$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cbdce3c2-d409-3f34-ae70-ad6da5abedf5.roa File: cbdce3c2-d409-3f34-ae70-ad6da5abedf5.roa (raw, json) Hash identifier: ElxD0HGksMu/91skNLUNG4oDdS0ZtM9JAmoh6Xa4sm8= Subject key identifier: 98:7D:6A:B8:32:15:E3:7A:65:E7:2B:A3:33:F8:B2:BA:C8:44:61:9A Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584F07D77E58E2B20D92A9503600 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cbdce3c2-d409-3f34-ae70-ad6da5abedf5.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 7015 IP address blocks: 104.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:7e:58:e2:b2:0d:92:a9:50:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=feddf4ed-a37c-406a-a3ca-478f76ccfbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a0:ea:0b:37:65:31:c5:bc:d3:67:98:29:d3: ca:9f:8f:c2:be:5f:16:74:af:13:f1:f8:24:35:84: cd:71:7f:c3:83:93:f2:d3:25:9a:f8:1a:27:5d:d2: 33:07:3d:92:ae:8a:ac:7a:b6:92:a4:c3:e8:17:43: d2:d3:57:53:e8:19:b2:ef:73:c8:32:3b:f5:6c:f2: 57:f3:12:8f:c2:20:35:86:65:a7:24:64:73:52:2a: 5f:5b:51:91:f7:de:b5:85:fb:81:92:7e:17:ef:ed: 44:d4:f4:d4:ef:f3:17:5d:7e:28:08:02:8c:62:e9: c5:cf:69:a1:a9:dc:80:88:6d:af:35:eb:d8:0a:75: 2d:7e:e4:ab:04:b8:4f:c8:d3:e8:f8:92:76:10:a7: f7:b7:49:9f:bc:59:87:b7:ff:87:42:2c:c2:a7:7c: 7e:00:74:a6:68:0c:25:25:a0:53:5a:4c:15:58:c4: af:ab:42:6b:72:eb:a2:bb:ad:72:57:c2:35:c3:31: 7b:ea:f6:bc:bb:88:68:ac:fd:41:45:db:7b:7b:b3: a6:c5:5d:98:a8:6f:d7:68:13:c9:63:64:c8:22:67: e4:10:26:f8:bb:0d:3f:c7:2d:07:00:1a:6e:b5:5d: f0:c1:3a:9e:e7:5d:28:29:04:ff:5a:05:19:27:86: bc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:6A:B8:32:15:E3:7A:65:E7:2B:A3:33:F8:B2:BA:C8:44:61:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/cbdce3c2-d409-3f34-ae70-ad6da5abedf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 104.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:22:75:9b:76:0b:2c:06:8b:a6:db:a2:19:23:3a:28:7e:29: 7f:75:78:88:50:7e:8d:49:c4:4b:57:e2:93:d0:99:67:2d:65: 6a:78:ea:58:f7:09:e0:9e:c8:14:f5:54:55:61:03:2f:d2:a4: 6c:d2:7c:90:b8:13:5b:e8:2f:80:65:e4:fc:b1:b7:d6:c6:d6: 22:ec:4f:41:0b:06:28:65:f9:63:6b:d6:b5:2b:45:93:9f:7d: f3:e4:fe:aa:b5:0c:29:67:ed:f8:88:07:89:a0:65:5b:5a:65: 71:fd:56:a6:3e:7f:8c:f5:58:62:6d:19:71:eb:5e:cb:bd:bc: 05:2b:3e:cd:de:a6:b1:d4:6b:27:ee:78:76:49:9f:47:9d:b7: ec:34:f8:a5:66:25:42:3e:71:fc:b4:0f:8c:96:0a:1b:2f:8b: d7:3e:84:81:8b:db:f3:7e:31:94:23:9f:ce:17:d1:d9:1a:33: d2:f0:52:e2:55:f6:d2:43:da:54:8b:92:6c:a5:91:7e:86:0b: 72:a6:c8:73:90:42:cb:d6:e8:c3:0a:2f:7c:11:8a:56:72:1d: e3:99:7c:3a:ab:11:b0:2d:e6:7c:12:d1:e8:12:c8:46:32:3b: c2:13:36:a3:e5:c0:4f:d5:36:25:d8:8c:78:27:5f:2a:83:ff: de:58:67:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H135Y4rINkqlQNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmVkZGY0ZWQtYTM3Yy00MDZhLWEzY2EtNDc4Zjc2Y2NmYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aDqCzdlMcW802eYKdPKn4/Cvl8WdK8T8fgk NYTNcX/Dg5Py0yWa+BonXdIzBz2SroqseraSpMPoF0PS01dT6Bmy73PIMjv1bPJX 8xKPwiA1hmWnJGRzUipfW1GR9961hfuBkn4X7+1E1PTU7/MXXX4oCAKMYunFz2mh qdyAiG2vNevYCnUtfuSrBLhPyNPo+JJ2EKf3t0mfvFmHt/+HQizCp3x+AHSmaAwl JaBTWkwVWMSvq0Jrcuuiu61yV8I1wzF76va8u4horP1BRdt7e7OmxV2YqG/XaBPJ Y2TIImfkECb4uw0/xy0HABputV3wwTqe510oKQT/WgUZJ4a8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh9argyFeN6ZecrozP4srrIRGGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvY2JkY2UzYzItZDQwOS0z ZjM0LWFlNzAtYWQ2ZGE1YWJlZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAidZt2CywGi6bbohkjOih+KX91eIhQfo1JxEtX4pPQmWctZWp46lj3 CeCeyBT1VFVhAy/SpGzSfJC4E1voL4Bl5Pyxt9bG1iLsT0ELBihl+WNr1rUrRZOf ffPk/qq1DCln7fiIB4mgZVtaZXH9VqY+f4z1WGJtGXHrXsu9vAUrPs3eprHUayfu eHZJn0edt+w0+KVmJUI+cfy0D4yWChsvi9c+hIGL2/N+MZQjn84X0dkaM9LwUuJV 9tJD2lSLkmylkX6GC3KmyHOQQsvW6MMKL3wRilZyHeOZfDqrEbAt5nwS0egSyEYy O8ITNqPlwE/VNiXYjHgnXyqD/95YZ+g= -----END CERTIFICATE-----Generated at Sat Sep 5 05:12:44 2026 by rpki-client