$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa File: 8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa (raw, json) Hash identifier: Q+ifNl4bevQJleaIqC28V6LZPmdcO6SFN77r/oP1GeA= Subject key identifier: 52:29:13:C9:76:15:2D:DB:56:8E:4F:4D:C3:A9:B7:F5:45:70:3F:4E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CB446A71E7F40A570AD40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.199.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:b4:46:a7:1e:7f:40:a5:70:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b80bb26-7c4c-4335-b457-2e0a87b7b991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:f9:27:ad:dd:a1:84:07:b8:b2:35:29:ec: be:39:07:f1:3e:ce:68:e6:5d:5f:5e:fc:82:dc:72: ba:c7:58:82:c3:b0:ac:b7:2f:e9:ab:8d:68:da:3d: c3:99:b6:41:50:10:22:9a:01:a9:d4:9d:07:b9:84: ea:13:c5:0a:a9:59:c8:f4:e2:45:01:0a:2b:62:4e: c4:98:af:f9:95:0a:3d:92:0c:42:4d:36:df:62:4c: 60:8c:8f:0e:43:1d:7c:45:1b:36:19:ce:9d:6a:56: 80:d7:d9:52:68:7c:16:03:61:41:6d:e6:3f:bb:75: f8:d3:49:54:b6:a6:83:1c:c7:bc:be:0b:78:fe:7f: bc:a6:42:15:13:0c:85:6c:f4:82:48:99:ba:cc:b3: 02:ba:37:f7:f9:62:b1:4a:ca:f5:d8:30:81:f8:92: 32:73:c6:b0:ad:1c:94:c8:fb:01:16:ce:e9:c4:e8: 1f:ce:09:41:c3:9c:7b:52:5b:a7:11:04:c3:bd:b1: 9d:ce:33:11:96:dd:5b:44:f8:35:36:86:db:b7:55: 64:d3:99:3a:78:3c:45:7f:84:a5:9a:6b:26:99:ad: 49:40:b3:6b:53:62:61:64:fd:2a:62:a6:4f:32:70: 68:7d:bf:f2:c8:90:96:08:e8:1c:0a:49:5a:d4:e3: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:29:13:C9:76:15:2D:DB:56:8E:4F:4D:C3:A9:B7:F5:45:70:3F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.199.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cc:fb:32:06:41:32:1b:cb:7f:9e:e9:be:ea:48:ae:10:8a: 00:ec:8d:01:89:35:f7:60:c2:c3:11:ae:ef:1b:9a:1b:34:16: fc:fe:35:65:eb:0c:e2:ee:c9:23:f1:41:00:51:91:7e:85:ca: 58:b6:0c:31:b8:eb:0c:74:5d:ec:37:d3:c9:87:16:8f:27:61: 17:eb:01:55:72:4e:ec:b9:87:7a:8e:ea:bc:70:e6:d6:a0:1d: 0b:68:b6:16:49:ec:72:8d:5e:fc:a5:a9:07:0e:d4:f6:52:fd: 5a:8e:f1:57:b7:25:c1:41:88:de:8d:fa:89:2f:e1:72:21:c7: df:9f:d4:8b:ae:10:4e:38:13:41:0d:ee:27:fc:85:2f:d8:c8: 36:3e:26:16:4c:af:64:3e:16:79:51:d3:c4:f0:09:f6:45:96: 2a:93:f2:15:fb:ed:f5:08:65:97:7a:6c:4f:a0:37:57:9d:b1: 58:84:f8:26:8b:6b:c4:73:4a:f4:2a:6d:be:af:a4:3a:1b:2d: f3:5f:22:a6:75:76:2f:fa:4e:4e:15:0b:fa:63:86:bd:17:7e: fb:b8:2a:91:2b:6b:4e:4e:b1:ea:6a:72:d5:37:98:d6:e4:28: da:4a:df:d4:c2:3c:7a:3c:7e:f0:89:88:ba:4e:5b:ac:0b:83: 6c:cd:37:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfLRGpx5/QKVwrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWI4MGJiMjYtN2M0Yy00MzM1LWI0NTctMmUwYTg3YjdiOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApif5J63doYQHuLI1Key+OQfxPs5o5l1fXvyC 3HK6x1iCw7Csty/pq41o2j3DmbZBUBAimgGp1J0HuYTqE8UKqVnI9OJFAQorYk7E mK/5lQo9kgxCTTbfYkxgjI8OQx18RRs2Gc6dalaA19lSaHwWA2FBbeY/u3X400lU tqaDHMe8vgt4/n+8pkIVEwyFbPSCSJm6zLMCujf3+WKxSsr12DCB+JIyc8awrRyU yPsBFs7pxOgfzglBw5x7UlunEQTDvbGdzjMRlt1bRPg1Nobbt1Vk05k6eDxFf4Sl mmsmma1JQLNrU2JhZP0qYqZPMnBofb/yyJCWCOgcCkla1OMv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIpE8l2FS3bVo5PTcOpt/VFcD9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODAyNWZhZDMtYTFkMi0z MzZhLWFmZTItZTVjMWJhNWE5ZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHM+zIGQTIby3+e6b7qSK4QigDsjQGJNfdgwsMRru8bmhs0Fvz+NWXr DOLuySPxQQBRkX6Fyli2DDG46wx0Xew308mHFo8nYRfrAVVyTuy5h3qO6rxw5tag HQtothZJ7HKNXvylqQcO1PZS/VqO8Ve3JcFBiN6N+okv4XIhx9+f1IuuEE44E0EN 7if8hS/YyDY+JhZMr2Q+FnlR08TwCfZFliqT8hX77fUIZZd6bE+gN1edsViE+CaL a8RzSvQqbb6vpDobLfNfIqZ1di/6Tk4VC/pjhr0Xfvu4KpEra05OsepqctU3mNbk KNpK39TCPHo8fvCJiLpOW6wLg2zNN5c= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:14 2026 by rpki-client