$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/3c927ea3-a71e-3cf9-9a24-4a3ce76b9ca4.roa File: 3c927ea3-a71e-3cf9-9a24-4a3ce76b9ca4.roa (raw, json) Hash identifier: Bax4DkNVHNTqKTXH/I9CPfBAVBxIusAhGLTpnKT/EP0= Subject key identifier: AC:D9:4C:5A:96:AF:26:32:61:9A:C1:E0:16:ED:D0:D7:9D:DA:C2:14 Certificate issuer: /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Certificate serial: 010D0C9F4328584EA787728B2AFDB41AE2CA9500 Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/3c927ea3-a71e-3cf9-9a24-4a3ce76b9ca4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 27425 IP address blocks: 104.36.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:72:8b:2a:fd:b4:1a:e2:ca:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4c800776-e41c-4562-ad12-537ae8cb38a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ab:47:49:d1:7c:f3:36:a1:2c:91:cd:98:d6: 26:54:ea:79:21:c2:f7:68:f0:7e:72:6b:06:eb:aa: af:4c:cf:d4:a7:f9:77:e7:74:75:24:1b:ff:8e:bf: 95:8c:c1:46:24:e4:eb:87:74:82:95:6a:5d:ff:8a: 35:09:b5:af:07:27:fd:b2:c2:31:c9:c0:4b:89:3e: fc:47:e7:a2:cf:79:62:d0:bb:1a:e8:bd:11:9c:b5: 20:d0:20:43:87:b5:33:f4:4b:ae:44:19:23:d9:8d: a0:32:71:f3:03:4e:18:ac:1a:b9:6a:ee:8d:78:2a: f8:9f:92:d5:26:57:25:d6:2f:8a:57:14:6f:f5:e3: f3:37:9b:42:36:f8:7c:5f:2d:45:9f:13:a4:4a:4a: 31:e6:6e:6c:55:5b:6b:76:6d:59:fb:11:31:ef:70: e8:6b:c1:58:20:67:76:24:18:67:dc:6e:5e:89:7c: 44:f7:38:e8:16:56:d3:f6:07:88:e8:e5:a3:a5:88: c2:47:34:b7:99:5b:00:20:3e:4d:99:d2:37:9e:71: 4e:4c:9b:77:28:6f:ee:69:b4:d6:ea:6d:10:71:b8: 27:db:32:87:25:5f:d4:c8:82:da:70:65:c1:86:0d: ba:51:d1:75:84:62:a7:c9:61:ff:75:c4:4e:23:99: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:4C:5A:96:AF:26:32:61:9A:C1:E0:16:ED:D0:D7:9D:DA:C2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/3c927ea3-a71e-3cf9-9a24-4a3ce76b9ca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl X509v3 Authority Key Identifier: keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer sbgp-ipAddrBlock: critical IPv4: 104.36.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6c:41:9f:78:dd:2b:33:89:06:cb:5d:68:a6:5f:73:f7:05: 38:84:02:3c:d7:e6:35:64:7c:6f:63:2c:54:c5:99:dc:93:ea: 5f:9b:71:ea:eb:cc:4b:68:ec:b0:04:3b:c3:63:3f:e8:4d:02: 54:65:dd:a1:54:20:cb:39:a2:2c:dc:d2:6a:00:2b:03:85:66: 8d:fc:a5:1e:a9:9c:c2:7c:6a:bb:d2:7e:20:6f:17:01:60:6e: 1b:35:4d:55:c9:41:6b:46:1b:b4:c3:d3:5e:7d:d0:e8:fa:e3: 0d:65:5b:b0:52:12:80:e2:6c:eb:03:a7:ac:ea:b0:e7:9a:19: ce:72:36:a6:44:4a:7b:5f:fe:29:77:e0:1d:07:52:c7:49:96: e1:e4:2e:a9:77:f1:f8:f1:90:b1:11:c9:0a:d8:6c:49:a6:5a: bd:04:70:32:76:7d:01:59:61:77:ee:dd:2a:e4:fe:6c:d9:4c: 09:4a:6f:51:cd:31:2d:92:ff:35:9a:43:d2:de:fa:e1:9a:92: 6b:d4:75:34:4b:a2:b7:b6:0c:c8:e9:6f:82:c9:1a:65:31:3e: 48:09:f5:e4:c3:8b:30:a7:b8:3d:3c:0e:93:37:85:ed:8e:d9: 1d:e5:3c:e1:f6:4a:fa:f5:fd:8b:e0:41:d9:fc:d5:05:b3:f8: 68:cb:b2:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3KLKv20GuLKlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI3OWRkZjgtM2U2Ni00NWNmLTg5NTUtNDUyZmJlNjUy YzBjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGM4MDA3NzYtZTQxYy00NTYyLWFkMTItNTM3YWU4Y2IzOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKtHSdF88zahLJHNmNYmVOp5IcL3aPB+cmsG 66qvTM/Up/l353R1JBv/jr+VjMFGJOTrh3SClWpd/4o1CbWvByf9ssIxycBLiT78 R+eiz3li0Lsa6L0RnLUg0CBDh7Uz9EuuRBkj2Y2gMnHzA04YrBq5au6NeCr4n5LV Jlcl1i+KVxRv9ePzN5tCNvh8Xy1FnxOkSkox5m5sVVtrdm1Z+xEx73Doa8FYIGd2 JBhn3G5eiXxE9zjoFlbT9geI6OWjpYjCRzS3mVsAID5NmdI3nnFOTJt3KG/uabTW 6m0Qcbgn2zKHJV/UyILacGXBhg26UdF1hGKnyWH/dcROI5llKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzZTFqWryYyYZrB4Bbt0Ned2sIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5 ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJmYmU2NTJjMGMvM2M5MjdlYTMtYTcxZS0z Y2Y5LTlhMjQtNGEzY2U3NmI5Y2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI3OWRkZjgtM2U2Ni00NWNmLTg5 NTUtNDUyZmJlNjUyYzBjLzQyNzlkZGY4LTNlNjYtNDVjZi04OTU1LTQ1MmZiZTY1 MmMwYy5jcmwwHwYDVR0jBBgwFoAUyqJkG6e3TH6KYINPDkK7eKRQ8IQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80Mjc5ZGRmOC0zZTY2LTQ1Y2YtODk1NS00NTJm YmU2NTJjMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdsQZ943SsziQbLXWimX3P3BTiEAjzX5jVkfG9jLFTFmdyT6l+bcerr zEto7LAEO8NjP+hNAlRl3aFUIMs5oizc0moAKwOFZo38pR6pnMJ8arvSfiBvFwFg bhs1TVXJQWtGG7TD01590Oj64w1lW7BSEoDibOsDp6zqsOeaGc5yNqZESntf/il3 4B0HUsdJluHkLql38fjxkLERyQrYbEmmWr0EcDJ2fQFZYXfu3Srk/mzZTAlKb1HN MS2S/zWaQ9Le+uGakmvUdTRLore2DMjpb4LJGmUxPkgJ9eTDizCnuD08DpM3he2O 2R3lPOH2Svr1/YvgQdn81QWz+GjLsrk= -----END CERTIFICATE-----Generated at Fri Sep 11 14:48:56 2026 by rpki-client