$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8553f576-a5fc-3883-96b6-1ef4147e4548.roa File: 8553f576-a5fc-3883-96b6-1ef4147e4548.roa (raw, json) Hash identifier: 1ru7kkOclVL7w1RWG67/nlAcEVa1B6NVHoyrtIdE7zk= Subject key identifier: 5A:FA:05:F0:38:F7:07:CF:67:55:C7:65:2D:67:4C:27:9E:95:2A:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F6F22E76A7207100B12DC06C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8553f576-a5fc-3883-96b6-1ef4147e4548.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 23243 IP address blocks: 104.117.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e7:6a:72:07:10:0b:12:dc:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=2319e079-a1a6-4aed-9f2e-fdb7f96c8bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:e3:16:6e:b6:2b:81:1f:e5:b2:b7:e0:91: ae:fd:1e:6e:d4:d7:36:87:20:4b:49:5b:f3:0b:ed: ec:10:0c:ca:a4:45:53:83:5f:be:94:c2:f2:4e:27: 97:d9:01:51:c4:cd:7c:d6:54:c0:5c:19:d1:e3:83: 7c:6b:1b:5f:6c:42:21:69:58:28:3b:1a:fe:d5:e5: ff:ce:42:6b:9c:a4:4c:e3:07:8c:bd:48:70:f6:ce: cd:75:b1:e1:f9:9a:cc:87:e6:21:40:c4:a7:74:57: a9:22:6b:eb:7c:cc:76:38:46:92:f0:11:70:72:57: 60:53:0b:fb:de:69:9a:5c:98:d7:13:57:45:6a:48: da:31:8a:70:c0:c9:27:ce:a8:9a:a7:45:bb:e3:24: 1e:82:2d:37:88:03:cb:6b:03:3b:40:40:50:2b:c9: 8a:6d:5a:da:81:ad:cc:69:45:c6:b6:37:cc:10:3e: 50:9d:42:81:f8:4d:6e:e7:ae:e0:6c:28:46:7f:28: be:2b:a5:c1:32:e3:1d:9d:89:27:96:a5:50:7f:d5: 00:00:29:58:af:27:a3:cd:50:e0:ed:1b:38:ed:49: 1f:84:de:05:f6:36:4d:df:18:fe:42:0b:8d:2b:fb: 80:07:4b:d7:97:cb:fc:3b:70:1b:31:3e:5d:10:20: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FA:05:F0:38:F7:07:CF:67:55:C7:65:2D:67:4C:27:9E:95:2A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8553f576-a5fc-3883-96b6-1ef4147e4548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.117.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:60:91:5e:97:97:8a:e5:84:2a:eb:99:24:5d:63:53:a6:1a: ff:ac:c8:93:a1:aa:8f:a3:08:d5:27:07:fa:a4:de:b2:85:b5: d2:0e:82:96:eb:f7:69:24:6e:c6:35:bd:64:41:0e:aa:40:da: a8:dd:dc:58:1a:00:01:d8:1c:a1:96:0a:ce:d5:4a:72:9e:39: c5:c9:4e:65:16:69:90:a4:aa:42:a1:9b:5a:2d:0b:f3:fa:4f: 2a:ad:98:46:13:10:de:a8:24:d7:50:b5:05:8d:27:40:13:ad: 4c:cd:a6:5c:bf:10:22:23:94:48:ac:be:71:ee:2b:2d:38:fe: 89:58:48:fe:00:b4:8d:01:4b:1e:14:27:3a:b4:66:02:cc:56: ba:33:20:82:78:bc:a4:a6:a8:c7:64:2f:a3:03:47:25:a5:29: a1:cb:e9:a5:93:e1:6e:c6:be:7e:b9:22:b2:cd:1c:bb:76:2f: 9c:8e:b4:f6:a6:73:7c:65:a1:c8:ff:fe:6f:01:f2:fb:9e:1d: 97:30:8a:23:84:b9:69:d1:ec:8b:bd:29:e9:03:8a:7b:53:12: c9:71:43:75:65:69:44:ad:db:04:9c:fb:c7:e0:58:c4:03:67: 0c:e2:2b:c3:b4:bc:70:81:0b:5d:d5:bb:de:be:4a:b6:9c:75: 15:84:ca:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIudqcgcQCxLcBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MjMxOWUwNzktYTFhNi00YWVkLTlmMmUtZmRiN2Y5NmM4YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnjjFm62K4Ef5bK34JGu/R5u1Nc2hyBLSVvz C+3sEAzKpEVTg1++lMLyTieX2QFRxM181lTAXBnR44N8axtfbEIhaVgoOxr+1eX/ zkJrnKRM4weMvUhw9s7NdbHh+ZrMh+YhQMSndFepImvrfMx2OEaS8BFwcldgUwv7 3mmaXJjXE1dFakjaMYpwwMknzqiap0W74yQegi03iAPLawM7QEBQK8mKbVraga3M aUXGtjfMED5QnUKB+E1u567gbChGfyi+K6XBMuMdnYknlqVQf9UAAClYryejzVDg 7Rs47UkfhN4F9jZN3xj+QguNK/uAB0vXl8v8O3AbMT5dECC6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr6BfA49wfPZ1XHZS1nTCeelSojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU1M2Y1NzYtYTVmYy0z ODgzLTk2YjYtMWVmNDE0N2U0NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClgkV6Xl4rlhCrrmSRdY1OmGv+syJOhqo+jCNUnB/qk3rKFtdIOgpbr 92kkbsY1vWRBDqpA2qjd3FgaAAHYHKGWCs7VSnKeOcXJTmUWaZCkqkKhm1otC/P6 TyqtmEYTEN6oJNdQtQWNJ0ATrUzNply/ECIjlEisvnHuKy04/olYSP4AtI0BSx4U Jzq0ZgLMVrozIIJ4vKSmqMdkL6MDRyWlKaHL6aWT4W7Gvn65IrLNHLt2L5yOtPam c3xlocj//m8B8vueHZcwiiOEuWnR7Iu9KekDintTEslxQ3VlaUSt2wSc+8fgWMQD ZwziK8O0vHCBC13Vu96+SracdRWEyto= -----END CERTIFICATE-----Generated at Mon Nov 2 19:12:33 2026 by rpki-client