$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa File: cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa (raw, json) Hash identifier: mDmzER8zyuq5rY6z/uIY5D50R5BG6ywlrlGXlKgdXq0= Subject key identifier: EC:F0:C5:25:36:BF:17:D3:22:FD:04:E5:7D:67:58:C4:A7:BF:3A:66 Certificate issuer: /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Certificate serial: 010D0C9F4328584F71EDA646CC20967457350C60 Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 20303 IP address blocks: 104.251.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a6:46:cc:20:96:74:57:35:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=4559cd45-c576-4e2d-8ab9-61d66fd286d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:a3:be:4b:1e:e1:a7:ea:53:b1:a3:3f:5f: 3a:58:96:a2:53:72:48:b7:96:84:03:2c:78:54:9c: 71:a7:aa:92:af:1d:9d:4a:47:68:5e:ea:c5:3c:43: 54:6f:fd:32:2e:db:ba:2b:23:b6:70:01:e5:e4:b3: 1e:dd:eb:44:81:d3:1f:cf:fb:88:6b:ed:73:05:cd: 9c:d3:f5:a9:8e:d2:f4:7d:2f:1d:f1:73:b4:01:c4: 66:de:1c:09:4b:3c:b9:90:33:6b:b0:aa:65:0e:24: 1d:f9:df:a5:4d:06:d0:85:d9:b9:a6:57:0f:44:8c: 64:01:2d:52:be:5a:e4:e6:e4:1b:3c:d8:74:3a:95: 01:8a:fb:bb:eb:41:2b:af:58:30:dc:7e:7b:24:80: f6:7a:23:98:6e:9d:8b:c8:b9:2c:03:c0:dc:24:50: b5:74:2d:18:3f:fc:8d:8a:b8:7b:24:d9:8e:bc:d5: 68:45:71:c3:e1:e5:e8:8d:a9:80:f0:20:f7:20:11: 18:b8:b2:83:ce:ea:43:21:b0:db:94:8a:60:64:56: 7d:50:c0:97:23:79:4d:c3:3d:13:ca:72:89:2a:d0: 28:46:b5:57:c8:de:0c:eb:a9:a5:9c:5a:d9:d1:37: 21:e8:7d:2b:ff:60:b1:96:34:34:08:f7:fc:13:cc: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:C5:25:36:BF:17:D3:22:FD:04:E5:7D:67:58:C4:A7:BF:3A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/cea0b90a-a2c7-3440-ba62-9f8b84fa19da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl X509v3 Authority Key Identifier: keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer sbgp-ipAddrBlock: critical IPv4: 104.251.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:58:c3:e5:1c:21:26:ff:2b:f9:6b:e3:1e:ca:06:56:3e:7c: 7f:4a:85:06:bf:26:a0:14:c7:54:25:08:74:35:f7:94:b7:00: ea:ea:26:80:aa:4d:6e:91:58:9a:a1:ea:9c:8f:95:81:b0:e3: 58:ff:79:76:a3:9e:c1:da:f6:a7:1c:1f:11:0f:5b:64:bb:0c: 1d:00:cd:5a:32:58:b9:db:34:b5:3e:fe:a2:d2:7c:e1:b6:f6: da:5f:95:66:4e:b6:92:64:95:44:7e:c1:3f:97:56:f8:ff:9e: 7a:90:df:e7:ae:86:b4:d9:e4:d4:6c:bc:eb:ac:c0:b8:38:bb: 96:bf:c0:ff:23:da:ac:97:49:29:45:0b:bc:fe:64:e9:17:39: ba:0a:a1:38:11:c1:23:df:6d:59:41:85:be:06:7a:d1:40:98: e0:48:2f:5c:d8:98:14:fe:28:ee:3e:83:43:c9:f0:f8:96:19: d3:18:b8:4e:3f:26:56:c3:d6:be:d6:e4:a3:39:f7:bc:62:54: ea:1a:99:e0:6e:8f:ff:a2:dc:9c:aa:32:0a:f8:4e:f7:19:e6: 46:b3:37:dc:fa:1f:28:d2:d2:1f:ea:74:cc:83:61:2b:4d:06: 9a:8d:45:b0:81:49:b9:dd:3d:73:e5:d8:57:79:9b:a3:4e:f5: f8:91:26:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aZGzCCWdFc1DGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1 NWVmMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDU1OWNkNDUtYzU3Ni00ZTJkLThhYjktNjFkNjZmZDI4NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtijvkse4afqU7GjP186WJaiU3JIt5aEAyx4 VJxxp6qSrx2dSkdoXurFPENUb/0yLtu6KyO2cAHl5LMe3etEgdMfz/uIa+1zBc2c 0/WpjtL0fS8d8XO0AcRm3hwJSzy5kDNrsKplDiQd+d+lTQbQhdm5plcPRIxkAS1S vlrk5uQbPNh0OpUBivu760Err1gw3H57JID2eiOYbp2LyLksA8DcJFC1dC0YP/yN irh7JNmOvNVoRXHD4eXojamA8CD3IBEYuLKDzupDIbDblIpgZFZ9UMCXI3lNwz0T ynKJKtAoRrVXyN4M66mlnFrZ0Tch6H0r/2CxljQ0CPf8E8z3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzwxSU2vxfTIv0E5X1nWMSnvzpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83M2Qy ZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvY2VhMGI5MGEtYTJjNy0z NDQwLWJhNjItOWY4Yjg0ZmExOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzNkMmRiYWUtM2YxYS00ZDllLTll MDEtZjdlZjI1MGY1NWVmLzczZDJkYmFlLTNmMWEtNGQ5ZS05ZTAxLWY3ZWYyNTBm NTVlZi5jcmwwHwYDVR0jBBgwFoAUBPEO3GDPAH5AMl53FZnXvgXyBg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2Vm MjUwZjU1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRYw+UcISb/K/lr4x7KBlY+fH9KhQa/JqAUx1QlCHQ195S3AOrqJoCq TW6RWJqh6pyPlYGw41j/eXajnsHa9qccHxEPW2S7DB0AzVoyWLnbNLU+/qLSfOG2 9tpflWZOtpJklUR+wT+XVvj/nnqQ3+euhrTZ5NRsvOuswLg4u5a/wP8j2qyXSSlF C7z+ZOkXOboKoTgRwSPfbVlBhb4GetFAmOBIL1zYmBT+KO4+g0PJ8PiWGdMYuE4/ JlbD1r7W5KM597xiVOoameBuj/+i3JyqMgr4TvcZ5kazN9z6HyjS0h/qdMyDYStN BpqNRbCBSbndPXPl2Fd5m6NO9fiRJrg= -----END CERTIFICATE-----Generated at Mon Oct 12 12:26:51 2026 by rpki-client