQzFbNtypESGs4uFeQddZn1571jNmcql6X6cJAXSPHClISZKGn17pYh DrK198Op8uFVWDrzOZVBnMhD34PenLMiGA/SZLmad1OkilM6tDAlX1GpZremAB1j oDrghlSswu55b1Gij+UJq4bX30LaXMOwlpI6VPI= -----END CERTIFICATE-----Generated at Sun Nov 1 14:37:43 2026 by rpki-client