$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa File: 189d52ed-0a7d-31e4-bb88-da744d1b0794.roa (raw, json) Hash identifier: xW/7Yghk7YV+niEX18EOIikL6+3DzN1dpWY1JVNnIRY= Subject key identifier: 03:6E:85:B1:8D:01:94:FE:EC:41:63:F4:F8:03:AF:7B:58:00:BC:4A Certificate issuer: /CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Certificate serial: 010D0C9F4328584F4974BDE5CFAC68FAE985A980 Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31942 IP address blocks: 104.37.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:bd:e5:cf:ac:68:fa:e9:85:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba838a3c-fa49-4059-8d3f-7d928768c2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:ba:a2:38:f3:72:7b:69:40:81:e7:cd:ec: f2:87:3e:f2:65:e8:07:f4:09:01:f6:e6:79:53:11: 41:04:34:77:b6:ed:20:77:e2:43:6d:48:c3:4b:4a: 59:bd:f7:ce:ca:a5:09:b4:e8:79:80:71:0c:f3:5a: 3b:bf:a9:3f:20:78:13:06:01:6e:c2:d6:8b:5c:a5: 02:63:ba:33:b7:ce:2c:e0:d6:0e:32:c8:17:63:20: b8:5f:01:4b:ce:92:9b:fe:5c:f3:33:0a:74:c0:5d: b7:7d:5d:19:9e:6b:40:44:52:d7:fa:6c:c3:9f:bc: 8b:ca:b3:15:55:92:b7:ba:45:d4:97:b0:74:d4:17: 89:46:9c:4d:01:e4:68:cc:70:b4:09:f8:e3:28:95: f7:67:11:79:a6:1b:01:85:30:dd:47:ee:a5:1f:7c: 59:24:ad:3f:0d:90:ab:77:87:0b:dd:c1:cb:97:ec: 6d:7e:86:30:27:65:e5:9d:ce:44:51:58:fb:4c:56: 2d:a8:31:3e:ba:ed:ce:3a:68:0d:0b:a7:04:b6:62: 82:15:2e:ff:94:c6:0d:b6:e0:69:56:a0:55:a7:0b: 83:45:ac:fe:9f:c7:0f:a8:a4:70:aa:c0:6e:82:75: bd:d1:21:34:9b:69:0d:ef:f6:2a:23:47:ce:e7:90: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6E:85:B1:8D:01:94:FE:EC:41:63:F4:F8:03:AF:7B:58:00:BC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl X509v3 Authority Key Identifier: keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer sbgp-ipAddrBlock: critical IPv4: 104.37.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f3:2c:3e:b3:ee:98:6a:cf:ce:eb:7f:31:a1:96:58:18:61: 03:be:9c:5f:c7:b3:16:9b:59:a6:1b:66:5f:8a:79:19:ad:f8: 12:27:7f:bb:92:a2:ee:70:18:a4:be:15:1c:7b:3b:36:7b:11: 34:85:08:b4:b6:1a:4c:8b:fc:49:6a:0c:5f:52:96:9b:83:19: 50:7e:16:16:cc:e2:79:a3:2d:ba:47:0d:a8:3b:df:48:3c:07: 44:83:b2:5a:8e:31:71:b0:2b:57:08:c4:62:c1:7e:4e:eb:06: 7f:59:bb:27:61:b0:5b:82:76:e8:05:cf:b6:1b:0a:10:82:91: 1a:22:78:f1:7f:96:18:97:48:08:98:0d:f5:a2:a9:db:cd:a2: 60:fc:d4:26:9a:eb:57:18:65:31:db:6f:28:30:f9:01:49:fb: 4b:a0:61:c1:ee:d1:a5:81:86:df:f6:4b:e6:d4:68:eb:92:b4: 07:ed:af:16:61:5a:d5:09:0d:b8:54:ae:94:69:eb:e0:0c:c0: 42:d8:b4:82:75:37:00:82:b2:fe:94:da:dc:9a:87:d6:bc:1f: 9a:5c:f9:03:34:36:c3:8e:ab:a8:e1:02:e8:aa:77:a4:fd:9f: 47:dc:14:75:0c:96:02:75:f3:07:71:c7:28:e2:28:18:60:27: 3e:9e:b7:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdL3lz6xo+umFqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5 ZDkyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE4MzhhM2MtZmE0OS00MDU5LThkM2YtN2Q5Mjg3NjhjMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLC6ojjzcntpQIHnzezyhz7yZegH9AkB9uZ5 UxFBBDR3tu0gd+JDbUjDS0pZvffOyqUJtOh5gHEM81o7v6k/IHgTBgFuwtaLXKUC Y7ozt84s4NYOMsgXYyC4XwFLzpKb/lzzMwp0wF23fV0ZnmtARFLX+mzDn7yLyrMV VZK3ukXUl7B01BeJRpxNAeRozHC0CfjjKJX3ZxF5phsBhTDdR+6lH3xZJK0/DZCr d4cL3cHLl+xtfoYwJ2Xlnc5EUVj7TFYtqDE+uu3OOmgNC6cEtmKCFS7/lMYNtuBp VqBVpwuDRaz+n8cPqKRwqsBugnW90SE0m2kN7/YqI0fO55ApsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANuhbGNAZT+7EFj9PgDr3tYALxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvMTg5ZDUyZWQtMGE3ZC0z MWU0LWJiODgtZGE3NDRkMWIwNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2 OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaCUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjzLD6z7phqz87rfzGhllgYYQO+nF/HsxabWaYbZl+KeRmt+BInf7uS ou5wGKS+FRx7OzZ7ETSFCLS2GkyL/ElqDF9SlpuDGVB+FhbM4nmjLbpHDag730g8 B0SDslqOMXGwK1cIxGLBfk7rBn9ZuydhsFuCdugFz7YbChCCkRoiePF/lhiXSAiY DfWiqdvNomD81Caa61cYZTHbbygw+QFJ+0ugYcHu0aWBht/2S+bUaOuStAftrxZh WtUJDbhUrpRp6+AMwELYtIJ1NwCCsv6U2tyah9a8H5pc+QM0NsOOq6jhAuiqd6T9 n0fcFHUMlgJ18wdxxyjiKBhgJz6et4Q= -----END CERTIFICATE-----Generated at Sun Sep 27 10:49:50 2026 by rpki-client