$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa File: 1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa (raw, json) Hash identifier: yb+hD9Ye4WVFLeB3bNB6FcAdxoVKsvLZwo0VzT9zan8= Subject key identifier: 91:3E:BF:71:F5:F8:3F:BF:7C:A3:E1:77:26:52:F1:4B:94:C3:E9:EC Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F374D4263EE88A43856B79360 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 104.156.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:42:63:ee:88:a4:38:56:b7:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=bc32489a-8f9e-43ba-b8ea-ff4144fde4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:36:d1:d9:36:ad:61:36:93:e3:6c:ed:4f: 47:63:87:d4:8f:74:63:7f:38:98:0e:47:e4:f9:de: f6:30:6d:0a:47:ef:91:65:03:b5:24:26:7c:e8:64: 79:a4:24:f4:71:0c:0a:a0:d2:20:3b:7b:bf:75:c9: ac:0d:c6:38:7a:7c:1c:77:53:24:a5:42:23:11:97: 46:f9:cb:1a:c3:c7:60:33:8e:42:8b:4c:a7:dc:0e: 9f:98:3d:21:a0:98:41:e8:67:f3:80:43:bb:bf:4d: 5d:4d:1c:f4:be:49:77:1c:c7:4a:af:37:19:1b:4a: 47:3a:cf:bb:ad:65:30:69:8f:1d:98:97:f1:e7:dc: 25:ec:a2:fe:bd:1e:0c:eb:14:c8:4d:c9:28:16:ad: fa:1d:33:4e:b0:f7:f2:6c:e8:eb:e2:b5:80:04:2e: a6:85:df:77:e1:c0:9b:67:08:70:ed:d1:6d:90:10: ef:a0:04:24:e9:0c:10:d6:cf:1a:97:de:a7:1b:d7: 58:0a:a3:d7:af:e7:c0:e0:1f:a2:43:3d:96:bb:1a: d4:a3:40:65:3f:32:b7:49:c3:d7:a9:c7:0d:b5:11: a8:92:31:a4:2f:89:9b:aa:8a:cb:65:24:67:1b:c4: 78:99:df:71:15:ad:18:4f:31:6c:af:4d:06:eb:39: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:BF:71:F5:F8:3F:BF:7C:A3:E1:77:26:52:F1:4B:94:C3:E9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cb6a1f1-0a90-34d1-9a22-5303c1f47a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 104.156.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d1:14:36:e9:ac:db:fa:85:af:61:ac:de:86:0f:e6:00:c7: 32:02:51:dd:a1:31:49:d6:20:fa:13:3c:c8:91:e1:20:47:e0: dd:bd:ff:12:ad:d8:b1:e2:72:85:32:9c:07:84:c8:d7:d6:ec: 1e:1a:ee:19:e8:41:df:f7:53:61:b7:0c:2b:09:fe:34:5b:33: 3b:18:eb:44:7f:30:4d:a4:7c:2c:ba:26:cf:da:49:bb:15:b1: 23:0b:ef:d0:6f:8c:07:eb:b7:ea:07:70:66:c0:db:00:6b:8a: 5e:72:b4:d5:36:01:57:84:bc:bf:f2:ce:b9:1a:87:7a:06:fd: 19:e4:8d:34:05:ed:24:80:8a:33:18:96:48:5d:33:61:fd:48: a4:b7:97:51:96:7e:e1:00:f3:2b:7b:9a:8a:ba:94:92:72:18: e0:9d:b4:62:ab:33:26:9c:a9:59:28:d9:0f:ed:e9:e7:d3:41: bb:6c:14:8c:99:6d:67:57:be:cd:a6:ac:d7:0a:15:1a:8b:22: c6:57:87:14:6e:a5:ba:0f:aa:ce:b1:00:a4:71:f9:f3:49:6c: ee:ee:ec:c3:c1:87:f6:ab:ea:99:8b:77:11:60:d9:97:29:52: 16:92:a5:01:fb:1c:f4:6e:45:04:eb:78:53:2e:e7:e3:59:d0: 47:56:89:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TUJj7oikOFa3k2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk YmMzMjQ4OWEtOGY5ZS00M2JhLWI4ZWEtZmY0MTQ0ZmRlNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KU20dk2rWE2k+Ns7U9HY4fUj3RjfziYDkfk +d72MG0KR++RZQO1JCZ86GR5pCT0cQwKoNIgO3u/dcmsDcY4enwcd1MkpUIjEZdG +csaw8dgM45Ci0yn3A6fmD0hoJhB6GfzgEO7v01dTRz0vkl3HMdKrzcZG0pHOs+7 rWUwaY8dmJfx59wl7KL+vR4M6xTITckoFq36HTNOsPfybOjr4rWABC6mhd934cCb Zwhw7dFtkBDvoAQk6QwQ1s8al96nG9dYCqPXr+fA4B+iQz2WuxrUo0BlPzK3ScPX qccNtRGokjGkL4mbqorLZSRnG8R4md9xFa0YTzFsr00G6zn11wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJE+v3H1+D+/fKPhdyZS8UuUw+nsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMWNiNmExZjEtMGE5MC0z NGQxLTlhMjItNTMwM2MxZjQ3YTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3RFDbprNv6ha9hrN6GD+YAxzICUd2hMUnWIPoTPMiR4SBH4N29/xKt 2LHicoUynAeEyNfW7B4a7hnoQd/3U2G3DCsJ/jRbMzsY60R/ME2kfCy6Js/aSbsV sSML79BvjAfrt+oHcGbA2wBril5ytNU2AVeEvL/yzrkah3oG/RnkjTQF7SSAijMY lkhdM2H9SKS3l1GWfuEA8yt7moq6lJJyGOCdtGKrMyacqVko2Q/t6efTQbtsFIyZ bWdXvs2mrNcKFRqLIsZXhxRupboPqs6xAKRx+fNJbO7u7MPBh/ar6pmLdxFg2Zcp UhaSpQH7HPRuRQTreFMu5+NZ0EdWiSk= -----END CERTIFICATE-----Generated at Mon Sep 28 22:09:28 2026 by rpki-client