$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa File: a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa (raw, json) Hash identifier: BUfPS1lPu/6Wte1TDCRprw8lu1N+NlyJV+0onvwx4s4= Subject key identifier: 92:99:E0:48:45:A8:8A:0D:1F:5E:81:52:49:F4:09:44:C9:48:93:2C Certificate issuer: /CN=0215b589-0229-401c-98ef-53194fd5e2a5 Certificate serial: 010D0C9F4328584F71EDA509B30FBDD9D6461F00 Authority key identifier: 7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 46455 IP address blocks: 104.255.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a5:09:b3:0f:bd:d9:d6:46:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0215b589-0229-401c-98ef-53194fd5e2a5 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=570e231e-04c3-42b0-aada-8a3e9d3cdaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:97:f1:93:f8:64:61:44:e3:91:c0:d9:94:4a: 76:0b:ad:9b:ae:4c:bb:9b:7e:f4:e0:52:3f:6a:ca: 93:10:e4:14:5b:e3:a4:09:ed:00:f0:cd:6d:1c:e0: c0:29:a0:53:f0:8f:ad:7d:2c:21:bd:8a:5c:d3:87: 8e:4b:e8:47:3b:11:52:bf:db:df:75:88:b6:2e:af: 6c:19:82:30:f1:54:e7:2f:b1:47:7d:c8:da:3a:13: bb:89:16:a3:bf:be:4a:65:54:4d:54:30:00:94:e9: 4f:5f:64:58:73:60:79:4c:12:05:cf:ee:72:35:d6: 43:bc:7e:bc:5f:86:60:88:c4:c8:c1:9e:cf:27:1a: 30:52:53:8b:c9:ca:bc:f1:b8:38:a5:a2:dc:b3:db: 59:90:c4:d3:7c:e7:eb:2c:e9:d8:5f:12:99:67:70: 81:ae:7d:1b:78:84:a4:43:9d:cb:a8:60:d5:7a:ea: db:fe:99:b9:be:90:cb:90:80:e2:ff:2e:d6:3e:22: 1d:e7:b8:3a:7b:95:3b:43:f6:b9:29:cd:f8:3f:90: 11:c0:cf:16:68:7e:f8:62:c8:09:de:8a:7b:b2:a4: 8c:27:40:2f:3b:9a:25:21:3a:88:2e:21:11:c3:9a: 3b:7f:3d:d8:62:df:26:13:c1:63:8d:ec:1f:1a:72: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:99:E0:48:45:A8:8A:0D:1F:5E:81:52:49:F4:09:44:C9:48:93:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/a896a9f3-afd2-38fb-9e10-2e738ea71c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5/0215b589-0229-401c-98ef-53194fd5e2a5.crl X509v3 Authority Key Identifier: keyid:7B:C8:33:EC:28:50:49:DE:DF:E1:DE:79:F6:39:28:E0:24:48:B8:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0215b589-0229-401c-98ef-53194fd5e2a5.cer sbgp-ipAddrBlock: critical IPv4: 104.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9c:cd:8b:14:08:42:c4:c2:0f:cb:d0:f0:3d:b0:8c:12:58: b7:42:d1:cf:48:dd:47:5a:60:79:70:23:a9:09:84:47:ff:10: 99:63:01:89:ec:fa:93:c3:21:ff:3a:7c:6c:0b:3e:e6:14:9f: 0d:e3:88:f0:d1:cb:c5:08:b3:b1:e5:2c:34:3b:cd:3b:ce:5c: c0:07:49:75:57:03:2c:1b:c8:03:50:9a:c5:f6:bd:1b:2e:9a: 37:2e:20:4a:7a:bb:48:d4:8c:a0:89:f9:67:f3:d8:fe:99:fa: 2c:1d:fd:9d:fa:7f:2b:85:2f:a4:f4:45:c1:33:c1:68:e9:51: 5d:c0:4d:d9:06:a9:af:94:05:de:d3:89:42:94:ed:dd:0a:0e: 65:01:e3:00:de:0a:ad:f8:63:bb:7c:87:fd:af:41:25:d4:00: 20:3a:88:47:0a:01:a8:63:12:dd:2c:79:dd:a9:23:90:0b:cc: 38:79:c9:2f:40:30:27:ef:60:7c:3b:28:f0:8d:a9:23:73:89: 03:da:28:b8:c2:03:38:96:39:55:d0:9a:48:84:39:1a:c7:28: 40:16:16:fe:20:6b:8c:37:bd:89:78:c9:91:fb:06:74:79:38: c7:d1:cd:9d:f5:e6:4a:a4:55:41:aa:12:38:d2:9e:e3:53:ad: a5:9f:e5:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aUJsw+92dZGHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIxNWI1ODktMDIyOS00MDFjLTk4ZWYtNTMxOTRmZDVl MmE1MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NTcwZTIzMWUtMDRjMy00MmIwLWFhZGEtOGEzZTlkM2NkYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJfxk/hkYUTjkcDZlEp2C62brky7m3704FI/ asqTEOQUW+OkCe0A8M1tHODAKaBT8I+tfSwhvYpc04eOS+hHOxFSv9vfdYi2Lq9s GYIw8VTnL7FHfcjaOhO7iRajv75KZVRNVDAAlOlPX2RYc2B5TBIFz+5yNdZDvH68 X4ZgiMTIwZ7PJxowUlOLycq88bg4paLcs9tZkMTTfOfrLOnYXxKZZ3CBrn0beISk Q53LqGDVeurb/pm5vpDLkIDi/y7WPiId57g6e5U7Q/a5Kc34P5ARwM8WaH74YsgJ 3op7sqSMJ0AvO5olITqILiERw5o7fz3YYt8mE8FjjewfGnKyowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKZ4EhFqIoNH16BUkn0CUTJSJMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1 YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5NGZkNWUyYTUvYTg5NmE5ZjMtYWZkMi0z OGZiLTllMTAtMmU3MzhlYTcxYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDIxNWI1ODktMDIyOS00MDFjLTk4 ZWYtNTMxOTRmZDVlMmE1LzAyMTViNTg5LTAyMjktNDAxYy05OGVmLTUzMTk0ZmQ1 ZTJhNS5jcmwwHwYDVR0jBBgwFoAUe8gz7ChQSd7f4d559jko4CRIuAEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMjE1YjU4OS0wMjI5LTQwMWMtOThlZi01MzE5 NGZkNWUyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaP9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeczYsUCELEwg/L0PA9sIwSWLdC0c9I3UdaYHlwI6kJhEf/EJljAYns +pPDIf86fGwLPuYUnw3jiPDRy8UIs7HlLDQ7zTvOXMAHSXVXAywbyANQmsX2vRsu mjcuIEp6u0jUjKCJ+Wfz2P6Z+iwd/Z36fyuFL6T0RcEzwWjpUV3ATdkGqa+UBd7T iUKU7d0KDmUB4wDeCq34Y7t8h/2vQSXUACA6iEcKAahjEt0sed2pI5ALzDh5yS9A MCfvYHw7KPCNqSNziQPaKLjCAziWOVXQmkiEORrHKEAWFv4ga4w3vYl4yZH7BnR5 OMfRzZ315kqkVUGqEjjSnuNTraWf5Yo= -----END CERTIFICATE-----Generated at Wed Oct 28 15:33:52 2026 by rpki-client