$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53690d7e-65f3-3a68-a726-e6f2fedafb01.roa File: 53690d7e-65f3-3a68-a726-e6f2fedafb01.roa (raw, json) Hash identifier: ghYLnChP2KV4FMe0B4tNM+Q6nvate171mzp5MrN/eUs= Subject key identifier: D9:A4:C2:F8:3D:14:F5:E0:14:A0:3D:0D:10:72:C7:34:CC:52:8F:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CAAF9C21EEAEEE1E166C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53690d7e-65f3-3a68-a726-e6f2fedafb01.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.198.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:aa:f9:c2:1e:ea:ee:e1:e1:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d9d49611-348e-4b92-81c7-93f297b573af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:9f:39:63:1b:27:85:39:54:aa:0b:1a:6f: 67:61:b8:3c:d2:e5:c0:8a:46:5d:24:e4:78:b3:99: 49:6b:1c:4b:39:a4:05:0c:c1:5f:6f:1a:62:69:74: 64:34:89:ab:9e:5e:a6:a2:92:94:0d:e1:61:eb:bb: 43:b1:5b:65:a8:07:2e:78:b8:77:25:7d:21:fc:23: 91:74:03:7f:5d:da:6f:a4:b5:27:98:b6:73:73:f0: 9a:2e:7c:07:ca:b5:c7:a6:c1:eb:e0:04:e5:87:ab: 98:5e:8b:84:e6:8a:d9:01:ef:22:3b:f1:ad:92:d8: d7:7f:a5:86:54:00:bd:64:2c:12:70:62:ff:5f:4f: 59:8e:29:70:c5:a6:d7:d7:ce:34:8e:71:69:5a:1a: be:ab:5f:45:75:e4:02:59:73:54:83:95:9e:9c:65: 24:1d:8c:43:08:55:3d:33:00:c0:0e:83:3c:5d:a4: 9a:f0:3c:5f:f8:55:2d:c7:4e:13:a9:25:c0:6c:94: e1:4f:b3:46:68:58:bd:2e:48:3d:4d:3b:48:c5:a6: 4b:61:c3:8d:e2:2a:ab:2e:31:67:45:81:cd:23:85: e0:4c:3e:eb:8c:11:15:e4:c2:7c:1b:9e:3b:a6:03: 9f:44:1c:47:aa:4d:0b:33:38:8a:16:46:46:9c:25: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A4:C2:F8:3D:14:F5:E0:14:A0:3D:0D:10:72:C7:34:CC:52:8F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/53690d7e-65f3-3a68-a726-e6f2fedafb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.198.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cd:60:82:63:0e:35:42:21:8c:9b:b5:78:0f:37:55:7a:b0: d7:18:24:fe:58:85:f7:65:f0:74:a9:53:26:17:e5:82:3a:8a: b2:fe:2a:c9:70:e7:7f:da:6d:76:7d:4a:8c:26:ff:d2:91:b1: da:b2:4c:f2:6c:f2:4a:bb:62:5c:8c:f4:72:40:16:d9:fe:6f: 1d:3a:06:16:f5:13:75:58:64:d0:5c:16:21:37:ef:9a:e0:e5: e5:8a:39:26:88:83:5c:5b:e7:0e:a5:ec:da:61:81:c1:9d:ba: 1a:54:a8:ef:bb:19:ff:59:58:07:b5:e4:71:48:48:86:a6:72: 30:c3:fc:de:63:cf:2f:87:90:5c:73:f5:f6:cf:5e:d0:8a:fb: fc:b7:fb:19:83:c0:8c:36:72:a0:6c:2c:b1:22:09:e4:0b:a8: 9a:59:25:22:6f:d9:3d:63:25:bf:bd:30:fd:8d:b3:d2:c2:cf: 2b:09:10:a6:a4:de:02:8a:9d:e3:65:4e:a9:91:50:47:ce:74: 6d:6d:ff:06:97:27:13:70:67:c5:2d:cf:02:dc:e6:75:35:e3: d8:fb:de:3d:51:a9:f6:18:bb:54:da:3e:85:18:a7:81:92:87: b1:cb:87:83:6f:81:e5:f8:01:7f:db:29:a4:62:27:5d:1e:2f: 30:42:2c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfKr5wh7q7uHhZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDlkNDk2MTEtMzQ4ZS00YjkyLTgxYzctOTNmMjk3YjU3M2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ifOWMbJ4U5VKoLGm9nYbg80uXAikZdJOR4 s5lJaxxLOaQFDMFfbxpiaXRkNImrnl6mopKUDeFh67tDsVtlqAcueLh3JX0h/COR dAN/XdpvpLUnmLZzc/CaLnwHyrXHpsHr4ATlh6uYXouE5orZAe8iO/GtktjXf6WG VAC9ZCwScGL/X09ZjilwxabX1840jnFpWhq+q19FdeQCWXNUg5WenGUkHYxDCFU9 MwDADoM8XaSa8Dxf+FUtx04TqSXAbJThT7NGaFi9Lkg9TTtIxaZLYcON4iqrLjFn RYHNI4XgTD7rjBEV5MJ8G547pgOfRBxHqk0LMziKFkZGnCVF6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmkwvg9FPXgFKA9DRByxzTMUo+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTM2OTBkN2UtNjVmMy0z YTY4LWE3MjYtZTZmMmZlZGFmYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXNYIJjDjVCIYybtXgPN1V6sNcYJP5Yhfdl8HSpUyYX5YI6irL+Kslw 53/abXZ9Sowm/9KRsdqyTPJs8kq7YlyM9HJAFtn+bx06Bhb1E3VYZNBcFiE375rg 5eWKOSaIg1xb5w6l7NphgcGduhpUqO+7Gf9ZWAe15HFISIamcjDD/N5jzy+HkFxz 9fbPXtCK+/y3+xmDwIw2cqBsLLEiCeQLqJpZJSJv2T1jJb+9MP2Ns9LCzysJEKak 3gKKneNlTqmRUEfOdG1t/waXJxNwZ8UtzwLc5nU149j73j1RqfYYu1TaPoUYp4GS h7HLh4NvgeX4AX/bKaRiJ10eLzBCLDc= -----END CERTIFICATE-----Generated at Wed Sep 30 11:33:58 2026 by rpki-client