$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa File: 8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa (raw, json) Hash identifier: BPA0tnrThYccrehLPpC5/4x6+oDq1dZBMGGdJ83vp34= Subject key identifier: 2D:6A:E7:FE:8C:C5:FA:E2:E9:94:98:51:FA:57:BD:11:1F:90:05:5E Certificate issuer: /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Certificate serial: 010D0C9F4328584F5C92809A0DC831D650754300 Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa Signing time: Thu 01 Oct 2026 21:25:00 +0000 ROA not before: Thu 01 Oct 2026 21:25:00 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 397376 IP address blocks: 104.251.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:92:80:9a:0d:c8:31:d6:50:75:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Validity Not Before: Oct 1 21:25:00 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=99f2d8b1-f4a4-4f6b-9a50-ecbbf6ef843c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4a:4b:b3:0c:6b:1f:85:9e:a7:68:d8:34:19: 74:ef:26:b0:74:64:72:f1:dc:2b:3a:ac:49:71:6c: e1:5e:f1:cb:5d:ed:9e:c8:58:43:d3:0b:8d:63:8b: ff:2f:5b:3d:6a:4e:ac:cb:de:83:43:20:94:67:67: a1:4d:10:7d:58:9e:f0:a4:69:a4:a9:15:84:3b:c4: 91:2a:3d:04:c8:04:a8:e9:5d:e2:4a:f2:19:ba:49: d6:4c:79:6d:ad:9a:e9:98:fd:da:d0:8e:6a:64:cb: 08:d9:b9:86:29:d7:7e:85:67:07:3d:59:c4:d5:ab: 3f:30:8d:f2:1c:53:10:46:d9:ff:aa:62:f9:54:c2: c7:17:18:fd:5e:f9:7e:9b:f2:8b:b1:d7:55:fc:8d: a6:d9:05:1c:cb:93:2d:ac:68:7e:f5:7e:af:ad:06: b1:f9:56:8e:d3:15:43:c7:06:9a:a8:40:7a:03:ac: c6:bf:6e:90:ca:b7:ca:50:06:e0:76:f5:a8:28:aa: 9e:59:cf:84:42:4d:13:00:48:14:f8:5d:8f:92:c0: ed:38:5d:80:8e:ab:6e:47:28:34:48:89:47:ea:84: 77:b7:a2:95:9b:bd:d7:1e:ed:2b:d9:59:2c:7e:bc: 8c:23:f6:f8:87:4e:7c:f9:93:99:a4:7f:c1:78:27: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:E7:FE:8C:C5:FA:E2:E9:94:98:51:FA:57:BD:11:1F:90:05:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/8c4f7852-a07a-3eba-be77-b7b40082b3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl X509v3 Authority Key Identifier: keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer sbgp-ipAddrBlock: critical IPv4: 104.251.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f9:b1:18:bb:a4:c0:6c:ab:39:b2:91:55:75:4b:9a:12:af: b6:8d:ef:a8:13:60:1f:03:45:89:1c:e1:5f:a5:4d:22:37:da: 02:91:60:4d:f5:2b:50:18:5b:17:ae:99:7f:8c:91:ce:a7:60: 8b:50:19:82:4f:57:a2:f5:35:c5:fb:ca:37:e7:7c:95:dc:5f: 82:2a:41:37:87:7c:e8:02:45:2e:0f:52:16:e0:34:4e:ae:1b: c4:9b:da:13:81:a0:c3:16:e9:93:59:45:bd:24:bb:a5:80:b1: ab:3b:a7:7b:5c:99:db:60:69:d2:2e:b5:8f:20:9a:99:c6:68: 84:24:bd:14:d0:50:b2:0a:fb:6c:97:56:e4:92:12:7e:cf:19: 54:b9:43:75:ea:50:e9:ab:d0:a0:e3:22:e3:55:b8:fc:71:e4: 82:43:43:79:97:f8:c6:e5:06:41:3d:a2:ec:9b:d2:0b:06:4d: c0:e6:d1:15:19:03:8d:e2:14:58:15:c4:c8:61:e3:a2:3a:ea: f2:88:02:bd:6b:c0:7d:42:23:17:4c:ca:7f:e2:29:77:ea:a7: 4e:9d:16:4f:7d:b2:b8:7b:39:80:dc:88:bf:21:02:88:05:cc: 38:89:f5:a2:1d:92:2b:f7:ae:59:c3:9f:0e:5f:85:5b:53:11: a5:87:ab:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ckoCaDcgx1lB1QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi MjNmMB4XDTI2MTAwMTIxMjUwMFoXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk OTlmMmQ4YjEtZjRhNC00ZjZiLTlhNTAtZWNiYmY2ZWY4NDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0pLswxrH4Wep2jYNBl07yawdGRy8dwrOqxJ cWzhXvHLXe2eyFhD0wuNY4v/L1s9ak6sy96DQyCUZ2ehTRB9WJ7wpGmkqRWEO8SR Kj0EyASo6V3iSvIZuknWTHltrZrpmP3a0I5qZMsI2bmGKdd+hWcHPVnE1as/MI3y HFMQRtn/qmL5VMLHFxj9Xvl+m/KLsddV/I2m2QUcy5MtrGh+9X6vrQax+VaO0xVD xwaaqEB6A6zGv26QyrfKUAbgdvWoKKqeWc+EQk0TAEgU+F2PksDtOF2AjqtuRyg0 SIlH6oR3t6KVm73XHu0r2VksfryMI/b4h058+ZOZpH/BeCdspQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1q5/6Mxfri6ZSYUfpXvREfkAVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvOGM0Zjc4NTItYTA3YS0z ZWJhLWJlNzctYjdiNDAwODJiM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5 OWExZmIyM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/5sRi7pMBsqzmykVV1S5oSr7aN76gTYB8DRYkc4V+lTSI32gKRYE31 K1AYWxeumX+Mkc6nYItQGYJPV6L1NcX7yjfnfJXcX4IqQTeHfOgCRS4PUhbgNE6u G8Sb2hOBoMMW6ZNZRb0ku6WAsas7p3tcmdtgadIutY8gmpnGaIQkvRTQULIK+2yX VuSSEn7PGVS5Q3XqUOmr0KDjIuNVuPxx5IJDQ3mX+MblBkE9ouyb0gsGTcDm0RUZ A43iFFgVxMhh46I66vKIAr1rwH1CIxdMyn/iKXfqp06dFk99srh7OYDciL8hAogF zDiJ9aIdkiv3rlnDnw5fhVtTEaWHq2g= -----END CERTIFICATE-----Generated at Mon Oct 12 14:16:02 2026 by rpki-client