$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fa28fb-6178-36bf-9816-3aec9d64e913.roa File: f5fa28fb-6178-36bf-9816-3aec9d64e913.roa (raw, json) Hash identifier: iFPda/qhLI/9ogqM8OdlD1tj/8PqdxDl/n+Q9fVE3ds= Subject key identifier: 66:B3:49:8C:B8:39:BA:D5:62:34:3A:05:14:77:C6:D8:AC:AD:46:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CAFE25BCEED731DF52280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fa28fb-6178-36bf-9816-3aec9d64e913.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 104.196.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:af:e2:5b:ce:ed:73:1d:f5:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=91699af1-0fc3-4340-991c-a6bc620c096d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:d5:f0:39:71:15:cb:ac:ee:e8:f9:ae:68: 38:b5:63:75:39:8e:d6:18:52:d2:83:d7:f0:d8:8a: 76:a3:47:27:b5:b1:66:dc:06:92:9a:91:2b:cf:cf: 6b:01:78:be:9c:e6:a4:f5:3e:b0:58:5f:48:69:63: 05:b9:da:b4:4b:04:25:ba:3d:b4:22:48:44:b3:50: c3:b0:dc:6f:e9:56:fe:95:a6:78:7f:33:8f:9b:0b: 22:64:10:99:e6:b8:e7:3e:fc:a2:f1:0a:84:18:89: 1c:30:95:c5:3c:3a:91:38:2f:26:a0:ff:a2:bd:cd: e7:6d:8c:a8:5c:07:ff:07:6f:ac:a9:38:4c:03:43: e4:4a:85:7d:27:ed:96:2c:34:13:39:36:41:fa:0b: de:5c:da:db:b4:12:66:13:a9:2f:e9:f3:a5:7c:0c: 8d:c1:a7:a8:4c:2a:0d:28:d9:cf:bf:bb:81:45:32: 52:9e:2c:d0:85:c1:3b:d5:7d:a6:e9:40:3b:61:90: b0:c9:49:65:fe:30:6c:00:ee:25:7d:b4:3f:1a:9a: dd:bb:73:7e:8e:8a:d8:9e:a3:ab:a8:83:a8:3b:99: 39:d1:ec:2e:1d:d3:13:ce:4e:74:d6:90:ab:bf:1b: f8:70:e3:22:ec:92:be:5d:cc:89:45:ea:f5:12:d5: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:49:8C:B8:39:BA:D5:62:34:3A:05:14:77:C6:D8:AC:AD:46:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f5fa28fb-6178-36bf-9816-3aec9d64e913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.196.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:10:f7:51:ed:9b:7f:15:2f:69:43:cb:55:8e:50:71:a6:fb: a3:40:02:0a:d4:ad:7e:79:88:88:c3:03:e9:59:e1:10:75:54: 50:99:aa:a0:b5:bc:90:3f:40:4a:3e:06:92:ff:06:4e:c0:1f: 36:53:df:5d:45:3d:27:91:99:1f:1c:24:49:c3:e2:5d:a3:ec: 62:07:7a:42:66:48:d1:16:a8:9b:f7:58:09:ce:24:cc:11:6a: a1:21:fb:96:b7:45:70:81:ea:58:d8:4f:d4:51:69:88:4a:2e: 36:f1:1a:3e:1e:60:68:34:72:4a:03:30:3f:fd:23:12:f2:31: d4:64:7b:c3:fe:eb:13:15:e1:23:ca:10:0e:28:6d:e6:e1:26: ee:5e:93:dc:fa:31:bf:8a:35:42:f3:81:c8:de:a0:95:4a:5f: 43:d6:d4:a4:5d:c1:46:6c:14:90:a8:57:47:2f:55:1a:3f:e6: 2b:9d:cb:e9:7a:96:56:3d:d1:7a:dd:67:e8:11:15:53:ef:0c: 92:3f:d6:f1:66:82:d2:28:96:71:f5:59:c8:b2:59:e3:2b:6b: 24:03:fc:44:a3:c8:53:49:7d:3a:ca:98:bc:c7:9d:62:49:e6: 22:76:d8:c6:dc:62:07:f5:03:fb:6b:e1:05:8d:4b:2f:10:ec: c4:7e:aa:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfK/iW87tcx31IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTE2OTlhZjEtMGZjMy00MzQwLTk5MWMtYTZiYzYyMGMwOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSTV8DlxFcus7uj5rmg4tWN1OY7WGFLSg9fw 2Ip2o0cntbFm3AaSmpErz89rAXi+nOak9T6wWF9IaWMFudq0SwQluj20IkhEs1DD sNxv6Vb+laZ4fzOPmwsiZBCZ5rjnPvyi8QqEGIkcMJXFPDqROC8moP+ivc3nbYyo XAf/B2+sqThMA0PkSoV9J+2WLDQTOTZB+gveXNrbtBJmE6kv6fOlfAyNwaeoTCoN KNnPv7uBRTJSnizQhcE71X2m6UA7YZCwyUll/jBsAO4lfbQ/Gprdu3N+jorYnqOr qIOoO5k50ewuHdMTzk501pCrvxv4cOMi7JK+XcyJRer1EtUB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGazSYy4ObrVYjQ6BRR3xtisrUbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjVmYTI4ZmItNjE3OC0z NmJmLTk4MTYtM2FlYzlkNjRlOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQQ91Htm38VL2lDy1WOUHGm+6NAAgrUrX55iIjDA+lZ4RB1VFCZqqC1 vJA/QEo+BpL/Bk7AHzZT311FPSeRmR8cJEnD4l2j7GIHekJmSNEWqJv3WAnOJMwR aqEh+5a3RXCB6ljYT9RRaYhKLjbxGj4eYGg0ckoDMD/9IxLyMdRke8P+6xMV4SPK EA4obebhJu5ek9z6Mb+KNULzgcjeoJVKX0PW1KRdwUZsFJCoV0cvVRo/5iudy+l6 llY90XrdZ+gRFVPvDJI/1vFmgtIolnH1WciyWeMrayQD/ESjyFNJfTrKmLzHnWJJ 5iJ22MbcYgf1A/tr4QWNSy8Q7MR+qgg= -----END CERTIFICATE-----Generated at Tue Sep 29 14:27:14 2026 by rpki-client