$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa File: ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa (raw, json) Hash identifier: x/2Voz5lpfVOFLGGYrr/W5JGhtYuXVGbigDNCIrxRGk= Subject key identifier: E1:35:C0:9E:6D:B3:77:DD:75:36:0F:E2:44:E3:E0:8A:0B:76:00:0A Certificate issuer: /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Certificate serial: 010D0C9F4328584F374D2F8548A161949E4D8C40 Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 393653 IP address blocks: 104.128.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2f:85:48:a1:61:94:9e:4d:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=c11965b3-8b36-45ad-bcad-29c001836b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b4:36:f7:1a:ab:ac:42:05:75:90:8b:40:cb: 49:6e:4b:32:d7:bc:d1:ef:d9:d2:a5:3f:79:9b:bc: d1:71:86:71:75:e4:76:72:48:54:b5:1c:44:e4:08: 8b:fb:13:af:08:a2:9b:f3:94:ec:ff:c7:33:77:b5: df:4a:7a:10:f4:99:d5:ce:c1:8e:a8:dd:cb:92:5f: 95:74:c0:20:9a:1d:05:bd:e7:20:e2:25:3d:08:ad: 95:0f:5e:3f:d9:08:82:e9:5f:64:f6:07:80:c6:79: f7:84:94:42:8f:50:55:ce:71:63:ef:5a:55:97:c1: ce:4d:56:fe:02:9f:7d:2c:8f:cc:d1:c6:63:c4:49: 79:5f:0b:a5:35:d1:73:ee:75:13:e7:1d:7d:b2:9d: 47:86:44:e3:09:f8:4e:cf:b0:54:3a:95:72:55:1b: 2a:72:04:6f:ed:13:77:93:1d:b5:1c:a0:7b:40:c7: 7f:16:40:9b:b1:9a:31:76:ad:fb:06:4c:6e:ba:b5: 7d:54:49:cb:1b:cd:44:9b:cc:38:f5:fc:a4:f9:6b: 3e:e5:70:38:9a:8e:9b:6d:97:10:c6:45:11:e5:03: 4d:8a:40:97:22:27:6d:f3:9e:3c:88:b5:5e:4a:67: 34:8e:cf:cc:ae:8e:9b:67:3c:12:a3:fe:b4:13:55: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:35:C0:9E:6D:B3:77:DD:75:36:0F:E2:44:E3:E0:8A:0B:76:00:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/ebbab8ca-563f-37de-a229-2fad1f5fe2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl X509v3 Authority Key Identifier: keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer sbgp-ipAddrBlock: critical IPv4: 104.128.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:55:17:63:dc:d8:aa:68:60:17:b0:e4:e4:76:67:5b:6a:91: b6:40:fc:d8:dc:9b:f9:c8:d3:e7:48:3f:ba:4f:27:f2:2d:e9: 41:f8:75:8e:53:43:c1:f0:3a:3d:b3:47:ef:c0:ba:dd:4f:a4: c5:a7:10:bd:2e:51:a1:66:ea:bc:aa:75:b6:fb:9f:78:35:d3: 12:e0:df:ec:dc:0d:46:a1:43:3c:26:93:0c:25:65:10:89:a3: 4f:f5:ed:d6:51:8f:f8:14:3a:63:13:d7:2a:1f:0c:c8:af:00: fc:65:f9:04:e5:8d:48:6d:79:c3:21:3e:b4:ee:1c:17:52:28: 9e:b6:b0:e7:cd:80:82:14:bc:2e:11:ae:65:41:06:f5:01:2a: 94:04:41:4d:44:4f:d0:9b:e1:6d:2f:46:b2:4f:c0:be:38:a1: 85:f1:06:8c:f2:a6:3b:91:b0:2a:99:5c:22:a8:9c:04:35:86: ff:84:26:19:88:7c:4f:07:bb:ff:f7:93:2e:14:19:07:8a:4d: 2d:f1:a5:6a:92:1c:fd:ce:7d:ff:3f:89:49:22:46:fb:b9:26: 04:ee:ed:61:11:b9:e2:de:86:bf:15:5d:b8:81:31:1c:02:aa: 12:19:e1:8b:4c:cd:7f:85:6f:7c:04:bf:b6:ac:3e:36:48:0f: 80:81:30:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TS+FSKFhlJ5NjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm ODFjMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YzExOTY1YjMtOGIzNi00NWFkLWJjYWQtMjljMDAxODM2YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Q29xqrrEIFdZCLQMtJbksy17zR79nSpT95 m7zRcYZxdeR2ckhUtRxE5AiL+xOvCKKb85Ts/8czd7XfSnoQ9JnVzsGOqN3Lkl+V dMAgmh0Fvecg4iU9CK2VD14/2QiC6V9k9geAxnn3hJRCj1BVznFj71pVl8HOTVb+ Ap99LI/M0cZjxEl5XwulNdFz7nUT5x19sp1HhkTjCfhOz7BUOpVyVRsqcgRv7RN3 kx21HKB7QMd/FkCbsZoxdq37BkxuurV9VEnLG81Em8w49fyk+Ws+5XA4mo6bbZcQ xkUR5QNNikCXIidt8548iLVeSmc0js/Mro6bZzwSo/60E1VkFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE1wJ5ts3fddTYP4kTj4IoLdgAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvZWJiYWI4Y2EtNTYzZi0z N2RlLWEyMjktMmZhZDFmNWZlMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4 ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1VF2Pc2KpoYBew5OR2Z1tqkbZA/Njcm/nI0+dIP7pPJ/It6UH4dY5T Q8HwOj2zR+/Aut1PpMWnEL0uUaFm6ryqdbb7n3g10xLg3+zcDUahQzwmkwwlZRCJ o0/17dZRj/gUOmMT1yofDMivAPxl+QTljUhtecMhPrTuHBdSKJ62sOfNgIIUvC4R rmVBBvUBKpQEQU1ET9Cb4W0vRrJPwL44oYXxBozypjuRsCqZXCKonAQ1hv+EJhmI fE8Hu//3ky4UGQeKTS3xpWqSHP3Off8/iUkiRvu5JgTu7WERueLehr8VXbiBMRwC qhIZ4YtMzX+Fb3wEv7asPjZID4CBMO4= -----END CERTIFICATE-----Generated at Fri Oct 9 17:42:40 2026 by rpki-client