$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91ea5033-846d-3315-a594-6eb4e3fc4c11.roa File: 91ea5033-846d-3315-a594-6eb4e3fc4c11.roa (raw, json) Hash identifier: GwhRbZneZlUBKjt7kev6h0eUJjPt0amgtgbf2fBDlJc= Subject key identifier: C7:66:0D:6F:FC:23:D0:72:12:00:79:F2:B3:10:EC:1C:81:7B:CA:C1 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EF87CDF61FE4E94637072CA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91ea5033-846d-3315-a594-6eb4e3fc4c11.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 9009 IP address blocks: 104.37.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:df:61:fe:4e:94:63:70:72:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=c4f5b777-3400-49dc-8964-c49bca1f427e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:c3:dc:0d:55:df:94:07:b2:9b:7d:76:f0: 1a:63:43:cd:08:f9:49:a1:ec:84:f4:0c:8d:8b:46: 47:b0:23:2c:42:e3:32:35:9f:0f:d8:0d:b4:91:d1: 95:93:50:18:4f:bf:e5:b6:db:52:37:47:20:6d:8c: a5:54:f5:ab:76:c4:ac:cf:56:6f:19:61:67:bb:94: 14:1e:e6:ef:04:58:6a:60:b5:78:20:a8:a9:69:4d: 13:0c:c8:79:76:42:14:77:76:42:f4:ed:39:1f:d2: d4:8d:66:51:2a:95:09:44:8f:63:d9:e1:ec:d5:c8: 55:03:52:bc:41:91:85:63:85:1c:10:5a:db:45:a3: e4:8b:03:4c:22:7b:5b:5e:bc:a1:7a:11:d3:4f:94: 8b:cf:c6:f9:7d:c6:60:e9:48:5e:fe:eb:03:62:0f: 95:ce:3d:4b:48:63:1e:d7:e3:af:35:50:0d:b3:2a: 03:ef:32:c5:89:78:24:2e:e8:50:08:a8:48:e6:24: 48:2f:f6:06:3a:10:22:fc:e1:a9:74:60:82:8b:5a: 58:a5:6c:c2:81:37:b1:f2:cb:54:9f:39:48:b4:08: 5b:3c:60:aa:31:3d:f1:99:6c:0c:ea:0a:17:48:44: 50:05:c3:d6:33:20:25:b4:3b:6e:f1:ce:47:59:2b: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:66:0D:6F:FC:23:D0:72:12:00:79:F2:B3:10:EC:1C:81:7B:CA:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/91ea5033-846d-3315-a594-6eb4e3fc4c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2d:0d:68:31:b8:ea:e9:b0:5d:d5:06:86:46:72:64:cf:18: d4:7c:8c:6d:4e:37:92:8b:7c:66:1d:09:94:75:d5:5b:b7:74: 4f:a4:a9:96:76:21:00:6f:42:86:73:35:0e:9a:b3:0a:15:0b: 2c:3c:ac:ae:9c:08:2e:64:e8:bc:03:a6:b4:95:6d:1c:8b:9f: d6:75:8b:d7:85:de:a8:37:da:c9:f4:5c:88:4c:58:e3:6a:20: 84:e6:be:75:0e:a8:41:d8:7e:b1:dd:c6:01:ab:ac:00:73:e1: a6:b6:48:f6:53:b1:7b:79:47:18:a2:b0:9d:4f:74:c6:e3:55: 9a:ab:be:06:a4:7e:83:8f:40:ef:eb:7c:bf:dd:fe:93:4b:72: c3:d3:b8:67:9e:5f:8b:eb:92:98:f9:fb:71:c5:79:e7:37:ea: 42:b7:db:ae:bf:00:d8:66:b6:da:ab:1c:5c:99:0a:3f:2c:26: 53:1d:3a:8a:04:23:2e:41:d6:b2:74:50:c7:63:a5:61:53:54: 26:03:da:f1:96:f4:4b:0a:d7:83:17:1b:b8:19:e8:a8:28:91: f1:08:c7:18:39:4d:55:78:f0:8b:6a:f2:3c:e0:d6:84:5c:5d: 5a:97:ea:54:8c:c5:58:8b:37:5f:d2:04:41:bc:39:d2:1e:dd: ae:31:e7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fN9h/k6UY3ByyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YzRmNWI3NzctMzQwMC00OWRjLTg5NjQtYzQ5YmNhMWY0MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgbD3A1V35QHspt9dvAaY0PNCPlJoeyE9AyN i0ZHsCMsQuMyNZ8P2A20kdGVk1AYT7/ltttSN0cgbYylVPWrdsSsz1ZvGWFnu5QU HubvBFhqYLV4IKipaU0TDMh5dkIUd3ZC9O05H9LUjWZRKpUJRI9j2eHs1chVA1K8 QZGFY4UcEFrbRaPkiwNMIntbXryhehHTT5SLz8b5fcZg6Uhe/usDYg+Vzj1LSGMe 1+OvNVANsyoD7zLFiXgkLuhQCKhI5iRIL/YGOhAi/OGpdGCCi1pYpWzCgTex8stU nzlItAhbPGCqMT3xmWwM6goXSERQBcPWMyAltDtu8c5HWSu/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdmDW/8I9ByEgB58rMQ7ByBe8rBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTFlYTUwMzMtODQ2ZC0z MzE1LWE1OTQtNmViNGUzZmM0YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwtDWgxuOrpsF3VBoZGcmTPGNR8jG1ON5KLfGYdCZR11Vu3dE+kqZZ2 IQBvQoZzNQ6aswoVCyw8rK6cCC5k6LwDprSVbRyLn9Z1i9eF3qg32sn0XIhMWONq IITmvnUOqEHYfrHdxgGrrABz4aa2SPZTsXt5RxiisJ1PdMbjVZqrvgakfoOPQO/r fL/d/pNLcsPTuGeeX4vrkpj5+3HFeec36kK3266/ANhmttqrHFyZCj8sJlMdOooE Iy5B1rJ0UMdjpWFTVCYD2vGW9EsK14MXG7gZ6KgokfEIxxg5TVV48Itq8jzg1oRc XVqX6lSMxViLN1/SBEG8OdIe3a4x52o= -----END CERTIFICATE-----Generated at Sat Sep 5 01:10:00 2026 by rpki-client