$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa File: 0facca71-107b-3125-9ee8-6fef371f0b10.roa (raw, json) Hash identifier: QUVpTp6joPMqJSGEwzu8lFdCtbR1+lCvlogRHQ/Z/7k= Subject key identifier: 22:4D:97:F1:FD:97:BD:D4:1B:F9:FA:03:50:D0:D6:41:A4:F4:7F:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CA1B2D03C0C1E9276D080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.154.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:a1:b2:d0:3c:0c:1e:92:76:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f60b01c4-5540-499a-b547-f0a869beb568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:45:ac:bd:7a:93:04:e5:19:91:d9:44:e6:d6: 76:30:72:18:0c:2c:37:b7:4f:91:aa:25:97:2c:24: d1:94:ce:07:4f:5a:c3:21:bc:a7:d3:b8:b9:f0:75: ca:4f:05:a6:e6:5f:6d:9e:aa:2b:ba:81:ef:f8:fd: 6d:cd:5b:88:8a:f7:49:3c:79:59:21:d9:5b:77:85: 03:ba:4a:65:b5:98:da:7b:1a:1b:da:b6:fa:a2:d7: 3c:91:79:d6:89:0f:1f:e7:53:75:2e:c6:67:ad:51: 3a:24:aa:31:36:03:01:59:23:ed:6b:79:b3:6b:2b: dd:8c:c9:e3:5e:4a:ef:d0:c9:21:63:f8:4d:f5:4a: e2:05:5e:07:a1:42:3b:62:88:fb:49:c7:c8:8f:b0: 47:4c:ba:b9:c7:83:fd:0c:97:ea:88:ce:9c:97:a4: 30:8a:95:9f:e4:33:9e:7d:a4:a6:73:e4:64:0b:39: 29:b0:7b:12:72:db:2c:58:a1:38:9a:fe:bb:ef:f0: f7:e6:a3:65:bd:2b:98:6d:88:bf:f2:10:f7:76:81: ba:e8:74:82:50:54:fb:d2:9d:de:9b:33:ec:1c:1a: e8:88:b1:17:cc:47:3c:dd:5e:ce:00:fd:b0:cb:4e: a1:24:e2:8d:5e:7a:3b:88:a1:08:5c:3f:44:b3:3b: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4D:97:F1:FD:97:BD:D4:1B:F9:FA:03:50:D0:D6:41:A4:F4:7F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0facca71-107b-3125-9ee8-6fef371f0b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e4:cb:21:e7:94:6d:6a:ea:cf:6b:eb:c8:be:15:d1:03:fe: 7c:47:00:73:d1:57:29:48:66:43:08:fc:0e:84:95:93:f6:ce: 39:0a:93:2a:8d:e8:71:45:82:7e:bd:1b:53:81:45:f3:9e:0f: cc:22:e4:2f:e3:d8:c6:aa:bf:d2:4a:9d:8d:dc:43:55:a8:ac: 4b:da:7d:38:46:eb:be:a7:9c:20:76:bc:20:da:59:a5:77:3d: 7b:fc:54:46:17:c3:2d:5c:2f:68:7a:08:93:7e:01:a8:8b:a3: e3:6d:3b:83:0b:8f:33:c6:a3:80:5e:03:da:26:7c:96:46:81: 7d:ea:f3:79:08:83:ad:6c:e8:44:34:cb:53:de:8a:a5:25:4f: 3b:02:cf:09:da:d0:88:25:fe:dd:8f:f3:4d:e7:3c:99:33:ff: c1:27:ae:12:72:2d:31:4a:42:ce:fb:14:43:57:6c:d1:0a:cc: e7:8b:11:14:0d:a5:9c:b1:5c:72:60:ff:05:2c:45:10:e4:f6: 67:dc:83:83:a0:67:bc:f4:6d:1c:e0:6b:03:c7:20:4b:3f:ae: 62:8b:c6:29:db:1b:67:fb:96:32:0d:79:a9:2a:c2:be:6e:3f: 88:30:68:88:81:64:76:28:1e:88:c3:40:07:2d:a8:f5:b4:b8: 2a:9c:fc:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfKGy0DwMHpJ20IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjYwYjAxYzQtNTU0MC00OTlhLWI1NDctZjBhODY5YmViNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EWsvXqTBOUZkdlE5tZ2MHIYDCw3t0+RqiWX LCTRlM4HT1rDIbyn07i58HXKTwWm5l9tnqoruoHv+P1tzVuIivdJPHlZIdlbd4UD ukpltZjaexob2rb6otc8kXnWiQ8f51N1LsZnrVE6JKoxNgMBWSPta3mzayvdjMnj Xkrv0MkhY/hN9UriBV4HoUI7Yoj7ScfIj7BHTLq5x4P9DJfqiM6cl6QwipWf5DOe faSmc+RkCzkpsHsSctssWKE4mv677/D35qNlvSuYbYi/8hD3doG66HSCUFT70p3e mzPsHBroiLEXzEc83V7OAP2wy06hJOKNXno7iKEIXD9EszvuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJNl/H9l73UG/n6A1DQ1kGk9H/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZhY2NhNzEtMTA3Yi0z MTI1LTllZTgtNmZlZjM3MWYwYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaJrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvkyyHnlG1q6s9r68i+FdED/nxHAHPRVylIZkMI/A6ElZP2zjkKkyqN 6HFFgn69G1OBRfOeD8wi5C/j2Maqv9JKnY3cQ1WorEvafThG676nnCB2vCDaWaV3 PXv8VEYXwy1cL2h6CJN+AaiLo+NtO4MLjzPGo4BeA9omfJZGgX3q83kIg61s6EQ0 y1PeiqUlTzsCzwna0Igl/t2P803nPJkz/8EnrhJyLTFKQs77FENXbNEKzOeLERQN pZyxXHJg/wUsRRDk9mfcg4OgZ7z0bRzgawPHIEs/rmKLxinbG2f7ljINeakqwr5u P4gwaIiBZHYoHojDQActqPW0uCqc/ME= -----END CERTIFICATE-----Generated at Wed Oct 7 09:12:49 2026 by rpki-client