$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/efa9f211-8876-3bab-ba2e-fdbfc52db498.roa File: efa9f211-8876-3bab-ba2e-fdbfc52db498.roa (raw, json) Hash identifier: 9RzIqyRa4lfC8GzrPYoEM9/zCTuRwXlvPxsSq3mKO3w= Subject key identifier: D3:CA:16:82:56:5D:D5:18:C8:FE:1E:5F:BC:F7:98:E3:7E:4D:3D:B0 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F9BCDE881BF9DA4A5AAF5CE68 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/efa9f211-8876-3bab-ba2e-fdbfc52db498.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 394432 IP address blocks: 104.233.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e8:81:bf:9d:a4:a5:aa:f5:ce:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=c9203687-3bd2-4fe3-90aa-e4b4f2f025b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:f2:ef:bb:2d:9e:22:6b:61:b8:49:24:8f: 3b:02:85:6b:dc:77:da:76:bb:c6:55:bb:a3:a0:6e: 8e:5d:9f:a6:66:17:85:e1:50:28:d8:8c:1b:90:7c: 3b:ab:3f:32:25:e0:86:19:6b:6c:6e:4f:cf:7a:1b: 50:c8:9e:7d:8e:15:c5:f0:3a:42:66:0b:c4:65:82: cb:89:37:f2:1a:88:37:d3:5d:c9:88:7d:8c:db:df: 63:60:aa:8a:9c:f1:04:eb:18:12:0c:f2:60:45:f8: 2e:be:93:f4:3d:63:b0:5a:93:8f:59:32:e2:77:ab: 51:bb:fd:80:d5:2a:e7:01:98:55:88:f4:10:39:6e: 01:0c:a4:bd:17:68:69:78:55:25:50:1f:49:f9:2e: c8:7a:00:af:68:ae:21:56:2e:61:8c:1e:c3:b6:c0: 01:78:1c:3e:f3:46:6b:9a:6d:37:b8:21:4b:32:93: 30:e2:45:3b:49:44:16:21:5a:e2:ab:8b:7e:94:99: 4f:5c:60:d8:14:aa:d9:54:c7:3c:90:50:28:15:90: e4:7b:59:06:27:01:fa:93:b8:dc:2e:01:8b:e6:0d: 57:28:52:03:71:e9:9f:ae:e4:75:23:c6:1b:d6:9c: 89:9f:28:b5:24:33:68:f4:91:8b:cb:aa:03:bf:b6: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CA:16:82:56:5D:D5:18:C8:FE:1E:5F:BC:F7:98:E3:7E:4D:3D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/efa9f211-8876-3bab-ba2e-fdbfc52db498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:99:fb:15:e1:08:3d:b0:20:9b:93:27:70:d2:dc:72:7b:47: b4:3f:08:d5:ea:65:d5:8e:c8:37:d3:0d:b6:9f:19:6f:f1:dc: 8d:2d:44:db:b6:e8:54:3b:97:ba:6b:7c:5f:08:0e:f7:c6:f8: d7:6b:de:9d:7a:bb:8b:95:18:bd:3f:b6:0d:96:22:56:b0:69: 4d:56:6a:f7:a7:91:e2:02:c3:11:d4:f6:f3:3e:49:a2:a6:fb: 6d:e7:92:69:87:dc:c0:5d:5a:b9:ef:bb:09:6e:49:60:5d:d7: 14:a3:69:e8:6b:ec:e8:3a:cb:b1:47:78:67:7f:3f:5c:d1:8c: 46:92:c1:2d:1d:a9:36:c5:c1:c1:d4:3d:92:c0:28:a4:96:49: b0:ad:62:8d:8c:d2:c9:d8:76:3d:8a:df:a5:dd:5f:a9:06:ef: 1c:a6:dc:4f:90:cb:5c:50:e0:42:19:10:7d:ff:ab:9d:66:67: 11:b6:17:0f:9f:ee:c9:ac:ba:db:82:38:5f:06:8b:c1:b3:a5: 6d:97:9a:80:d2:b7:0e:9b:ca:15:97:e4:4a:bb:b4:e8:ee:ca: b0:a2:58:22:17:44:ba:90:96:ef:54:2c:0b:55:60:bf:bf:17: 9b:32:89:48:d3:ea:9d:02:3a:5d:98:3f:e1:80:39:84:b9:56: 70:c9:17:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzeiBv52kpar1zmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YzkyMDM2ODctM2JkMi00ZmUzLTkwYWEtZTRiNGYyZjAyNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIby77stniJrYbhJJI87AoVr3HfadrvGVbuj oG6OXZ+mZheF4VAo2IwbkHw7qz8yJeCGGWtsbk/PehtQyJ59jhXF8DpCZgvEZYLL iTfyGog3013JiH2M299jYKqKnPEE6xgSDPJgRfguvpP0PWOwWpOPWTLid6tRu/2A 1SrnAZhViPQQOW4BDKS9F2hpeFUlUB9J+S7IegCvaK4hVi5hjB7DtsABeBw+80Zr mm03uCFLMpMw4kU7SUQWIVriq4t+lJlPXGDYFKrZVMc8kFAoFZDke1kGJwH6k7jc LgGL5g1XKFIDcemfruR1I8Yb1pyJnyi1JDNo9JGLy6oDv7YeOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPKFoJWXdUYyP4eX7z3mON+TT2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZWZhOWYyMTEtODg3Ni0z YmFiLWJhMmUtZmRiZmM1MmRiNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyZ+xXhCD2wIJuTJ3DS3HJ7R7Q/CNXqZdWOyDfTDbafGW/x3I0tRNu2 6FQ7l7prfF8IDvfG+Ndr3p16u4uVGL0/tg2WIlawaU1WavenkeICwxHU9vM+SaKm +23nkmmH3MBdWrnvuwluSWBd1xSjaehr7Og6y7FHeGd/P1zRjEaSwS0dqTbFwcHU PZLAKKSWSbCtYo2M0snYdj2K36XdX6kG7xym3E+Qy1xQ4EIZEH3/q51mZxG2Fw+f 7smsutuCOF8Gi8GzpW2XmoDStw6byhWX5Eq7tOjuyrCiWCIXRLqQlu9ULAtVYL+/ F5syiUjT6p0COl2YP+GAOYS5VnDJF2w= -----END CERTIFICATE-----Generated at Tue Oct 27 17:36:18 2026 by rpki-client