$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b4eb2b8c-895e-3845-a637-76e4de2387b2.roa File: b4eb2b8c-895e-3845-a637-76e4de2387b2.roa (raw, json) Hash identifier: sCt9Eg3FdkAVj8zLDemUwX7g+rfvCmY2PXNqtg1bPJg= Subject key identifier: CA:A3:AD:A3:71:C5:6A:38:B1:C7:B4:E4:34:98:3F:8C:11:02:86:66 Certificate issuer: /CN=5d613e84-be93-4d7a-a56c-57a378f2c325 Certificate serial: 010D0C9F4328584F19FCE47D942B7D8E55BEC300 Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b4eb2b8c-895e-3845-a637-76e4de2387b2.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 104.153.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:e4:7d:94:2b:7d:8e:55:be:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=664ce23e-9bf5-45ef-888d-f726e12d9452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:fd:48:64:6d:f6:e5:c8:29:da:c6:3e:9c: 14:2e:00:1f:ed:eb:91:d9:11:36:4a:5a:6d:56:42: ee:c0:9b:0d:66:f7:01:4c:e8:57:3a:67:e5:c3:4c: 23:94:23:fc:05:1d:cc:3a:50:95:d0:3d:a4:9f:43: 48:b7:52:fa:23:ca:a8:be:31:7b:83:8a:11:3c:cc: 46:5d:07:9c:f5:a0:1f:95:06:ef:78:e7:35:27:02: b5:be:c0:4e:fb:65:bb:cd:a8:7d:03:57:1d:c8:e2: 4a:b9:b5:0e:8c:8a:56:24:bb:2d:7a:62:81:53:9c: fd:92:fe:fc:37:7f:81:6b:6b:21:54:72:8c:10:0f: 6e:fb:23:1b:6b:5a:b6:87:b4:0d:5a:0e:7c:e9:78: 3b:21:c7:8f:cd:4b:21:0a:d4:4b:b2:e7:6b:1d:1c: 92:d3:7b:e8:5a:74:a1:77:32:8b:0d:67:5b:1b:d2: 2b:1f:ea:66:1d:8e:98:5b:5d:57:b9:6e:fd:d2:be: fc:64:b4:b8:91:2b:e7:bb:04:85:ec:1b:0c:52:4c: f9:e8:28:4d:c5:13:90:7d:0a:c8:ab:61:2c:b7:54: 5c:49:4b:6a:fd:ac:12:bb:fa:eb:33:10:e8:b5:92: 50:71:1a:30:53:77:2d:c0:46:d3:34:64:45:f6:08: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A3:AD:A3:71:C5:6A:38:B1:C7:B4:E4:34:98:3F:8C:11:02:86:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/b4eb2b8c-895e-3845-a637-76e4de2387b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl X509v3 Authority Key Identifier: keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer sbgp-ipAddrBlock: critical IPv4: 104.153.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:21:ea:f8:ee:c9:e2:de:df:2b:b5:a9:ef:03:42:a8:ee:ac: 3a:d0:b4:cd:72:47:44:c5:63:a3:00:34:25:db:ad:fd:9e:ac: f1:1c:4a:31:c1:5d:67:d7:df:eb:09:a2:12:f9:b8:88:93:a1: c2:2e:de:19:f7:22:3b:ea:2a:1b:43:02:c3:76:58:00:85:60: 07:9f:66:b0:48:00:6d:71:1e:a1:0a:70:ea:a9:9b:62:8d:47: 22:31:35:3a:46:00:2a:f9:a1:bc:6d:cb:bc:2a:9b:98:95:17: 99:95:eb:25:00:03:dd:8d:57:ea:db:68:52:51:45:ec:1d:3c: 9b:2e:bb:aa:20:32:f9:36:76:68:1d:fd:ed:4a:c7:ba:76:a5: 34:33:d9:63:ee:17:07:6a:30:49:9e:e7:3d:6a:4f:ef:08:f8: 6f:88:c4:22:a0:59:fd:20:9f:3c:2a:44:36:4f:cc:84:14:f6: 8e:65:78:99:64:2d:30:81:10:d0:71:58:85:cb:a8:4a:5d:8d: d6:a7:7c:05:bb:9c:b0:ac:e9:3a:21:b4:b9:95:e8:00:96:42: 1b:db:bf:de:21:f6:4f:4c:c4:09:16:39:d9:7b:62:12:63:83: 5d:3e:a0:1f:e8:a6:4c:fe:06:a0:88:2b:9a:c1:bd:52:1c:ef: 1a:b3:7d:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/OR9lCt9jlW+wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2MTNlODQtYmU5My00ZDdhLWE1NmMtNTdhMzc4ZjJj MzI1MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NjY0Y2UyM2UtOWJmNS00NWVmLTg4OGQtZjcyNmUxMmQ5NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1z9SGRt9uXIKdrGPpwULgAf7euR2RE2Slpt VkLuwJsNZvcBTOhXOmflw0wjlCP8BR3MOlCV0D2kn0NIt1L6I8qovjF7g4oRPMxG XQec9aAflQbveOc1JwK1vsBO+2W7zah9A1cdyOJKubUOjIpWJLstemKBU5z9kv78 N3+Ba2shVHKMEA9u+yMba1q2h7QNWg586Xg7IcePzUshCtRLsudrHRyS03voWnSh dzKLDWdbG9IrH+pmHY6YW11XuW790r78ZLS4kSvnuwSF7BsMUkz56ChNxROQfQrI q2Est1RcSUtq/awSu/rrMxDotZJQcRowU3ctwEbTNGRF9ggQlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqjraNxxWo4sce05DSYP4wRAoZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZDYx M2U4NC1iZTkzLTRkN2EtYTU2Yy01N2EzNzhmMmMzMjUvYjRlYjJiOGMtODk1ZS0z ODQ1LWE2MzctNzZlNGRlMjM4N2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWQ2MTNlODQtYmU5My00ZDdhLWE1 NmMtNTdhMzc4ZjJjMzI1LzVkNjEzZTg0LWJlOTMtNGQ3YS1hNTZjLTU3YTM3OGYy YzMyNS5jcmwwHwYDVR0jBBgwFoAUg9l+5YkNlHKjca9r0BTQzHTTHZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZDYxM2U4NC1iZTkzLTRkN2EtYTU2Yy01N2Ez NzhmMmMzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGch6vjuyeLe3yu1qe8DQqjurDrQtM1yR0TFY6MANCXbrf2erPEcSjHB XWfX3+sJohL5uIiTocIu3hn3IjvqKhtDAsN2WACFYAefZrBIAG1xHqEKcOqpm2KN RyIxNTpGACr5obxty7wqm5iVF5mV6yUAA92NV+rbaFJRRewdPJsuu6ogMvk2dmgd /e1Kx7p2pTQz2WPuFwdqMEme5z1qT+8I+G+IxCKgWf0gnzwqRDZPzIQU9o5leJlk LTCBENBxWIXLqEpdjdanfAW7nLCs6TohtLmV6ACWQhvbv94h9k9MxAkWOdl7YhJj g10+oB/opkz+BqCIK5rBvVIc7xqzfas= -----END CERTIFICATE-----Generated at Sun Sep 13 10:19:25 2026 by rpki-client