$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa File: 0bde66e0-ee94-3e23-97de-fad631a974c8.roa (raw, json) Hash identifier: JBfOjx30qCtGgejUHgO6KL33sDf6gEltgUdstSFG6Gw= Subject key identifier: 91:84:D6:2A:B0:C3:CA:83:40:3D:DD:ED:CF:4B:4D:F1:B7:58:85:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1897B7AFAB101C1DDB8F75C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 9498 IP address blocks: 104.104.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:b7:af:ab:10:1c:1d:db:8f:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=18a620c2-524f-4577-9d3c-9227f240473c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:44:e6:d8:5d:ed:07:83:8d:15:fe:70:96: f4:64:47:33:35:6d:0d:42:33:64:c3:cf:f5:14:d3: 49:75:b8:bc:bd:91:7d:5a:8a:9b:11:75:e3:c7:25: 64:0a:cd:fc:65:9d:da:1e:8a:82:17:fc:d3:7a:ed: b2:bf:3e:bc:0a:6a:f7:2a:31:36:92:ac:5d:8a:0e: ea:2d:53:eb:85:48:a8:2f:a9:57:fd:5a:66:82:bf: 51:94:33:b2:81:c5:08:8c:43:a6:e2:aa:bc:bb:14: 5a:29:4c:a4:99:e5:63:3d:09:ac:64:c8:73:81:b0: 10:32:c2:a8:82:9d:1c:d4:06:11:95:c6:80:21:65: b2:69:e3:a1:da:3a:a5:4f:54:83:b5:39:9f:7e:a1: 05:d2:11:bc:a9:8b:16:85:0d:9e:a9:f0:ab:7f:72: e0:ee:11:3a:bf:4b:3f:1e:08:a6:69:06:5a:d5:a1: 6d:19:23:6e:97:72:ba:e7:e4:14:a6:c9:cd:c2:57: 00:d9:4b:9a:58:bf:43:c8:b5:6f:9f:d6:5d:f1:5f: ec:bd:e2:98:dd:dd:aa:6c:47:fa:ac:0d:02:f5:af: fa:c9:72:b2:5e:c0:87:2f:f5:ac:8d:b8:2b:31:25: 4d:e8:b3:ed:39:74:e1:ce:db:0c:03:06:a1:ce:4a: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:84:D6:2A:B0:C3:CA:83:40:3D:DD:ED:CF:4B:4D:F1:B7:58:85:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:40:57:6e:7d:06:5f:26:9d:37:45:49:3c:fa:41:a7:50:b5: d8:a1:67:07:1f:0b:19:c3:a7:1a:a9:c9:96:e8:76:d2:67:9e: 78:37:d4:a1:08:97:95:1a:76:44:20:fc:42:e9:9a:5c:33:86: 83:d4:de:f7:73:44:e9:70:bc:ce:60:4b:7f:01:a2:7d:cc:84: f4:cc:a8:18:73:87:47:cd:fe:7f:5f:be:52:78:cc:74:70:b5: f0:81:0c:49:7a:72:48:d6:b5:88:72:1d:d1:e1:f9:31:6c:3d: 54:b7:f0:34:34:5c:01:9f:da:36:4c:bf:ba:0f:ba:7d:f4:8d: 66:1e:42:ad:f5:0b:de:1b:74:ac:df:9f:bd:de:50:f1:f0:27: 28:cf:57:a6:b6:92:24:2a:61:dd:78:52:58:93:f6:bf:42:26: d0:30:51:60:50:48:a6:64:57:12:b0:97:a8:51:51:95:a3:2e: 29:6f:9e:c3:c6:08:76:ff:1a:40:39:2d:e2:f7:45:7e:d6:0d: 75:1e:16:b4:a0:6f:86:79:63:9c:dd:8f:4c:a9:be:db:2c:9b: e5:6f:fa:fe:00:74:f3:7d:1a:68:ea:3e:80:8a:d0:1e:25:af: 97:bc:89:56:13:f5:0e:4d:13:e7:60:66:a9:80:91:c5:be:28: 3a:42:73:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl7evqxAcHduPdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MThhNjIwYzItNTI0Zi00NTc3LTlkM2MtOTIyN2YyNDA0NzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuVE5thd7QeDjRX+cJb0ZEczNW0NQjNkw8/1 FNNJdbi8vZF9WoqbEXXjxyVkCs38ZZ3aHoqCF/zTeu2yvz68Cmr3KjE2kqxdig7q LVPrhUioL6lX/Vpmgr9RlDOygcUIjEOm4qq8uxRaKUykmeVjPQmsZMhzgbAQMsKo gp0c1AYRlcaAIWWyaeOh2jqlT1SDtTmffqEF0hG8qYsWhQ2eqfCrf3Lg7hE6v0s/ HgimaQZa1aFtGSNul3K65+QUpsnNwlcA2UuaWL9DyLVvn9Zd8V/sveKY3d2qbEf6 rA0C9a/6yXKyXsCHL/WsjbgrMSVN6LPtOXThztsMAwahzkpmFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGE1iqww8qDQD3d7c9LTfG3WIXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJkZTY2ZTAtZWU5NC0z ZTIzLTk3ZGUtZmFkNjMxYTk3NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINAV259Bl8mnTdFSTz6QadQtdihZwcfCxnDpxqpyZbodtJnnng31KEI l5UadkQg/ELpmlwzhoPU3vdzROlwvM5gS38Bon3MhPTMqBhzh0fN/n9fvlJ4zHRw tfCBDEl6ckjWtYhyHdHh+TFsPVS38DQ0XAGf2jZMv7oPun30jWYeQq31C94bdKzf n73eUPHwJyjPV6a2kiQqYd14UliT9r9CJtAwUWBQSKZkVxKwl6hRUZWjLilvnsPG CHb/GkA5LeL3RX7WDXUeFrSgb4Z5Y5zdj0ypvtssm+Vv+v4AdPN9GmjqPoCK0B4l r5e8iVYT9Q5NE+dgZqmAkcW+KDpCc+M= -----END CERTIFICATE-----Generated at Fri Sep 11 14:24:43 2026 by rpki-client