$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/bd24ede7-95bd-3be0-9995-86905a63b155.roa File: bd24ede7-95bd-3be0-9995-86905a63b155.roa (raw, json) Hash identifier: 9rGtL1EQa6O9rvn3OPuLIIaHnsXyuufdXrVzMi6eIXo= Subject key identifier: 34:36:CA:0F:4A:6E:64:08:C1:07:26:CA:77:9B:15:9C:AE:8E:34:99 Certificate issuer: /CN=c9b2f783-ae49-438b-a994-34e0ab78157d Certificate serial: 010D0C9F4328584FA16332376A3221208E2563C0 Authority key identifier: 38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/bd24ede7-95bd-3be0-9995-86905a63b155.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 36352 IP address blocks: 104.237.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:32:37:6a:32:21:20:8e:25:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b2f783-ae49-438b-a994-34e0ab78157d Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=d3110202-3506-41b8-9a62-a290921d1aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:c1:89:ad:f0:49:11:6e:fd:54:ce:30:ce: d7:20:17:91:3e:da:cc:63:12:8a:2d:6e:1d:75:11: c1:5f:42:7b:39:9e:ee:e7:e4:61:44:2f:94:50:41: 9a:fc:22:ee:d9:b1:8d:10:79:bf:20:8e:4e:b5:e6: 4f:19:f7:94:f5:01:2d:25:d7:d5:4d:b2:eb:77:7a: 23:ac:70:27:11:a1:af:db:28:bb:47:e0:43:6e:4c: a3:3e:3a:33:3d:02:b8:1c:65:e6:73:5d:d1:e1:18: c9:01:25:54:4d:62:ca:78:ed:59:ef:0a:24:4d:6c: 53:79:6f:90:b7:3c:46:2b:6d:5d:48:e9:f9:1a:c4: 6d:c3:78:68:0d:03:68:86:0c:49:8d:60:f1:0d:12: 07:c5:47:f7:cd:33:26:31:a9:99:e4:5b:04:6b:8b: 66:b3:96:20:57:d6:01:de:9e:15:95:66:45:e0:2b: dd:a0:f6:b7:31:5e:ce:3b:17:7d:8f:19:8f:d4:f0: 1c:89:b3:14:9c:dc:9e:a2:2a:32:de:03:d8:bd:61: f6:bf:2b:66:15:cd:01:de:a1:9e:0f:b4:0b:8d:10: ca:e3:f4:c2:7d:35:eb:46:ec:31:fa:16:42:70:d7: 20:3e:67:e1:53:84:27:c2:ea:17:7a:3f:40:a5:38: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:36:CA:0F:4A:6E:64:08:C1:07:26:CA:77:9B:15:9C:AE:8E:34:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/bd24ede7-95bd-3be0-9995-86905a63b155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.crl X509v3 Authority Key Identifier: keyid:38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer sbgp-ipAddrBlock: critical IPv4: 104.237.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:14:98:83:da:83:a9:a4:4a:87:32:3b:ab:33:5e:42:bf:4d: 96:73:ba:38:f8:b2:cd:d4:db:54:7e:67:db:75:6c:27:17:0c: c8:85:f8:75:40:ce:48:02:b8:20:ac:ec:75:ea:21:a7:31:34: 31:e8:e6:30:f6:69:3f:76:b8:c7:0c:e0:99:82:55:79:8e:bd: 66:8b:b7:93:f9:32:3b:72:62:97:a3:bf:11:19:46:58:56:17: 0e:c5:ee:8b:04:f5:93:b0:88:e3:34:80:4f:3c:f1:98:f9:4c: 68:32:48:8a:82:60:64:fc:64:7e:47:b7:fb:08:35:ff:70:c9: 08:20:7f:d1:1f:cc:9e:57:77:75:cc:8e:0f:c7:74:84:86:a3: 90:0e:9f:26:f7:aa:ae:b2:14:c5:7d:cc:ab:b9:16:f7:7a:da: f4:97:c3:25:ad:33:bc:37:a2:1d:a5:b1:22:8b:da:17:61:c8: b4:0b:73:8b:99:7e:45:01:3d:04:0b:aa:71:82:64:6d:4c:4c: 2a:e4:c1:4d:a5:b7:8f:0c:3b:8e:e8:9e:ea:64:88:b3:f1:fb: c5:a0:84:81:c7:41:7d:f0:fe:a5:ad:10:31:56:c6:b9:8d:a9: f8:96:ab:47:46:7f:ba:54:97:a3:11:a8:61:f3:13:dc:ff:5a: 4f:5a:ad:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzI3ajIhII4lY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzliMmY3ODMtYWU0OS00MzhiLWE5OTQtMzRlMGFiNzgx NTdkMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk ZDMxMTAyMDItMzUwNi00MWI4LTlhNjItYTI5MDkyMWQxYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwonBia3wSRFu/VTOMM7XIBeRPtrMYxKKLW4d dRHBX0J7OZ7u5+RhRC+UUEGa/CLu2bGNEHm/II5OteZPGfeU9QEtJdfVTbLrd3oj rHAnEaGv2yi7R+BDbkyjPjozPQK4HGXmc13R4RjJASVUTWLKeO1Z7wokTWxTeW+Q tzxGK21dSOn5GsRtw3hoDQNohgxJjWDxDRIHxUf3zTMmMamZ5FsEa4tms5YgV9YB 3p4VlWZF4CvdoPa3MV7OOxd9jxmP1PAcibMUnNyeoioy3gPYvWH2vytmFc0B3qGe D7QLjRDK4/TCfTXrRuwx+hZCcNcgPmfhU4QnwuoXej9ApTivvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ2yg9KbmQIwQcmynebFZyujjSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWIy Zjc4My1hZTQ5LTQzOGItYTk5NC0zNGUwYWI3ODE1N2QvYmQyNGVkZTctOTViZC0z YmUwLTk5OTUtODY5MDVhNjNiMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzliMmY3ODMtYWU0OS00MzhiLWE5 OTQtMzRlMGFiNzgxNTdkL2M5YjJmNzgzLWFlNDktNDM4Yi1hOTk0LTM0ZTBhYjc4 MTU3ZC5jcmwwHwYDVR0jBBgwFoAUOGWW4F6KJ58VELCmXiVz8mBXVr8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOWIyZjc4My1hZTQ5LTQzOGItYTk5NC0zNGUw YWI3ODE1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwUmIPag6mkSocyO6szXkK/TZZzujj4ss3U21R+Z9t1bCcXDMiF+HVA zkgCuCCs7HXqIacxNDHo5jD2aT92uMcM4JmCVXmOvWaLt5P5MjtyYpejvxEZRlhW Fw7F7osE9ZOwiOM0gE888Zj5TGgySIqCYGT8ZH5Ht/sINf9wyQggf9EfzJ5Xd3XM jg/HdISGo5AOnyb3qq6yFMV9zKu5Fvd62vSXwyWtM7w3oh2lsSKL2hdhyLQLc4uZ fkUBPQQLqnGCZG1MTCrkwU2lt48MO47onupkiLPx+8WghIHHQX3w/qWtEDFWxrmN qfiWq0dGf7pUl6MRqGHzE9z/Wk9arZY= -----END CERTIFICATE-----Generated at Wed Nov 4 17:06:17 2026 by rpki-client