$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa File: c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa (raw, json) Hash identifier: 45+63nmZ1ngvsnWQiJNmtj1chuXiTJlwk0qHMREkzAc= Subject key identifier: B7:F9:BF:17:03:36:EE:B8:13:41:89:A7:27:C6:E6:59:9C:D5:7E:02 Certificate issuer: /CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e Certificate serial: 010D0C9F4328584F86DDB2D4BDE15167269C8570 Authority key identifier: 40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 396982 IP address blocks: 104.218.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:b2:d4:bd:e1:51:67:26:9c:85:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4cfaa95-c33a-49a6-b4ad-44b93425df6e Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=ef59487e-97b2-4fc1-b013-5fe7e24406f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:74:10:d2:a3:af:a3:5b:1d:64:60:d6:bb: c3:7a:a5:ac:d8:6b:22:20:5b:37:47:a9:52:52:be: cd:fc:aa:37:83:df:9e:5d:92:ec:aa:fd:17:bc:d6: 92:3b:10:a3:46:77:fe:40:21:05:05:70:16:07:cf: 40:6a:9d:a4:6f:a3:50:a9:d0:0e:8d:76:57:b3:d0: 22:c5:83:41:69:80:ce:a0:93:1e:52:6e:af:26:49: d2:2c:58:ad:c4:85:3c:7e:06:eb:23:39:f6:01:0c: 45:e6:b1:53:93:af:b8:cd:f0:4e:0a:0c:e6:77:3b: cd:3e:61:8d:ef:a4:15:8a:92:99:2d:6e:1a:99:28: 1b:a2:03:af:05:2d:d9:dc:da:68:93:1b:b9:ea:e1: 76:f6:cf:b7:96:36:98:99:c3:40:52:f7:42:2e:12: fe:67:71:a5:52:0a:51:6d:a8:a4:01:1c:94:85:aa: 59:29:01:ab:46:35:f9:85:1e:56:40:25:4e:b3:67: 4b:3a:e9:1a:31:43:42:5a:e0:74:0b:d9:6d:fa:fa: 15:de:82:c5:59:8c:67:fd:5a:ec:9e:aa:3a:61:0c: de:81:80:f9:3c:a5:aa:14:8d:29:86:a3:7d:54:f4: 09:d4:c3:3d:00:2e:12:63:b6:53:ed:4d:f7:8c:e3: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F9:BF:17:03:36:EE:B8:13:41:89:A7:27:C6:E6:59:9C:D5:7E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/c73fd9f5-a2d4-3eb7-bebe-002d6774e454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.crl X509v3 Authority Key Identifier: keyid:40:D7:23:63:AC:57:1F:B4:63:EB:F7:B9:62:DB:57:72:5D:57:A3:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a4cfaa95-c33a-49a6-b4ad-44b93425df6e.cer sbgp-ipAddrBlock: critical IPv4: 104.218.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ce:df:63:9c:bb:28:c3:bc:a6:c5:98:0d:10:e1:80:83:d7: 0d:ee:a5:4f:3e:3e:6e:7f:2d:e5:a8:38:cd:28:27:42:b0:73: 5d:68:4d:8b:bc:12:02:9f:82:a0:5f:66:93:31:2e:78:ef:0c: 62:e7:e1:3d:52:84:9f:1e:4f:b7:37:7f:96:a4:76:d3:25:90: 37:37:a5:4b:32:ce:2b:6c:d1:ca:2b:af:87:60:d7:d1:26:3e: 42:e0:54:7f:cd:ad:81:31:64:27:d1:6f:0c:6e:6e:1b:f0:65: 23:68:4c:73:21:d4:25:68:1c:5b:92:a5:b1:f5:76:5c:6f:a7: d0:5e:ed:6b:b8:77:dd:e1:aa:0f:61:02:4a:bb:79:25:7c:18: d8:6f:a2:91:c7:65:81:f1:9c:00:8d:b4:96:59:e1:52:34:7b: 78:89:f5:b2:40:d8:7a:55:bf:a1:97:28:ce:81:d6:7f:d9:1c: db:eb:8f:b8:ad:07:7a:3e:c2:54:19:8b:e9:c8:9e:c6:b9:f1: 00:20:31:0f:a8:24:82:a9:94:fa:7d:74:b2:e1:11:1c:94:03: 08:f1:1b:4c:10:3c:4f:c6:b0:d1:ff:9d:ba:45:1a:eb:57:b6: f4:88:1b:95:6d:8d:11:dc:ec:bf:23:25:28:a5:6c:3d:69:2a: 6a:f1:91:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3bLUveFRZyachXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRjZmFhOTUtYzMzYS00OWE2LWI0YWQtNDRiOTM0MjVk ZjZlMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWY1OTQ4N2UtOTdiMi00ZmMxLWIwMTMtNWZlN2UyNDQwNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjip0ENKjr6NbHWRg1rvDeqWs2GsiIFs3R6lS Ur7N/Ko3g9+eXZLsqv0XvNaSOxCjRnf+QCEFBXAWB89Aap2kb6NQqdAOjXZXs9Ai xYNBaYDOoJMeUm6vJknSLFitxIU8fgbrIzn2AQxF5rFTk6+4zfBOCgzmdzvNPmGN 76QVipKZLW4amSgbogOvBS3Z3Npokxu56uF29s+3ljaYmcNAUvdCLhL+Z3GlUgpR baikARyUhapZKQGrRjX5hR5WQCVOs2dLOukaMUNCWuB0C9lt+voV3oLFWYxn/Vrs nqo6YQzegYD5PKWqFI0phqN9VPQJ1MM9AC4SY7ZT7U33jOPqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf5vxcDNu64E0GJpyfG5lmc1X4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hNGNm YWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5MzQyNWRmNmUvYzczZmQ5ZjUtYTJkNC0z ZWI3LWJlYmUtMDAyZDY3NzRlNDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTRjZmFhOTUtYzMzYS00OWE2LWI0 YWQtNDRiOTM0MjVkZjZlL2E0Y2ZhYTk1LWMzM2EtNDlhNi1iNGFkLTQ0YjkzNDI1 ZGY2ZS5jcmwwHwYDVR0jBBgwFoAUQNcjY6xXH7Rj6/e5YttXcl1Xo5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hNGNmYWE5NS1jMzNhLTQ5YTYtYjRhZC00NGI5 MzQyNWRmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNrvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvO32OcuyjDvKbFmA0Q4YCD1w3upU8+Pm5/LeWoOM0oJ0Kwc11oTYu8 EgKfgqBfZpMxLnjvDGLn4T1ShJ8eT7c3f5akdtMlkDc3pUsyzits0corr4dg19Em PkLgVH/NrYExZCfRbwxubhvwZSNoTHMh1CVoHFuSpbH1dlxvp9Be7Wu4d93hqg9h Akq7eSV8GNhvopHHZYHxnACNtJZZ4VI0e3iJ9bJA2HpVv6GXKM6B1n/ZHNvrj7it B3o+wlQZi+nInsa58QAgMQ+oJIKplPp9dLLhERyUAwjxG0wQPE/GsNH/nbpFGutX tvSIG5VtjRHc7L8jJSilbD1pKmrxkQ4= -----END CERTIFICATE-----Generated at Tue Oct 27 17:46:05 2026 by rpki-client