$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa File: 0a18cb35-1200-3de5-91cf-435418df7565.roa (raw, json) Hash identifier: M8JQPZyrt38OE0xcHdEtj2eXp2qvhYqxaILzNKcb+Lw= Subject key identifier: 56:4B:32:D9:2F:53:AA:BF:04:2D:C0:6D:27:15:50:37:C7:87:B8:3A Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584F119D1462AF1C7B42C4FA1780 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 21743 IP address blocks: 104.247.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:14:62:af:1c:7b:42:c4:fa:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=eb6e9e10-fd64-4ea8-81f7-f228778b7997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8f:44:69:f7:ef:9b:58:d7:ec:01:ad:b7:44: 69:c4:d5:ac:5d:9e:2f:3f:00:5c:d6:f8:0c:18:aa: f2:aa:f0:53:8a:ae:ca:6a:49:29:be:20:ff:89:a4: 7c:23:76:91:a8:59:ce:07:27:a7:29:b7:50:9c:1f: c4:ce:45:a1:2b:d4:1d:f8:cc:29:ac:84:dd:97:33: 27:1b:b2:fc:6f:cc:bc:43:ee:cb:fc:7e:8e:02:04: 6b:c3:49:8e:81:69:ae:de:84:09:47:5d:27:85:77: 15:bc:66:fc:8c:8c:63:8b:5d:44:ed:1e:23:2a:c9: 1e:70:da:90:6b:12:55:b9:9e:f6:6c:a0:b3:04:d8: f7:18:2b:54:1b:69:d9:ba:f7:d3:10:d3:ec:ac:1f: 46:8e:8e:ab:27:bb:e9:81:e3:be:01:cf:e2:6f:dc: f2:f3:e9:14:6d:32:42:01:2d:d9:03:6c:50:2e:7a: ba:24:b2:f3:67:a8:11:e9:f8:81:b0:ad:4c:80:b1: 8d:32:41:f2:04:be:e0:98:0d:49:51:0d:2a:d6:0b: e9:28:10:3c:79:ed:ce:64:09:61:17:1e:a7:63:88: bc:5d:74:db:13:a7:16:b5:38:45:97:2b:e1:5f:a9: 5b:07:e2:03:0e:29:1b:52:3f:f9:82:cd:4b:36:04: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4B:32:D9:2F:53:AA:BF:04:2D:C0:6D:27:15:50:37:C7:87:B8:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/0a18cb35-1200-3de5-91cf-435418df7565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:05:06:89:a1:d8:36:ae:fb:7d:fd:5d:e2:88:e6:4a:a1:b9: ac:e7:76:5c:11:d7:59:a9:16:2a:58:64:f7:8b:fc:da:7f:19: c5:53:fb:51:c5:26:02:82:9d:ba:94:c9:d8:9b:a9:31:dc:ae: 49:f9:ed:6d:78:ad:ca:8c:cd:95:f6:15:5e:82:6a:44:e1:49: f7:d0:c9:59:fa:22:72:07:54:5f:01:fc:7b:5c:db:72:83:c0: 64:4f:b8:d9:01:ac:07:34:6a:a8:a2:33:4f:ba:fe:50:d6:10: 69:30:bc:76:04:56:48:68:4c:60:e1:ec:b2:8a:b2:eb:fb:f3: 62:66:24:fd:d5:41:4f:87:79:a3:fb:80:a9:1b:02:d6:91:c0: 7c:8e:d0:a3:23:ce:9d:70:11:72:e3:ce:a9:31:87:6b:fd:32: 5e:31:37:f0:e6:23:52:a0:23:d3:cf:28:ec:24:16:c9:d1:07: 4d:1b:ef:dd:34:06:8d:e3:1b:22:f6:ae:22:48:10:8c:ba:31: dc:f1:13:94:91:8c:2e:da:e9:6b:88:b5:62:d8:53:8e:5e:3d: 02:9c:94:75:87:af:b2:82:95:c2:dd:b8:60:82:8e:f1:05:9e: 59:57:79:5e:aa:4f:61:44:cb:1f:5f:c1:7c:a4:69:c5:ba:d2: eb:17:eb:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRRirxx7QsT6F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWI2ZTllMTAtZmQ2NC00ZWE4LTgxZjctZjIyODc3OGI3OTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj49Eaffvm1jX7AGtt0RpxNWsXZ4vPwBc1vgM GKryqvBTiq7KakkpviD/iaR8I3aRqFnOByenKbdQnB/EzkWhK9Qd+MwprITdlzMn G7L8b8y8Q+7L/H6OAgRrw0mOgWmu3oQJR10nhXcVvGb8jIxji11E7R4jKskecNqQ axJVuZ72bKCzBNj3GCtUG2nZuvfTENPsrB9Gjo6rJ7vpgeO+Ac/ib9zy8+kUbTJC AS3ZA2xQLnq6JLLzZ6gR6fiBsK1MgLGNMkHyBL7gmA1JUQ0q1gvpKBA8ee3OZAlh Fx6nY4i8XXTbE6cWtThFlyvhX6lbB+IDDikbUj/5gs1LNgQ06wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZLMtkvU6q/BC3AbScVUDfHh7g6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMGExOGNiMzUtMTIwMC0z ZGU1LTkxY2YtNDM1NDE4ZGY3NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsFBomh2Dau+339XeKI5kqhuazndlwR11mpFipYZPeL/Np/GcVT+1HF JgKCnbqUydibqTHcrkn57W14rcqMzZX2FV6CakThSffQyVn6InIHVF8B/Htc23KD wGRPuNkBrAc0aqiiM0+6/lDWEGkwvHYEVkhoTGDh7LKKsuv782JmJP3VQU+HeaP7 gKkbAtaRwHyO0KMjzp1wEXLjzqkxh2v9Ml4xN/DmI1KgI9PPKOwkFsnRB00b7900 Bo3jGyL2riJIEIy6MdzxE5SRjC7a6WuItWLYU45ePQKclHWHr7KClcLduGCCjvEF nllXeV6qT2FEyx9fwXykacW60usX6wc= -----END CERTIFICATE-----Generated at Wed Sep 16 07:35:49 2026 by rpki-client