$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d0b13fd5-cc52-3554-a9ea-111a7e7df40d.roa File: d0b13fd5-cc52-3554-a9ea-111a7e7df40d.roa (raw, json) Hash identifier: lwbyuYZWuuSiqY4l3c0uR7LDfYDFwwz7r9t5hnV4fJQ= Subject key identifier: 12:3C:42:94:73:82:95:97:56:D0:BE:83:CB:04:5C:46:8D:17:38:D2 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EC0A70A83CC91547ABD071F40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d0b13fd5-cc52-3554-a9ea-111a7e7df40d.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 212238 IP address blocks: 104.140.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:0a:83:cc:91:54:7a:bd:07:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=5a939d3e-3c87-4f80-8280-e80897f21a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:8c:87:27:37:79:4c:b4:f7:36:82:7b:9a: 7b:c8:00:97:ac:50:bd:b3:06:bd:0f:b2:fd:59:1e: 6e:ce:60:9d:b0:49:ee:c7:32:b7:ce:57:8c:a0:7c: c2:49:af:a8:38:1d:b0:88:de:9f:67:84:ca:53:bd: ed:ea:11:91:52:40:0c:ec:ae:94:6a:af:4f:ef:03: 4b:46:6d:9a:0c:fc:ba:4d:b8:41:7a:e8:ba:62:bb: cb:74:ba:7e:73:66:aa:fe:b7:6f:37:4e:d1:88:9a: 7f:96:58:31:6e:a5:65:61:f9:44:41:cf:31:71:8c: 64:29:79:fc:5a:ea:a5:79:cf:8a:4b:18:45:c8:9c: 86:ac:d3:e7:cd:2d:ab:91:c8:f6:c6:69:b3:9a:42: 2e:66:ba:a6:5a:2d:1a:87:be:32:46:3b:90:ed:b4: ba:c8:60:fa:e9:aa:b3:b8:c2:56:27:0a:78:bc:2e: 3b:df:5c:bf:af:e0:0b:32:27:dd:60:8b:4d:89:cd: dc:d5:84:0e:46:1b:04:2e:35:92:de:fe:df:6e:11: 15:38:ec:cc:8a:07:2d:35:48:ce:14:82:8f:55:07: 1f:f8:a1:60:74:dc:ac:50:a9:25:18:df:9e:ac:93: 38:b4:d5:fd:4e:b7:db:8d:79:79:61:77:f6:42:fb: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3C:42:94:73:82:95:97:56:D0:BE:83:CB:04:5C:46:8D:17:38:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d0b13fd5-cc52-3554-a9ea-111a7e7df40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:03:f4:14:b7:5f:85:f2:a2:21:1e:f8:2d:ca:90:51:41:0f: d2:8e:e7:17:62:0e:01:bd:fe:77:f5:15:80:ea:4e:78:d1:51: 57:8d:e4:4d:aa:82:13:ad:56:66:f1:08:2c:e6:a0:80:b0:7a: cf:0b:e8:14:3e:7f:ab:44:da:4a:b8:ee:eb:f7:95:c2:0a:4a: 13:d0:c4:97:c3:f2:4b:ac:dc:74:4e:9c:f8:32:4a:58:a7:1e: 31:07:38:6f:4b:9e:6a:a6:b7:a4:3f:72:9b:5f:b0:f0:20:5b: eb:66:4d:6d:f9:2a:d4:c3:47:23:e2:30:1c:0c:0d:a0:89:66: 9c:74:69:06:df:a6:2b:60:25:f2:1b:a3:6d:40:4c:89:a2:49: d7:f1:59:12:d1:1a:b8:9d:aa:2a:2f:0a:0c:e1:54:c8:f0:51: 54:1e:c4:cb:4a:f5:50:20:cc:5f:cd:46:7c:52:31:8a:37:69: cb:93:0f:68:28:fd:34:a1:1e:ef:3d:b1:2f:8c:6b:94:6c:08: 2c:ad:ad:35:e4:e1:fa:f0:68:03:94:43:7b:02:39:11:7c:3c: e0:05:c0:c0:f8:8e:f5:17:a2:91:39:df:31:88:b0:3c:09:9b: 24:5f:20:81:a7:e4:90:8d:4f:fb:a7:35:b0:0a:c8:ab:c5:84: 74:21:d5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApwqDzJFUer0HH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NWE5MzlkM2UtM2M4Ny00ZjgwLTgyODAtZTgwODk3ZjIxYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHCMhyc3eUy09zaCe5p7yACXrFC9swa9D7L9 WR5uzmCdsEnuxzK3zleMoHzCSa+oOB2wiN6fZ4TKU73t6hGRUkAM7K6Uaq9P7wNL Rm2aDPy6TbhBeui6YrvLdLp+c2aq/rdvN07RiJp/llgxbqVlYflEQc8xcYxkKXn8 Wuqlec+KSxhFyJyGrNPnzS2rkcj2xmmzmkIuZrqmWi0ah74yRjuQ7bS6yGD66aqz uMJWJwp4vC4731y/r+ALMifdYItNic3c1YQORhsELjWS3v7fbhEVOOzMigctNUjO FIKPVQcf+KFgdNysUKklGN+erJM4tNX9TrfbjXl5YXf2QvvGBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI8QpRzgpWXVtC+g8sEXEaNFzjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDBiMTNmZDUtY2M1Mi0z NTU0LWE5ZWEtMTExYTdlN2RmNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIyOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKID9BS3X4XyoiEe+C3KkFFBD9KO5xdiDgG9/nf1FYDqTnjRUVeN5E2q ghOtVmbxCCzmoICwes8L6BQ+f6tE2kq47uv3lcIKShPQxJfD8kus3HROnPgySlin HjEHOG9Lnmqmt6Q/cptfsPAgW+tmTW35KtTDRyPiMBwMDaCJZpx0aQbfpitgJfIb o21ATImiSdfxWRLRGridqiovCgzhVMjwUVQexMtK9VAgzF/NRnxSMYo3acuTD2go /TShHu89sS+Ma5RsCCytrTXk4frwaAOUQ3sCORF8POAFwMD4jvUXopE53zGIsDwJ myRfIIGn5JCNT/unNbAKyKvFhHQh1ZA= -----END CERTIFICATE-----Generated at Fri Sep 18 17:08:04 2026 by rpki-client