$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa File: 87e18ed9-a210-3d88-b807-6e991937baa5.roa (raw, json) Hash identifier: pXQf0hBm+CwJiqdOwUkPaoN+h7ErhFSgDRKbW1ytUAo= Subject key identifier: E7:13:29:6D:E8:96:66:23:BD:52:37:85:38:67:D2:46:BD:44:76:61 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F4976B15CFBAE7588E11CA0F0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398993 IP address blocks: 104.233.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:b1:5c:fb:ae:75:88:e1:1c:a0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=18a62e35-8fce-40ad-809a-fa8b289791ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:08:57:7d:44:2a:97:54:59:ad:4f:64:03:ea: 4f:83:7b:2a:46:af:6b:38:00:1b:ac:eb:d5:42:ab: c6:b3:72:9b:25:1d:3d:f4:b3:64:39:31:2f:0a:11: da:81:0c:ef:7b:f9:27:ec:bd:01:9b:c2:8e:59:5d: 2a:b8:ca:05:1e:0c:bb:c3:41:20:93:b5:cf:dc:cf: 0b:37:6f:d7:f2:40:ed:57:e8:6a:da:e8:e2:69:45: 3e:a7:49:35:a3:ea:d5:a2:eb:86:fc:ae:60:a1:f2: ee:b4:67:89:a6:9f:e1:3b:32:08:03:3f:ec:de:2a: ed:6e:89:3b:01:9d:07:80:4c:2b:41:fc:be:65:37: e6:69:74:be:06:8d:d5:f3:ac:a6:4b:c1:66:16:f4: e2:74:a1:d1:09:7c:72:73:17:9b:d1:a8:84:55:b6: 9b:08:46:4e:89:62:4a:52:35:48:78:b3:a8:f7:69: 74:f2:1f:f1:ba:ed:24:4c:68:46:36:f7:4f:d7:dd: 76:6b:4a:c1:91:44:aa:3c:37:9d:94:20:da:3e:42: c7:c2:e3:61:61:82:36:e0:e0:68:10:0e:7b:b0:78: 19:74:af:a7:cc:0e:10:14:5f:e2:6b:ea:78:34:2a: 8b:96:de:d3:c2:8f:6d:69:b3:1e:0e:b5:49:47:19: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:13:29:6D:E8:96:66:23:BD:52:37:85:38:67:D2:46:BD:44:76:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/87e18ed9-a210-3d88-b807-6e991937baa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:58:d2:d1:34:e8:91:98:74:da:27:3a:99:0d:dd:22:89:39: 32:b5:72:4b:e6:0d:7f:92:58:70:d0:f2:b9:02:65:f9:01:bb: a0:30:8a:db:39:a8:c5:ad:49:31:c6:a9:a4:2b:00:01:0c:12: b7:a3:cf:57:7f:a5:0a:46:c4:a2:0f:c2:1f:ab:40:d9:6c:51: 90:36:3b:10:3f:d0:26:22:63:f5:64:e2:88:89:c8:3e:9a:38: 04:1c:18:22:4a:8c:54:73:d1:ba:ae:ec:e0:3c:d1:17:e3:8e: f7:6d:4a:1a:93:b8:ae:61:6b:f3:e1:83:5f:3c:8b:02:e4:99: 38:5d:e6:d8:f8:65:a6:38:23:64:b7:6e:a1:c3:a6:b7:d1:2c: 5b:f1:b8:ec:e9:a0:22:38:b8:fa:04:31:ec:ee:e4:13:8c:80: 05:01:d0:09:f5:58:a0:52:a9:38:70:25:21:fd:fc:a0:43:4c: 80:62:e3:16:c1:81:44:7f:46:ec:4e:49:39:a4:5c:55:45:8f: 43:84:62:36:46:5e:21:ce:5a:81:18:a3:67:bc:90:68:2f:92: 22:87:cb:18:a2:25:61:ff:41:f6:1a:c8:8a:3c:a5:0a:88:b2: 4c:02:fd:db:13:72:5e:f5:cc:53:82:68:16:df:74:7c:9e:cf: 7e:49:7f:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdrFc+651iOEcoPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MThhNjJlMzUtOGZjZS00MGFkLTgwOWEtZmE4YjI4OTc5MWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAhXfUQql1RZrU9kA+pPg3sqRq9rOAAbrOvV QqvGs3KbJR099LNkOTEvChHagQzve/kn7L0Bm8KOWV0quMoFHgy7w0Egk7XP3M8L N2/X8kDtV+hq2ujiaUU+p0k1o+rVouuG/K5gofLutGeJpp/hOzIIAz/s3irtbok7 AZ0HgEwrQfy+ZTfmaXS+Bo3V86ymS8FmFvTidKHRCXxycxeb0aiEVbabCEZOiWJK UjVIeLOo92l08h/xuu0kTGhGNvdP1912a0rBkUSqPDedlCDaPkLHwuNhYYI24OBo EA57sHgZdK+nzA4QFF/ia+p4NCqLlt7Two9tabMeDrVJRxk7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcTKW3olmYjvVI3hThn0ka9RHZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODdlMThlZDktYTIxMC0z ZDg4LWI4MDctNmU5OTE5MzdiYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZY0tE06JGYdNonOpkN3SKJOTK1ckvmDX+SWHDQ8rkCZfkBu6Awits5 qMWtSTHGqaQrAAEMErejz1d/pQpGxKIPwh+rQNlsUZA2OxA/0CYiY/Vk4oiJyD6a OAQcGCJKjFRz0bqu7OA80RfjjvdtShqTuK5ha/Phg188iwLkmThd5tj4ZaY4I2S3 bqHDprfRLFvxuOzpoCI4uPoEMezu5BOMgAUB0An1WKBSqThwJSH9/KBDTIBi4xbB gUR/RuxOSTmkXFVFj0OEYjZGXiHOWoEYo2e8kGgvkiKHyxiiJWH/QfYayIo8pQqI skwC/dsTcl71zFOCaBbfdHyez35Jf1Q= -----END CERTIFICATE-----Generated at Sun Oct 4 18:04:33 2026 by rpki-client