$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df68f0ac-7404-3fe9-bdf4-36cbfab21eda.roa File: df68f0ac-7404-3fe9-bdf4-36cbfab21eda.roa (raw, json) Hash identifier: LaYHYjDmGGNPDCSbRzDkWedwQ/5P/h8qt1m3bk6nXL0= Subject key identifier: 5B:5E:F3:68:6D:73:8D:65:D9:85:09:B7:70:DE:68:1B:FD:0E:5B:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F549D7FD46F2502B892317FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df68f0ac-7404-3fe9-bdf4-36cbfab21eda.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 21342 IP address blocks: 104.73.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7f:d4:6f:25:02:b8:92:31:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0309ada2-d449-4005-a9e2-c54deeb6c670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:ef:64:6c:9c:7e:da:77:82:de:b0:26:d6: 28:ae:0f:d2:42:84:96:68:43:fa:3f:64:ae:e4:54: 59:35:0d:a8:f9:84:93:d1:0e:ba:ee:4d:c2:86:77: 67:73:f1:a2:4c:9e:33:6f:c7:0c:32:c2:e2:11:6d: 5c:84:be:93:17:e2:c5:87:e5:13:bc:12:b4:ca:41: 91:e9:0c:c0:30:09:da:e1:de:05:4f:9a:d0:16:4b: 5e:04:08:d7:7a:b1:9f:0e:60:45:17:9d:8e:e9:98: 8b:b7:d7:1c:34:ff:2b:04:2d:2c:29:66:47:93:4c: 93:8f:90:9a:6b:07:49:c2:9f:b2:b2:2f:1f:51:27: ac:f2:da:d1:29:f8:38:b6:fb:55:73:73:9d:58:4b: ac:cf:e4:df:7e:4a:bd:5d:9e:90:12:56:dc:c2:d6: b7:93:6c:7e:bc:e8:66:16:13:bc:77:96:f6:94:b6: 0a:02:bd:a9:69:4a:56:37:e4:ae:5d:64:18:4f:27: 05:d7:50:44:40:35:37:de:2e:34:11:e9:2b:b2:a0: dd:0e:29:d8:4a:f0:d6:6a:3b:eb:34:70:e9:3e:52: 74:04:13:69:d8:0e:a3:91:be:b6:3d:57:fb:90:61: 74:e6:03:70:03:f1:80:6c:17:9c:14:84:c2:b5:1d: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5E:F3:68:6D:73:8D:65:D9:85:09:B7:70:DE:68:1B:FD:0E:5B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df68f0ac-7404-3fe9-bdf4-36cbfab21eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.73.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3d:62:2c:a8:24:2c:e5:a8:00:b7:a4:7b:33:46:38:a3:63: ee:ae:23:92:ae:41:55:22:10:e8:0e:0a:35:e7:41:4a:57:bd: f6:3c:24:f3:0f:19:aa:37:3b:4b:10:27:c1:75:03:77:06:25: 38:e1:8f:fe:17:cb:7b:bb:4c:2b:40:2f:d5:2b:a4:a1:33:69: b5:76:7e:5c:5a:08:38:a6:06:a7:42:e1:ec:ea:6f:a3:ce:52: 72:29:d3:21:dc:24:84:44:ed:91:e3:31:e6:73:26:d2:e7:18: 51:7b:65:a4:79:e0:82:e3:29:9a:f9:db:9c:e5:49:58:d5:a9: 1f:a0:e1:a1:38:f0:3d:9f:a7:62:f8:d5:6a:b6:50:79:ef:62: c6:56:96:f1:b9:11:ce:a2:e2:0d:63:04:cf:a3:fc:98:35:b3: 37:cc:54:5d:93:92:ac:53:45:a8:24:fa:b8:a1:b0:d6:0c:08: bb:af:6c:2e:e1:db:f6:04:15:f5:41:7e:0a:72:66:f2:c2:94: 70:c1:ac:fe:61:56:6d:ef:6f:84:19:cb:53:39:4c:4e:d1:60: 31:17:19:28:d5:3f:84:c0:ab:0d:51:13:a7:f2:40:c0:8f:c6: 82:da:e1:4e:4b:24:64:4d:da:fe:3a:36:fd:ef:a5:40:ca:e0: 89:c4:23:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnX/UbyUCuJIxf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MDMwOWFkYTItZDQ0OS00MDA1LWE5ZTItYzU0ZGVlYjZjNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3bvZGycftp3gt6wJtYorg/SQoSWaEP6P2Su 5FRZNQ2o+YST0Q667k3Chndnc/GiTJ4zb8cMMsLiEW1chL6TF+LFh+UTvBK0ykGR 6QzAMAna4d4FT5rQFkteBAjXerGfDmBFF52O6ZiLt9ccNP8rBC0sKWZHk0yTj5Ca awdJwp+ysi8fUSes8trRKfg4tvtVc3OdWEusz+Tffkq9XZ6QElbcwta3k2x+vOhm FhO8d5b2lLYKAr2paUpWN+SuXWQYTycF11BEQDU33i40EekrsqDdDinYSvDWajvr NHDpPlJ0BBNp2A6jkb62PVf7kGF05gNwA/GAbBecFITCtR0UFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFte82htc41l2YUJt3DeaBv9DlsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY2OGYwYWMtNzQwNC0z ZmU5LWJkZjQtMzZjYmZhYjIxZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEkHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM9YiyoJCzlqAC3pHszRjijY+6uI5KuQVUiEOgOCjXnQUpXvfY8JPMP Gao3O0sQJ8F1A3cGJTjhj/4Xy3u7TCtAL9UrpKEzabV2flxaCDimBqdC4ezqb6PO UnIp0yHcJIRE7ZHjMeZzJtLnGFF7ZaR54ILjKZr525zlSVjVqR+g4aE48D2fp2L4 1Wq2UHnvYsZWlvG5Ec6i4g1jBM+j/Jg1szfMVF2TkqxTRagk+rihsNYMCLuvbC7h 2/YEFfVBfgpyZvLClHDBrP5hVm3vb4QZy1M5TE7RYDEXGSjVP4TAqw1RE6fyQMCP xoLa4U5LJGRN2v46Nv3vpUDK4InEI4s= -----END CERTIFICATE-----Generated at Fri Oct 23 20:40:09 2026 by rpki-client