$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ce88c283-54d8-3284-a5ab-6c510f82d7f4.roa File: ce88c283-54d8-3284-a5ab-6c510f82d7f4.roa (raw, json) Hash identifier: rRPeEXkeUpd1YwxZM3DbqqOouvzOMFYDmMST7D2aWrw= Subject key identifier: 2D:54:EB:74:FC:B7:34:46:0D:7B:C9:C2:FC:FC:3D:A7:D9:B2:11:33 Certificate issuer: /CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Certificate serial: 010D0C9F4328584F655D65E260D679D81CDC1280 Authority key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ce88c283-54d8-3284-a5ab-6c510f82d7f4.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 13898 IP address blocks: 104.37.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:65:e2:60:d6:79:d8:1c:dc:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=8fa773e7-be25-4387-be9c-e4ea8d5318e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:6b:bc:f3:85:0d:cb:59:0f:a3:17:44:d4: ab:0b:c2:f0:b4:1f:80:02:82:92:4a:a7:f5:b5:80: e5:fa:4a:40:cd:18:a0:07:1d:58:65:0f:a1:fc:4d: 4a:ed:66:3b:d7:a8:b9:6c:e1:32:6d:66:d9:8f:42: f9:9d:bc:de:29:ec:c1:0c:36:74:94:79:3b:3d:f1: e7:5b:ac:d7:2f:b9:16:ec:22:da:68:68:6e:a2:85: 2c:47:70:01:14:94:b9:ec:ac:05:48:2c:08:64:a5: f2:c1:3b:cb:bf:53:96:34:c0:54:50:95:cc:c4:6b: 6f:8f:fe:36:dc:e7:93:d0:f1:f8:74:ea:31:3d:25: 8a:23:62:77:36:06:82:36:6b:9c:93:8f:cf:13:6e: 2c:23:1f:0a:38:72:0e:ac:64:e1:84:c7:f3:22:1e: 65:48:66:c9:f8:82:12:39:9e:a1:71:10:24:48:bc: ca:96:1d:de:63:6c:4d:ed:36:07:6e:88:1f:0a:e3: c8:28:e6:22:8d:ef:8a:b6:57:3d:c0:43:69:68:e9: b7:86:da:b0:e0:35:97:25:8c:7b:a6:f5:26:45:b4: e3:f8:52:6d:47:55:f5:b6:02:d0:ba:b6:3b:e3:3e: 12:f7:77:c4:8a:98:79:ac:d5:b5:bd:af:35:9e:2f: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:54:EB:74:FC:B7:34:46:0D:7B:C9:C2:FC:FC:3D:A7:D9:B2:11:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ce88c283-54d8-3284-a5ab-6c510f82d7f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.crl X509v3 Authority Key Identifier: keyid:3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer sbgp-ipAddrBlock: critical IPv4: 104.37.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:83:90:e6:c4:38:96:43:78:32:83:80:a5:04:7b:05:8d:ea: 77:c7:47:cb:0e:b4:8b:6b:5d:05:a5:99:75:fd:85:2b:94:59: 47:44:2d:cb:a8:ce:58:dc:96:af:31:20:f6:86:81:26:8d:77: b1:27:4c:25:be:e7:3a:42:fc:26:96:d9:3b:56:ab:a6:97:05: 6b:08:4d:ef:5e:19:00:0d:03:30:99:3d:c8:39:85:60:0f:c7: 5a:66:4a:14:12:40:b7:88:40:fb:53:cc:1b:13:00:0d:e9:eb: fc:78:eb:d0:1d:b9:68:05:20:59:4a:cd:0c:45:33:de:66:2b: 98:62:1d:eb:53:87:f1:a4:71:7d:fb:92:20:e7:6a:a5:04:05: 31:1a:ca:0b:25:22:0f:e4:3f:84:64:cf:a1:6d:f2:9a:06:c6: 0d:c4:78:f3:d6:9e:16:3c:ff:a6:4d:0a:c6:8e:54:85:19:17: 93:c1:69:99:3c:b5:50:9a:2c:ef:56:bd:d8:3c:95:b2:c4:67: da:6b:e4:69:6f:23:3d:f9:70:35:d6:20:fe:ef:ba:09:b9:d1: c2:76:fb:24:c1:8c:c5:5f:fe:45:a6:c1:00:20:7b:ba:a7:f7: 5e:79:6d:7a:67:de:4c:a9:4b:43:3a:c1:e4:c5:de:b4:22:fe: e6:b8:04:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWXiYNZ52BzcEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5 ZmZhMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OGZhNzczZTctYmUyNS00Mzg3LWJlOWMtZTRlYThkNTMxOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HtrvPOFDctZD6MXRNSrC8LwtB+AAoKSSqf1 tYDl+kpAzRigBx1YZQ+h/E1K7WY716i5bOEybWbZj0L5nbzeKezBDDZ0lHk7PfHn W6zXL7kW7CLaaGhuooUsR3ABFJS57KwFSCwIZKXywTvLv1OWNMBUUJXMxGtvj/42 3OeT0PH4dOoxPSWKI2J3NgaCNmuck4/PE24sIx8KOHIOrGThhMfzIh5lSGbJ+IIS OZ6hcRAkSLzKlh3eY2xN7TYHbogfCuPIKOYije+Ktlc9wENpaOm3htqw4DWXJYx7 pvUmRbTj+FJtR1X1tgLQurY74z4S93fEiph5rNW1va81ni9R5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1U63T8tzRGDXvJwvz8PafZshEzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3 MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvY2U4OGMyODMtNTRkOC0z Mjg0LWE1YWItNmM1MTBmODJkN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmEzNzFkYTEtY2Q3NC00NmJkLTgy YTgtZGU3YjlmN2E5ZmZhL2JhMzcxZGExLWNkNzQtNDZiZC04MmE4LWRlN2I5Zjdh OWZmYS5jcmwwHwYDVR0jBBgwFoAUPS1g9kIqBBqhhHqFtla9D8pKmUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdi OWY3YTlmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmDkObEOJZDeDKDgKUEewWN6nfHR8sOtItrXQWlmXX9hSuUWUdELcuo zljclq8xIPaGgSaNd7EnTCW+5zpC/CaW2TtWq6aXBWsITe9eGQANAzCZPcg5hWAP x1pmShQSQLeIQPtTzBsTAA3p6/x469AduWgFIFlKzQxFM95mK5hiHetTh/GkcX37 kiDnaqUEBTEaygslIg/kP4Rkz6Ft8poGxg3EePPWnhY8/6ZNCsaOVIUZF5PBaZk8 tVCaLO9Wvdg8lbLEZ9pr5GlvIz35cDXWIP7vugm50cJ2+yTBjMVf/kWmwQAge7qn 9155bXpn3kypS0M6weTF3rQi/ua4BAE= -----END CERTIFICATE-----Generated at Wed Oct 21 14:47:13 2026 by rpki-client