$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa File: 968332ec-c5e0-337e-84e2-d19764525274.roa (raw, json) Hash identifier: xud8SH+alLmtigCzzMGDslvTC/HQF1b6UvLkp38pF7k= Subject key identifier: C9:E6:19:5F:37:56:00:4E:2C:B3:1D:09:48:F9:1B:BB:FD:3F:2F:CF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F71EDA1D7A88DC06808F4C980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 3223 IP address blocks: 104.37.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a1:d7:a8:8d:c0:68:08:f4:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=49da9377-b222-42bf-8f96-b3f064de693f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:f5:b3:f2:d4:32:e9:ff:b9:43:a1:b7:eb: 29:9a:13:08:ce:dd:39:65:4c:e9:df:2d:ab:1c:41: 5e:2a:fc:93:91:a7:49:f8:44:3c:7e:5b:d6:4f:60: ae:ec:a6:06:8b:30:92:fd:98:fe:b2:e2:3b:6a:da: 3f:f2:d8:14:78:46:77:77:ac:fd:62:e9:38:cc:e8: 79:12:a7:58:b1:51:06:b8:f4:f0:b5:c1:06:21:eb: 23:d6:c4:5a:a6:11:b7:54:67:96:4f:8b:53:ad:92: fe:d7:10:84:62:de:2b:e6:11:ad:7b:96:df:5b:d0: 5d:18:2a:f6:92:36:ae:6f:df:76:17:0f:4b:99:f1: f2:91:c3:ed:f9:f3:cf:c3:2b:20:5c:61:5b:03:04: 7a:15:42:38:d8:26:b0:1d:7b:57:28:94:7e:ee:c0: d7:46:30:50:81:a9:04:51:b0:f8:bc:fb:55:da:04: a4:cb:24:60:8d:09:26:d7:18:db:56:0d:bc:5e:10: 89:8b:46:d3:a5:4c:a2:be:eb:c4:83:26:18:06:ab: 6d:31:71:05:35:86:58:f9:a9:ef:52:dd:04:7d:e0: 6d:fe:06:ef:01:5e:43:6d:c9:58:88:03:78:b8:33: 9b:ec:be:2e:91:5a:ec:f2:97:01:e8:07:15:f0:d4: 56:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E6:19:5F:37:56:00:4E:2C:B3:1D:09:48:F9:1B:BB:FD:3F:2F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8f:ac:03:be:5d:89:ce:2c:55:6c:5c:f4:a5:99:6d:ac:15: a9:e4:d4:0b:2f:52:e0:89:1d:fc:da:6c:5c:8e:0b:1c:dc:57: a9:a1:a7:08:f1:bf:41:ee:47:fb:34:21:7a:6e:7e:e9:6d:8c: 0a:2f:52:30:25:51:4a:d8:79:55:9c:61:15:c9:ca:bc:64:00: 74:0e:38:f1:a3:7a:f6:e0:cb:80:96:92:6f:05:12:59:c8:00: f5:b4:54:be:0a:2a:63:29:0c:8a:91:c7:32:40:73:b9:68:98: f5:98:9c:48:ea:96:17:c9:c1:a3:9d:a4:b3:d8:f6:fa:80:72: a9:da:9b:f6:ba:ea:0b:b1:c1:4d:23:0d:f1:ab:54:aa:5f:0d: 1b:26:57:90:00:e3:c0:e9:ab:b3:0d:04:da:3e:b8:98:fb:8a: 81:e4:15:6d:10:d1:89:c9:84:f4:2e:4b:6f:0c:21:f9:62:58: fb:bc:ca:c5:0e:9f:10:d6:a3:34:c6:5f:e7:84:57:35:60:5a: 8c:1a:07:f7:77:63:3f:19:8f:18:d4:95:1b:86:59:b9:5c:4c: c8:f1:39:d0:6f:53:56:a7:6f:c6:c0:22:20:c2:12:7c:2b:ae: 49:ba:27:01:de:d2:57:87:27:7a:0b:28:7f:ae:37:b3:d0:85: 19:2f:d0:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aHXqI3AaAj0yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDlkYTkzNzctYjIyMi00MmJmLThmOTYtYjNmMDY0ZGU2OTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgz1s/LUMun/uUOht+spmhMIzt05ZUzp3y2r HEFeKvyTkadJ+EQ8flvWT2Cu7KYGizCS/Zj+suI7ato/8tgUeEZ3d6z9Yuk4zOh5 EqdYsVEGuPTwtcEGIesj1sRaphG3VGeWT4tTrZL+1xCEYt4r5hGte5bfW9BdGCr2 kjaub992Fw9LmfHykcPt+fPPwysgXGFbAwR6FUI42CawHXtXKJR+7sDXRjBQgakE UbD4vPtV2gSkyyRgjQkm1xjbVg28XhCJi0bTpUyivuvEgyYYBqttMXEFNYZY+anv Ut0EfeBt/gbvAV5DbclYiAN4uDOb7L4ukVrs8pcB6AcV8NRW5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnmGV83VgBOLLMdCUj5G7v9Py/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTY4MzMyZWMtYzVlMC0z MzdlLTg0ZTItZDE5NzY0NTI1Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6PrAO+XYnOLFVsXPSlmW2sFank1AsvUuCJHfzabFyOCxzcV6mhpwjx v0HuR/s0IXpufultjAovUjAlUUrYeVWcYRXJyrxkAHQOOPGjevbgy4CWkm8FElnI APW0VL4KKmMpDIqRxzJAc7lomPWYnEjqlhfJwaOdpLPY9vqAcqnam/a66guxwU0j DfGrVKpfDRsmV5AA48Dpq7MNBNo+uJj7ioHkFW0Q0YnJhPQuS28MIfliWPu8ysUO nxDWozTGX+eEVzVgWowaB/d3Yz8ZjxjUlRuGWblcTMjxOdBvU1anb8bAIiDCEnwr rkm6JwHe0leHJ3oLKH+uN7PQhRkv0Oc= -----END CERTIFICATE-----Generated at Sat Oct 24 20:52:15 2026 by rpki-client