$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa File: b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa (raw, json) Hash identifier: PJQKRV2aJ+rUBP7wRawHAVWfyRV2YlYvIH66FanMOGE= Subject key identifier: 38:A2:29:D8:4E:5C:24:5C:68:88:04:82:74:3D:42:12:AE:70:D9:79 Certificate issuer: /CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Certificate serial: 010D0C9F4328584F7088210FAA04A3B7654C6300 Authority key identifier: 6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 394352 IP address blocks: 104.224.32.0/22 maxlen: 22 104.224.32.0/23 maxlen: 23 104.224.32.0/24 maxlen: 24 104.224.33.0/24 maxlen: 24 104.224.34.0/23 maxlen: 23 104.224.34.0/24 maxlen: 24 104.224.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:21:0f:aa:04:a3:b7:65:4c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59a5af4-2483-44fd-8539-cacfd54edc45 Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=405a0bef-d2e2-459b-8150-f271bc258293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:f5:e1:74:ed:48:dc:73:cb:25:45:92:91: 70:48:21:df:5b:b4:11:46:51:5e:02:d3:82:85:ea: 77:4f:c5:64:44:d2:37:1c:5e:30:37:a6:35:38:a3: 06:de:36:05:ca:05:eb:84:27:d1:40:b6:a5:1e:7b: d2:f8:38:5c:9b:7e:df:60:12:a7:c4:9d:ee:37:d5: c2:e9:73:6f:5c:76:6f:52:ba:fc:37:c3:71:6c:94: a7:5e:38:44:e7:cf:c2:a6:31:31:c0:1b:99:f4:4a: 3d:43:d2:12:02:32:3a:0b:2c:dc:ca:2f:55:7a:34: 09:ff:fa:1c:eb:05:6f:58:f4:07:da:98:d5:ac:01: 21:23:3a:77:32:58:13:3c:dd:0e:5c:34:fb:a8:c1: d1:86:0a:d3:e8:d0:f2:b0:2e:ec:fe:72:03:6b:35: 34:38:6d:5b:53:38:5f:2d:db:d7:7d:02:24:e7:47: 46:f3:6d:f1:f5:4a:c7:7f:65:34:07:78:5c:f9:bc: bb:71:38:10:b2:dc:c0:53:d5:cd:40:a0:b4:d0:47: 77:0e:9d:4c:10:1c:95:6d:b0:a4:af:c1:df:9d:c4: 8f:0b:84:72:81:bb:99:a2:bd:3b:98:c0:03:8e:51: dd:57:7b:f8:50:2f:74:f9:aa:40:45:10:ee:35:7c: a3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A2:29:D8:4E:5C:24:5C:68:88:04:82:74:3D:42:12:AE:70:D9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/b39f08f3-0b1c-3b32-b8a9-a15339b605ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45/f59a5af4-2483-44fd-8539-cacfd54edc45.crl X509v3 Authority Key Identifier: keyid:6C:D3:07:8B:48:B6:21:C8:CB:18:75:C5:23:65:DE:84:63:AF:1B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f59a5af4-2483-44fd-8539-cacfd54edc45.cer sbgp-ipAddrBlock: critical IPv4: 104.224.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f4:a0:f3:3f:38:06:bb:08:c7:89:d6:40:5d:86:b6:6e:5a: 79:6b:ed:16:88:46:7b:be:6c:64:6a:d4:5e:76:0f:8d:00:11: f0:62:b1:97:ff:53:bb:3a:b6:aa:61:a9:50:c9:26:15:b5:c0: db:fd:71:30:6e:13:63:4b:59:9a:b4:d9:86:ff:11:ca:87:77: aa:6f:9d:de:da:0b:7e:99:ef:c7:e5:21:df:35:a5:22:b1:ac: fc:ca:ab:51:83:01:5b:70:e5:97:40:95:0b:07:6e:3c:7a:12: 8b:04:5c:dc:25:02:5c:bd:6c:5e:03:36:d9:d1:68:42:5d:a2: 80:66:26:51:1c:88:36:70:7b:df:c1:c5:f7:f8:3b:af:55:4a: 9a:42:54:40:2c:33:df:20:4b:be:25:4a:25:71:1f:f6:6d:8c: 22:2e:44:3b:a1:c8:fd:96:4d:6a:9b:4f:aa:b8:6c:37:c0:a9: 63:20:af:9a:00:18:3e:92:8c:97:ba:71:8c:db:59:b6:f1:c0: 09:b9:40:d1:aa:30:8e:b8:5d:91:b8:0a:03:5f:83:fc:84:8b: 73:a4:dd:df:71:7f:60:f3:a9:34:7d:ec:b3:a0:c3:f9:8e:be: 68:0b:8e:da:4b:9f:6c:2d:76:a7:32:b2:27:d3:5c:e2:77:e2: fe:6f:5f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiCEPqgSjt2VMYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU5YTVhZjQtMjQ4My00NGZkLTg1MzktY2FjZmQ1NGVk YzQ1MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NDA1YTBiZWYtZDJlMi00NTliLTgxNTAtZjI3MWJjMjU4MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWD14XTtSNxzyyVFkpFwSCHfW7QRRlFeAtOC hep3T8VkRNI3HF4wN6Y1OKMG3jYFygXrhCfRQLalHnvS+Dhcm37fYBKnxJ3uN9XC 6XNvXHZvUrr8N8NxbJSnXjhE58/CpjExwBuZ9Eo9Q9ISAjI6Cyzcyi9VejQJ//oc 6wVvWPQH2pjVrAEhIzp3MlgTPN0OXDT7qMHRhgrT6NDysC7s/nIDazU0OG1bUzhf LdvXfQIk50dG823x9UrHf2U0B3hc+by7cTgQstzAU9XNQKC00Ed3Dp1MEByVbbCk r8HfncSPC4RygbuZor07mMADjlHdV3v4UC90+apARRDuNXyjxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiiKdhOXCRcaIgEgnQ9QhKucNl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlh NWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNmZDU0ZWRjNDUvYjM5ZjA4ZjMtMGIxYy0z YjMyLWI4YTktYTE1MzM5YjYwNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZjU5YTVhZjQtMjQ4My00NGZkLTg1 MzktY2FjZmQ1NGVkYzQ1L2Y1OWE1YWY0LTI0ODMtNDRmZC04NTM5LWNhY2ZkNTRl ZGM0NS5jcmwwHwYDVR0jBBgwFoAUbNMHi0i2IcjLGHXFI2XehGOvG78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9mNTlhNWFmNC0yNDgzLTQ0ZmQtODUzOS1jYWNm ZDU0ZWRjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaOAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj0oPM/OAa7CMeJ1kBdhrZuWnlr7RaIRnu+bGRq1F52D40AEfBisZf/ U7s6tqphqVDJJhW1wNv9cTBuE2NLWZq02Yb/EcqHd6pvnd7aC36Z78flId81pSKx rPzKq1GDAVtw5ZdAlQsHbjx6EosEXNwlAly9bF4DNtnRaEJdooBmJlEciDZwe9/B xff4O69VSppCVEAsM98gS74lSiVxH/ZtjCIuRDuhyP2WTWqbT6q4bDfAqWMgr5oA GD6SjJe6cYzbWbbxwAm5QNGqMI64XZG4CgNfg/yEi3Ok3d9xf2DzqTR97LOgw/mO vmgLjtpLn2wtdqcysifTXOJ34v5vXww= -----END CERTIFICATE-----Generated at Fri Oct 23 23:59:13 2026 by rpki-client