$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded9b4f8-28da-3010-9a72-f329f95679a9.roa File: ded9b4f8-28da-3010-9a72-f329f95679a9.roa (raw, json) Hash identifier: 3jUzSMIseSgrx+4B3RLKJRCCMuIuE1kI5PzPAKie5QA= Subject key identifier: C9:2C:39:CD:C4:7D:35:AC:A5:D5:B5:B8:68:8D:CB:8F:20:1D:1E:B8 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584EF9E22245711039275D0A45E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded9b4f8-28da-3010-9a72-f329f95679a9.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 2914 IP address blocks: 104.140.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:22:45:71:10:39:27:5d:0a:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=cd4e23f5-b01e-49e9-9b5d-94e366d96cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:33:be:38:9b:0a:4d:02:d2:99:26:98:cc:95: e0:ee:df:62:60:74:83:11:6c:f3:db:40:4c:59:ab: ab:42:50:6b:2b:0f:bc:53:dc:62:6f:ae:a9:84:21: 2a:71:eb:0b:c0:f0:84:e8:2a:b0:22:98:4c:94:9f: 38:88:e8:5c:4c:2c:09:2f:44:2e:63:db:3a:4c:64: f9:25:ec:52:25:49:5d:37:d2:83:48:bd:7d:97:b1: f4:bd:e1:6e:42:59:91:ce:e3:f0:2a:03:0f:db:03: 75:26:d6:c2:a1:19:ca:fe:2b:b7:20:5c:c1:a0:6f: e9:ec:ac:84:f2:72:72:c4:6f:98:6d:50:de:87:1f: 77:d2:44:c7:99:01:c0:e4:07:3f:a2:f1:b3:59:dc: 4e:e4:52:74:3b:7c:c4:f5:d2:34:fa:ff:7f:92:8b: b4:d0:2c:06:d2:a7:f4:8c:6b:25:16:0d:e1:7e:04: 53:3a:b5:67:7e:84:b3:e7:12:b7:6f:6d:46:0d:87: bb:b6:8a:44:6f:4f:dc:89:a0:74:1b:d0:26:81:e6: 44:41:d5:c2:9c:2b:92:01:d7:2e:82:c2:3e:bb:2f: d2:1e:79:05:46:18:ae:c3:14:47:75:7f:a0:21:0c: 72:72:3c:2a:87:1c:0b:a7:d9:53:92:97:8f:a0:f2: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2C:39:CD:C4:7D:35:AC:A5:D5:B5:B8:68:8D:CB:8F:20:1D:1E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ded9b4f8-28da-3010-9a72-f329f95679a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4f:71:d1:be:3c:ac:15:98:88:04:43:cc:4c:c5:68:78:01: aa:ad:21:78:3e:78:f9:3e:d8:7d:4b:35:7c:1e:47:60:67:8e: 9d:4d:40:c3:a3:55:80:b2:b0:5f:22:ec:b8:1b:bf:05:44:71: c2:41:bf:d0:a2:01:0e:1b:92:59:c0:98:3d:59:a5:ad:09:7e: 68:99:26:3e:d1:bf:f2:b5:50:1b:a7:78:c6:a1:e7:fa:fc:f9: 6f:14:3e:de:5e:92:1c:f3:7d:55:be:68:db:dd:5f:00:d4:0e: d0:dd:10:cb:37:1f:a6:94:7c:47:73:0d:58:b6:c9:de:fc:a0: a6:bd:b2:fd:73:66:8e:58:41:97:de:9e:d8:44:7e:d2:66:45: 89:ff:9c:91:0c:ab:93:54:45:70:96:a9:2d:65:e5:2d:e9:de: 05:8d:61:3c:23:98:43:a8:41:fd:7a:1f:1d:d7:e1:84:32:cc: 77:35:fd:63:6d:88:c3:2a:22:e4:38:2d:18:46:91:76:bb:8f: 01:f2:23:2e:5e:25:2b:2b:68:42:63:95:13:ac:10:c3:9b:76: f2:f6:d0:98:cb:eb:97:13:c4:7c:c4:67:7d:dd:8b:8a:bc:6a: cd:da:5f:16:c6:db:2b:3d:dc:c8:d3:32:9b:0d:69:67:fe:eb: f4:3b:d0:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754iJFcRA5J10KReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk Y2Q0ZTIzZjUtYjAxZS00OWU5LTliNWQtOTRlMzY2ZDk2Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjO+OJsKTQLSmSaYzJXg7t9iYHSDEWzz20BM WaurQlBrKw+8U9xib66phCEqcesLwPCE6CqwIphMlJ84iOhcTCwJL0QuY9s6TGT5 JexSJUldN9KDSL19l7H0veFuQlmRzuPwKgMP2wN1JtbCoRnK/iu3IFzBoG/p7KyE 8nJyxG+YbVDehx930kTHmQHA5Ac/ovGzWdxO5FJ0O3zE9dI0+v9/kou00CwG0qf0 jGslFg3hfgRTOrVnfoSz5xK3b21GDYe7topEb0/ciaB0G9AmgeZEQdXCnCuSAdcu gsI+uy/SHnkFRhiuwxRHdX+gIQxycjwqhxwLp9lTkpePoPLysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMksOc3EfTWspdW1uGiNy48gHR64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZGVkOWI0ZjgtMjhkYS0z MDEwLTlhNzItZjMyOWY5NTY3OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJPcdG+PKwVmIgEQ8xMxWh4AaqtIXg+ePk+2H1LNXweR2Bnjp1NQMOj VYCysF8i7LgbvwVEccJBv9CiAQ4bklnAmD1Zpa0JfmiZJj7Rv/K1UBuneMah5/r8 +W8UPt5ekhzzfVW+aNvdXwDUDtDdEMs3H6aUfEdzDVi2yd78oKa9sv1zZo5YQZfe nthEftJmRYn/nJEMq5NURXCWqS1l5S3p3gWNYTwjmEOoQf16Hx3X4YQyzHc1/WNt iMMqIuQ4LRhGkXa7jwHyIy5eJSsraEJjlROsEMObdvL20JjL65cTxHzEZ33di4q8 as3aXxbG2ys93MjTMpsNaWf+6/Q70GQ= -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:56 2026 by rpki-client