$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa File: eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa (raw, json) Hash identifier: +Pgy2yzbcCVmmSDloHZAvM+P0epRzG2BkQm/d72U8TY= Subject key identifier: 4B:32:FC:F3:68:28:66:65:B1:98:AF:95:02:C9:91:64:21:00:E6:C7 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584F4C3D4A6007D0D02AC1604300 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 21743 IP address blocks: 104.247.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4a:60:07:d0:d0:2a:c1:60:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=debeaca5-51c3-4500-b1e6-31731f66d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:f2:07:96:39:6c:c5:02:1f:29:47:2b:f6: 6d:30:56:ca:7e:1c:fc:f2:21:c7:55:07:25:54:9e: 99:57:1e:31:34:9b:72:42:42:6c:22:37:19:6e:05: c6:a4:7a:ca:64:52:52:10:fa:af:10:d6:01:79:51: 7f:26:3e:ef:12:54:72:90:99:62:fe:f1:7c:32:65: 6a:38:9c:07:d7:41:fb:3a:62:b4:88:e3:73:6b:19: 9d:4b:90:45:19:6e:46:d3:eb:f2:98:2d:56:61:ca: f9:d9:76:32:b7:5a:a1:ec:8b:e0:2a:41:d7:13:18: 5f:e0:e3:30:c3:14:17:f4:99:5c:8d:91:0a:c9:59: d8:41:9a:aa:e5:bf:fe:5b:87:04:be:20:b5:65:0a: 2d:48:21:d3:3d:f8:1c:99:98:10:b1:ea:2b:39:36: 42:4a:eb:66:f2:d9:8f:c3:55:2f:b2:a1:17:0e:42: bc:5f:8b:6b:7f:2a:99:08:98:0b:77:16:59:48:dc: 79:b9:a5:24:b6:19:ae:1b:6d:17:df:ee:14:14:c7: f3:43:d2:12:70:1c:70:a8:cd:87:32:f2:ea:10:04: 74:e5:19:9c:0b:ed:d8:ae:b2:af:60:63:eb:ae:3f: 58:12:8e:3a:7f:c8:f5:03:52:df:7b:63:6e:0c:f2: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:FC:F3:68:28:66:65:B1:98:AF:95:02:C9:91:64:21:00:E6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/eaf7e485-7ab8-383a-af6e-1d1d48e46da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 104.247.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:45:87:a8:1f:57:82:28:cc:42:4c:0b:58:03:cd:4c:2a:b5: 05:05:73:01:9f:31:08:0a:60:ee:ee:6b:20:5e:57:17:4f:c6: b5:ee:68:51:44:04:13:40:dc:ab:7e:f5:3a:71:b9:4d:d6:0a: 95:9d:7f:9d:d1:f8:86:0d:50:e4:2a:70:cb:43:06:83:b4:50: 74:da:7b:3b:49:02:c1:e2:c9:4b:21:f1:6e:a9:d5:14:01:a2: f4:b9:7c:c2:c1:c6:c0:7d:fe:db:8f:dd:c0:73:0e:f2:16:77: 12:41:e8:fb:47:61:da:60:db:33:df:ac:6e:1e:5b:fc:bb:eb: 88:bb:c8:34:7e:86:b1:66:70:a4:b0:1a:44:bd:1e:0b:75:0e: 88:38:85:8f:5c:9e:a9:a4:04:85:ad:7d:c1:49:ad:41:fa:6c: 1a:b9:a4:53:72:c0:3b:77:0b:3c:a9:83:af:45:1e:e1:7d:fe: be:98:fc:99:48:6d:af:6d:41:7a:af:9b:ba:96:ad:e0:75:f2: f4:9d:2a:c6:03:a1:e2:73:84:89:d7:48:21:b1:c1:fb:c3:8b: d7:58:a6:ef:e6:1e:95:97:41:06:88:9f:0a:0b:cb:dd:07:ff: a6:9f:4a:18:31:f7:69:d0:b6:0a:a2:5c:b4:d7:9c:ac:96:9f: 94:b5:a2:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUpgB9DQKsFgQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGViZWFjYTUtNTFjMy00NTAwLWIxZTYtMzE3MzFmNjZkN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCvyB5Y5bMUCHylHK/ZtMFbKfhz88iHHVQcl VJ6ZVx4xNJtyQkJsIjcZbgXGpHrKZFJSEPqvENYBeVF/Jj7vElRykJli/vF8MmVq OJwH10H7OmK0iONzaxmdS5BFGW5G0+vymC1WYcr52XYyt1qh7IvgKkHXExhf4OMw wxQX9JlcjZEKyVnYQZqq5b/+W4cEviC1ZQotSCHTPfgcmZgQseorOTZCSutm8tmP w1UvsqEXDkK8X4trfyqZCJgLdxZZSNx5uaUkthmuG20X3+4UFMfzQ9IScBxwqM2H MvLqEAR05RmcC+3YrrKvYGPrrj9YEo46f8j1A1Lfe2NuDPKFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsy/PNoKGZlsZivlQLJkWQhAObHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZWFmN2U0ODUtN2FiOC0z ODNhLWFmNmUtMWQxZDQ4ZTQ2ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlFh6gfV4IozEJMC1gDzUwqtQUFcwGfMQgKYO7uayBeVxdPxrXuaFFE BBNA3Kt+9TpxuU3WCpWdf53R+IYNUOQqcMtDBoO0UHTaeztJAsHiyUsh8W6p1RQB ovS5fMLBxsB9/tuP3cBzDvIWdxJB6PtHYdpg2zPfrG4eW/y764i7yDR+hrFmcKSw GkS9Hgt1Dog4hY9cnqmkBIWtfcFJrUH6bBq5pFNywDt3Czypg69FHuF9/r6Y/JlI ba9tQXqvm7qWreB18vSdKsYDoeJzhInXSCGxwfvDi9dYpu/mHpWXQQaInwoLy90H /6afShgx92nQtgqiXLTXnKyWn5S1orE= -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:09 2026 by rpki-client