$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/560dd99e-23ac-3ac0-92a2-5e50a7f57a28.roa File: 560dd99e-23ac-3ac0-92a2-5e50a7f57a28.roa (raw, json) Hash identifier: XcRQk9Uc4mtS1Ttv0TNt4GmYMx2jXBtt0o4rDtkM/7Y= Subject key identifier: 58:37:E1:BE:9F:F0:F8:18:68:2A:6E:82:B6:A8:94:C2:4B:F4:A0:F8 Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584F99D2D84611B3BFE1ADE2E380 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/560dd99e-23ac-3ac0-92a2-5e50a7f57a28.roa Signing time: Fri 23 Oct 2026 19:58:57 +0000 ROA not before: Fri 23 Oct 2026 19:58:57 +0000 ROA not after: Thu 21 Jan 2027 20:58:57 +0000 asID: 400304 IP address blocks: 104.204.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:d2:d8:46:11:b3:bf:e1:ad:e2:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Oct 23 19:58:57 2026 GMT Not After : Jan 21 20:58:57 2027 GMT Subject: CN=f137d93d-0593-4d67-b550-66c1f84398c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:70:45:bc:75:52:a3:c7:bc:e0:5c:d8:a4: 4d:66:44:f4:2b:63:75:7f:1f:ec:e1:8b:41:92:07: 07:45:44:6f:2c:79:d8:a7:4f:2a:99:40:1d:31:e6: 5c:51:62:14:85:6c:7d:af:17:21:4d:b6:1d:7e:17: 44:b8:b5:05:69:14:54:1e:2f:b5:5b:3e:bd:25:46: ea:2f:87:df:a2:78:d1:f1:b2:97:a8:ba:09:99:9a: f8:14:77:9d:8a:82:16:b9:5c:84:32:ec:16:2a:0b: 3c:70:44:c1:2e:2d:0c:37:03:4c:7d:01:ed:7f:16: a2:43:c7:e7:c8:0f:7a:d2:6f:c1:b5:75:6c:7c:72: 27:5c:24:29:6e:a3:54:fc:b5:70:de:ef:31:50:30: f6:f6:9e:e1:3d:e9:06:5d:83:af:46:2a:ea:fb:67: 5a:ed:69:da:ab:08:cc:55:88:28:d2:3d:48:01:2c: b8:59:d2:de:4a:b3:4a:ff:6e:b6:99:55:81:fe:84: 5f:23:64:08:1b:32:f0:9b:f3:11:f0:c1:99:b6:a0: 6a:dc:d0:76:13:e2:78:75:2a:9b:2c:04:a3:c7:05: 71:28:8e:57:bc:03:ac:8a:30:6c:97:47:6d:30:9f: 21:ab:78:5b:57:8a:d8:30:7d:01:0d:1e:b5:37:f2: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:37:E1:BE:9F:F0:F8:18:68:2A:6E:82:B6:A8:94:C2:4B:F4:A0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/560dd99e-23ac-3ac0-92a2-5e50a7f57a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 104.204.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a7:c4:55:56:0f:62:5c:99:3b:62:8a:8b:23:20:73:67:12: 39:0c:ea:a1:28:5c:b2:3b:b7:8d:7d:28:1e:b8:55:8d:51:1b: 19:73:ab:57:ed:bb:ae:07:d2:78:2d:0f:3b:f0:9e:dc:56:2d: 1a:74:3d:cc:4b:23:66:43:ef:81:f8:68:fa:61:4a:b0:b5:51: 6d:19:eb:d4:11:43:08:e0:7c:9c:42:fa:78:19:a2:7a:4e:7d: 26:75:1c:3a:7c:7e:68:0b:1e:bd:14:90:d4:5d:4c:66:4c:86: 26:bc:eb:d1:f8:75:ed:95:a3:3a:d3:f6:3a:bf:5f:e9:f8:50: de:a1:42:ee:19:23:67:63:36:f6:50:92:8e:c9:9e:a8:09:6e: 14:dd:e1:99:38:3f:f8:9f:7d:b0:0c:96:5b:f5:40:59:3f:fa: 3f:d8:5a:6e:f1:36:05:ae:23:11:01:00:92:84:d0:32:a6:b8: 31:e4:dd:8b:30:c1:6c:ed:4a:03:48:ca:02:72:0f:95:03:b6: 91:99:f5:27:e1:19:e5:ea:5f:b5:84:45:1d:7b:fa:a5:8c:b1: e9:6e:0a:45:04:ea:66:2f:c5:2e:1a:06:aa:a3:26:05:74:5a: 0b:fb:df:49:34:87:50:a4:01:e9:a6:b7:e5:99:34:ed:b9:2c: e3:ab:18:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Z0thGEbO/4a3i44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI2MTAyMzE5NTg1N1oXDTI3MDEyMTIwNTg1N1owLzEtMCsGA1UEAxMk ZjEzN2Q5M2QtMDU5My00ZDY3LWI1NTAtNjZjMWY4NDM5OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaFwRbx1UqPHvOBc2KRNZkT0K2N1fx/s4YtB kgcHRURvLHnYp08qmUAdMeZcUWIUhWx9rxchTbYdfhdEuLUFaRRUHi+1Wz69JUbq L4ffonjR8bKXqLoJmZr4FHedioIWuVyEMuwWKgs8cETBLi0MNwNMfQHtfxaiQ8fn yA960m/BtXVsfHInXCQpbqNU/LVw3u8xUDD29p7hPekGXYOvRirq+2da7WnaqwjM VYgo0j1IASy4WdLeSrNK/262mVWB/oRfI2QIGzLwm/MR8MGZtqBq3NB2E+J4dSqb LASjxwVxKI5XvAOsijBsl0dtMJ8hq3hbV4rYMH0BDR61N/J9OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg34b6f8PgYaCpugraolMJL9KD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvNTYwZGQ5OWUtMjNhYy0z YWMwLTkyYTItNWU1MGE3ZjU3YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGnxFVWD2JcmTtiiosjIHNnEjkM6qEoXLI7t419KB64VY1RGxlzq1ft u64H0ngtDzvwntxWLRp0PcxLI2ZD74H4aPphSrC1UW0Z69QRQwjgfJxC+ngZonpO fSZ1HDp8fmgLHr0UkNRdTGZMhia869H4de2VozrT9jq/X+n4UN6hQu4ZI2djNvZQ ko7JnqgJbhTd4Zk4P/iffbAMllv1QFk/+j/YWm7xNgWuIxEBAJKE0DKmuDHk3Ysw wWztSgNIygJyD5UDtpGZ9SfhGeXqX7WERR17+qWMseluCkUE6mYvxS4aBqqjJgV0 Wgv730k0h1CkAemmt+WZNO25LOOrGAk= -----END CERTIFICATE-----Generated at Mon Oct 26 22:58:42 2026 by rpki-client