$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/8675c0cb-a157-360c-8f98-3a2b5660e0e6.roa File: 8675c0cb-a157-360c-8f98-3a2b5660e0e6.roa (raw, json) Hash identifier: Zf7NkAXIyGzviJXYUSv53gvVgJqeTLG2V6ZGfZa1JZE= Subject key identifier: 53:91:79:87:38:CC:74:64:D2:49:0C:1C:97:04:30:0D:C7:B5:9A:48 Certificate issuer: /CN=afa70384-20ce-4e0a-b42a-581d05c70079 Certificate serial: 010D0C9F4328584F6828160D1EE8A4492D566A80 Authority key identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/8675c0cb-a157-360c-8f98-3a2b5660e0e6.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 202 IP address blocks: 104.219.104.0/21 maxlen: 21 104.219.104.0/24 maxlen: 24 104.219.105.0/24 maxlen: 24 104.219.106.0/24 maxlen: 24 104.219.107.0/24 maxlen: 24 104.219.108.0/24 maxlen: 24 104.219.109.0/24 maxlen: 24 104.219.110.0/24 maxlen: 24 104.219.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:16:0d:1e:e8:a4:49:2d:56:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa70384-20ce-4e0a-b42a-581d05c70079 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=601a0d18-af1e-4cbe-b442-b5811878edb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:0a:97:72:33:e5:69:5d:5f:cb:0d:df:14: be:5b:31:5a:9e:ac:8b:c3:17:17:f7:71:03:05:40: 74:be:c5:66:3a:4c:3b:63:0d:f3:6f:7a:8f:01:fb: 14:86:86:74:b6:6b:69:cd:ac:7e:d7:0a:bd:3f:f5: 52:03:a5:0f:92:bd:1e:df:ad:d8:22:5c:e7:18:d9: 5e:36:1a:74:d1:14:a0:9f:7b:c1:e8:f6:e6:86:74: 7e:5c:ca:42:40:e9:58:1f:4d:e5:d7:e7:19:34:3b: a4:d4:c5:cb:ef:0f:77:32:02:e8:79:f9:81:52:da: b9:92:16:6f:22:6b:16:20:53:1a:7d:b5:85:88:60: ac:81:ea:b5:4f:e1:b3:a5:4b:22:84:d0:6e:65:46: 4b:5d:c1:74:6c:1e:91:de:50:2d:d5:22:25:46:be: 53:49:52:cf:94:ed:12:da:09:ac:86:02:43:f8:f4: a6:34:6c:05:e7:a6:6e:38:98:2f:07:16:2b:6e:9b: 80:b9:fd:6e:1b:e6:49:0c:f8:61:da:19:26:ea:09: 5f:3e:0f:87:56:fe:f3:6d:bc:a0:ef:b6:0e:77:04: dd:84:7c:3d:94:a0:27:bc:25:7b:49:80:8f:02:85: 04:fa:f5:b3:7c:ec:6f:a7:82:59:45:9e:96:35:1c: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:91:79:87:38:CC:74:64:D2:49:0C:1C:97:04:30:0D:C7:B5:9A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/8675c0cb-a157-360c-8f98-3a2b5660e0e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl X509v3 Authority Key Identifier: keyid:6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer sbgp-ipAddrBlock: critical IPv4: 104.219.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:bd:76:96:80:83:26:68:f1:00:af:38:59:18:11:d2:e0:14: d5:cc:05:43:59:d1:62:08:a0:49:27:94:13:71:11:34:e6:c1: 4f:c1:01:ee:1d:25:c6:1f:56:da:2f:f0:f0:8a:d8:05:3a:65: bb:d4:ee:13:7e:b9:a7:67:fb:1a:bc:49:c7:35:6d:87:e0:63: 42:8b:be:1e:18:10:f8:6b:ec:9f:81:5f:9f:d8:c6:81:a1:f3: cd:f3:3f:83:79:a0:8c:8e:d8:00:f1:ac:b2:97:1f:68:3b:40: 25:e9:8f:88:5a:37:84:3e:c6:e9:2a:dc:83:f1:26:e9:5c:f4: d0:e8:fd:50:81:39:64:cb:65:4d:de:72:e4:4a:cc:d7:4d:d0: 1f:4e:b8:73:cd:b0:10:6c:b9:b6:b5:1c:f7:ae:d6:3c:f3:6a: 83:38:33:87:e4:22:d5:e0:46:aa:fe:c2:ce:aa:ae:a0:7d:06: c9:f7:93:6c:8e:d2:f6:cf:78:71:21:68:70:a2:27:15:ce:38: 17:b0:91:7a:80:6c:0d:07:6a:ab:71:b4:8b:2c:ee:5e:69:85: 5e:b6:6e:d5:92:43:64:49:ae:eb:3f:58:49:b3:7a:2a:eb:82: 3c:3b:7d:a0:2b:42:56:44:9e:2d:7b:08:ea:64:83:71:9b:43: 67:4d:d4:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKBYNHuikSS1WaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzAzODQtMjBjZS00ZTBhLWI0MmEtNTgxZDA1Yzcw MDc5MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk NjAxYTBkMTgtYWYxZS00Y2JlLWI0NDItYjU4MTE4NzhlZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIsKl3Iz5WldX8sN3xS+WzFanqyLwxcX93ED BUB0vsVmOkw7Yw3zb3qPAfsUhoZ0tmtpzax+1wq9P/VSA6UPkr0e363YIlznGNle Nhp00RSgn3vB6PbmhnR+XMpCQOlYH03l1+cZNDuk1MXL7w93MgLoefmBUtq5khZv ImsWIFMafbWFiGCsgeq1T+GzpUsihNBuZUZLXcF0bB6R3lAt1SIlRr5TSVLPlO0S 2gmshgJD+PSmNGwF56ZuOJgvBxYrbpuAuf1uG+ZJDPhh2hkm6glfPg+HVv7zbbyg 77YOdwTdhHw9lKAnvCV7SYCPAoUE+vWzfOxvp4JZRZ6WNRzEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOReYc4zHRk0kkMHJcEMA3HtZpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmE3 MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVjNzAwNzkvODY3NWMwY2ItYTE1Ny0z NjBjLThmOTgtM2EyYjU2NjBlMGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZhNzAzODQtMjBjZS00ZTBhLWI0 MmEtNTgxZDA1YzcwMDc5L2FmYTcwMzg0LTIwY2UtNGUwYS1iNDJhLTU4MWQwNWM3 MDA3OS5jcmwwHwYDVR0jBBgwFoAUaj/fScsNhJ0WwoswmrtFsB2Ds34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFk MDVjNzAwNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaNtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu9dpaAgyZo8QCvOFkYEdLgFNXMBUNZ0WIIoEknlBNxETTmwU/BAe4d JcYfVtov8PCK2AU6ZbvU7hN+uadn+xq8Scc1bYfgY0KLvh4YEPhr7J+BX5/YxoGh 883zP4N5oIyO2ADxrLKXH2g7QCXpj4haN4Q+xukq3IPxJulc9NDo/VCBOWTLZU3e cuRKzNdN0B9OuHPNsBBsuba1HPeu1jzzaoM4M4fkItXgRqr+ws6qrqB9Bsn3k2yO 0vbPeHEhaHCiJxXOOBewkXqAbA0HaqtxtIss7l5phV62btWSQ2RJrus/WEmzeirr gjw7faArQlZEni17COpkg3GbQ2dN1Jk= -----END CERTIFICATE-----Generated at Sat Oct 24 10:25:53 2026 by rpki-client