$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa File: 4fb9a481-635c-333e-8373-3856a78d029c.roa (raw, json) Hash identifier: 9AZHXLUFFTPbuF5pQr1k+vl7mDiXlapm8XIOho7ux8I= Subject key identifier: CC:85:2E:4B:C7:5D:5E:DC:13:9A:67:23:2A:40:0A:12:E7:E1:0C:89 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F4976B1415CA12727E4796C40 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398993 IP address blocks: 104.233.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:b1:41:5c:a1:27:27:e4:79:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=68848973-bc44-4399-ab1d-e234be4030fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:07:1e:9f:85:f8:c2:61:dd:cb:8c:a6:78: 82:a6:61:62:dc:a5:b3:e3:64:1b:ee:b6:0b:7f:19: 78:12:c4:a7:61:9f:d3:f8:e6:e0:f2:f0:c1:44:d9: 34:28:ec:74:ba:a7:15:23:01:64:5a:f6:f6:ee:66: 9d:18:7d:78:00:c0:b0:83:c6:8e:e9:46:88:4c:92: 79:35:77:f7:bb:42:06:1a:ee:78:9b:ce:25:b8:3f: 29:99:43:ed:36:8b:3a:c4:d5:14:d4:c9:04:0d:78: 95:75:90:8b:38:78:2e:15:49:1b:d6:03:84:62:0f: 8a:5c:54:62:f4:fa:73:38:db:11:69:6f:9a:56:6e: 44:a3:98:d2:04:f1:c1:f5:d2:6c:11:e3:e9:15:04: 5e:48:aa:25:73:3b:4e:95:7e:1d:da:90:ce:9d:f8: 41:aa:6b:8d:7e:94:62:44:2e:2c:7d:1a:18:9c:61: 4e:6d:31:c0:1f:78:93:c6:50:c3:2d:49:59:82:80: 7d:a9:1d:ee:28:a6:b0:29:f4:23:97:8d:b8:dc:42: 8e:20:eb:18:39:fb:11:ed:c4:ed:99:d0:d6:11:77: c0:e0:a4:bc:d0:ae:f7:5a:6b:34:35:12:80:41:a3: 27:25:e8:00:10:42:f3:a0:b4:c5:d4:c7:f4:8e:ac: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:2E:4B:C7:5D:5E:DC:13:9A:67:23:2A:40:0A:12:E7:E1:0C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4fb9a481-635c-333e-8373-3856a78d029c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ee:0d:0c:92:e6:ea:de:3e:13:f6:08:bf:63:18:fb:95:f3: f5:0e:98:e1:77:b7:1d:08:7b:cd:d6:8a:9e:7f:8e:35:9d:bd: 51:0e:aa:5c:8f:89:92:26:b0:22:de:9a:a7:09:2d:4a:21:4f: 36:fd:7d:76:4a:b6:cd:b3:35:7c:1e:cc:4d:6c:f8:1b:17:5c: f4:a4:76:3d:4d:74:22:e4:18:c6:ce:d3:1e:1b:ec:5f:c9:35: 64:60:6c:35:34:43:5f:35:72:bc:28:0d:1e:1b:02:ec:ad:56: 4e:2f:5f:db:91:73:66:56:47:17:5e:66:79:a4:e8:18:50:11: 00:86:b8:0e:41:df:d7:7f:86:cf:17:00:67:fb:f8:51:99:3d: fd:d6:91:0e:af:78:ea:07:8a:77:ee:dd:41:00:42:67:fc:f4: b8:68:52:f0:86:49:65:cf:04:48:de:14:ca:ae:a7:8f:fc:00: 09:0a:ff:a1:98:13:cb:a0:0d:95:f0:1f:7e:fa:a0:1e:00:84: a4:87:7a:78:d0:64:24:cf:21:fb:95:57:97:11:bd:e7:47:25: 26:6d:6e:71:b3:f8:f8:89:fa:f8:e9:b6:aa:31:46:33:a8:8f: 75:93:90:59:46:09:44:27:6f:c3:07:6b:03:c5:e9:48:a5:b4: db:5e:01:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdrFBXKEnJ+R5bEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Njg4NDg5NzMtYmM0NC00Mzk5LWFiMWQtZTIzNGJlNDAzMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmYHHp+F+MJh3cuMpniCpmFi3KWz42Qb7rYL fxl4EsSnYZ/T+Obg8vDBRNk0KOx0uqcVIwFkWvb27madGH14AMCwg8aO6UaITJJ5 NXf3u0IGGu54m84luD8pmUPtNos6xNUU1MkEDXiVdZCLOHguFUkb1gOEYg+KXFRi 9PpzONsRaW+aVm5Eo5jSBPHB9dJsEePpFQReSKolcztOlX4d2pDOnfhBqmuNfpRi RC4sfRoYnGFObTHAH3iTxlDDLUlZgoB9qR3uKKawKfQjl4243EKOIOsYOfsR7cTt mdDWEXfA4KS80K73Wms0NRKAQaMnJegAEELzoLTF1Mf0jqzDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyFLkvHXV7cE5pnIypAChLn4QyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNGZiOWE0ODEtNjM1Yy0z MzNlLTgzNzMtMzg1NmE3OGQwMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALuDQyS5urePhP2CL9jGPuV8/UOmOF3tx0Ie83Wip5/jjWdvVEOqlyP iZImsCLemqcJLUohTzb9fXZKts2zNXwezE1s+BsXXPSkdj1NdCLkGMbO0x4b7F/J NWRgbDU0Q181crwoDR4bAuytVk4vX9uRc2ZWRxdeZnmk6BhQEQCGuA5B39d/hs8X AGf7+FGZPf3WkQ6veOoHinfu3UEAQmf89LhoUvCGSWXPBEjeFMqup4/8AAkK/6GY E8ugDZXwH376oB4AhKSHenjQZCTPIfuVV5cRvedHJSZtbnGz+PiJ+vjptqoxRjOo j3WTkFlGCUQnb8MHawPF6UiltNteAbA= -----END CERTIFICATE-----Generated at Sat Oct 10 16:04:24 2026 by rpki-client