$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa File: 3835268a-a25e-35a1-9357-9942576a6214.roa (raw, json) Hash identifier: Kr0rWSOtNtAR6Jr1jxw+rC++LC1+jBX8LsYhcfsmUI0= Subject key identifier: 5B:70:1B:F2:6D:BF:DE:00:63:E0:41:A4:73:29:2A:54:BD:1C:54:4B Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584F497319D7E71474C3E6393140 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 201106 IP address blocks: 104.37.29.0/24 maxlen: 32 104.143.94.0/24 maxlen: 32 104.194.206.0/24 maxlen: 32 104.194.207.0/24 maxlen: 32 104.194.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:19:d7:e7:14:74:c3:e6:39:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2ec0ea11-52b0-4e8f-a0c2-01d7667326cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:fd:c7:54:83:72:82:63:b9:f7:c6:aa:e6: 77:70:7f:d8:30:bd:83:ab:c3:f8:5e:ab:ee:a2:94: 4e:82:d3:d6:0f:27:59:91:4c:3d:c9:42:e6:52:16: d4:d1:b4:35:a1:c4:58:a8:38:e4:b0:3e:0a:27:8a: 32:a7:e4:95:4b:6b:08:50:58:32:3a:42:05:e4:ce: 3b:77:f8:00:c1:fe:c0:84:36:93:ca:08:18:cb:c5: ed:5c:b7:2c:f8:d7:d4:88:b2:ac:e0:82:c9:77:7b: dc:d8:ec:e7:9f:fe:45:8a:ba:dc:9f:c1:4a:07:65: 50:c4:be:86:40:65:c4:bb:97:b6:8c:51:17:e9:ff: 51:d4:ba:6f:d9:a9:f8:de:39:b1:eb:21:c8:98:e8: 84:ae:1f:36:1e:a9:53:62:16:3e:49:8b:b6:89:6f: e6:71:57:6e:23:8d:01:e5:1d:52:58:16:c5:d5:2b: 91:32:fb:ab:5f:e9:d0:43:f2:e1:d7:89:d7:19:90: 53:1e:63:5f:07:cc:ba:e3:e5:8e:60:fd:71:00:a5: a5:8c:12:ca:29:1f:de:6c:b6:41:66:c4:f0:9f:2b: d1:f5:a4:83:db:a7:3a:2a:8f:44:55:5b:d4:6c:cb: 0d:b0:09:87:40:39:12:96:c1:d7:98:71:14:1e:12: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:70:1B:F2:6D:BF:DE:00:63:E0:41:A4:73:29:2A:54:BD:1C:54:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3835268a-a25e-35a1-9357-9942576a6214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 104.37.29.0/24 104.143.94.0/24 104.194.206.0/23 104.194.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:66:7f:64:8b:f6:93:07:5e:82:ac:56:3d:f5:21:a9:74:15: 7b:c2:3b:28:bc:bc:1c:fb:e9:df:d1:b7:23:a6:1c:30:d4:d6: f7:50:81:7b:71:0d:a1:a2:80:b2:98:3c:22:f7:a4:2a:87:0b: 43:3b:5f:48:6e:31:68:f8:5b:23:77:63:5c:cc:4a:88:2a:3b: ad:d9:7a:13:e3:aa:d0:7e:73:ae:8b:91:d5:26:bc:a5:88:ff: 87:c3:57:73:a4:62:d2:3b:b7:75:a2:73:9e:7c:42:4e:c3:35: a5:97:51:6f:3d:82:fa:6c:fa:fe:1c:25:81:d1:86:36:be:2b: 3f:fe:ef:5a:c0:27:eb:3a:86:c4:49:db:cd:9b:ad:26:5a:2e: b2:7e:1e:af:2e:00:96:f8:ad:44:a9:36:6b:3f:36:e1:d9:7a: e0:e9:95:34:63:7f:73:e0:00:9e:5b:32:a9:31:df:e4:8b:13: 93:86:07:fc:a4:f3:e0:6a:2e:7a:a9:50:fb:9e:ff:56:9a:72: fb:82:2c:01:ef:93:87:59:ef:21:13:fb:e8:b1:1f:bb:e8:4b: 0e:16:36:fe:dc:84:eb:68:27:5a:c8:91:86:58:61:ac:b1:66: 26:ee:76:c0:fa:a4:24:46:c6:b1:f6:53:12:94:6e:b3:96:b8: ac:c7:76:d8 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9JcxnX5xR0w+Y5MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmVjMGVhMTEtNTJiMC00ZThmLWEwYzItMDFkNzY2NzMyNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze39x1SDcoJjuffGquZ3cH/YML2Dq8P4Xqvu opROgtPWDydZkUw9yULmUhbU0bQ1ocRYqDjksD4KJ4oyp+SVS2sIUFgyOkIF5M47 d/gAwf7AhDaTyggYy8XtXLcs+NfUiLKs4ILJd3vc2Oznn/5Firrcn8FKB2VQxL6G QGXEu5e2jFEX6f9R1Lpv2an43jmx6yHImOiErh82HqlTYhY+SYu2iW/mcVduI40B 5R1SWBbF1SuRMvurX+nQQ/Lh14nXGZBTHmNfB8y64+WOYP1xAKWljBLKKR/ebLZB ZsTwnyvR9aSD26c6Ko9EVVvUbMsNsAmHQDkSlsHXmHEUHhLLqQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFFtwG/Jtv94AY+BBpHMpKlS9HFRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvMzgzNTI2OGEtYTI1ZS0z NWExLTkzNTctOTk0MjU3NmE2MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaCUdAwQA aI9eAwQBaMLOAwQAaMLbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHpmf2SL9pMHXoKsVj31Ial0FXvCOyi8 vBz76d/RtyOmHDDU1vdQgXtxDaGigLKYPCL3pCqHC0M7X0huMWj4WyN3Y1zMSogq O63ZehPjqtB+c66LkdUmvKWI/4fDV3OkYtI7t3Wic558Qk7DNaWXUW89gvps+v4c JYHRhja+Kz/+71rAJ+s6hsRJ282brSZaLrJ+Hq8uAJb4rUSpNms/NuHZeuDplTRj f3PgAJ5bMqkx3+SLE5OGB/yk8+BqLnqpUPue/1aacvuCLAHvk4dZ7yET++ixH7vo Sw4WNv7chOtoJ1rIkYZYYayxZibudsD6pCRGxrH2UxKUbrOWuKzHdtg= -----END CERTIFICATE-----Generated at Sun Oct 25 06:06:57 2026 by rpki-client