$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa File: c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa (raw, json) Hash identifier: /iDUG1GSJ71JmNsoztgbs+SjlfcJxfl4xaQExWoasMI= Subject key identifier: D0:77:54:A7:56:E1:FB:88:61:F8:12:E6:3B:5F:3C:33:F0:FB:FE:9F Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584ED001DA86E48348914E5C3E80 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 46408 IP address blocks: 104.255.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:da:86:e4:83:48:91:4e:5c:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=3930e2ed-f0f3-4af2-8e47-344ff8164e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:4f:e3:1e:41:f8:f4:96:18:49:39:e5:d7: 79:fb:14:c6:f6:a3:a2:4a:d7:21:56:81:97:27:4a: 47:1d:c3:22:57:29:df:f9:98:a1:77:fa:42:08:9f: b2:7d:0f:4d:be:f7:5b:cf:ad:b1:5b:0d:67:34:01: 58:d6:c0:34:1e:a9:7c:4c:ef:2f:df:21:d5:c5:e1: a2:fa:fd:d9:9f:99:63:a9:33:c9:26:33:2c:51:99: 9f:57:ba:c4:9d:ef:00:6c:e8:07:f8:ec:ee:c2:19: 63:9d:53:9d:49:8f:c9:cc:76:64:cf:99:22:33:05: 1e:44:7d:29:44:4e:91:91:f1:9e:f3:57:dc:cf:96: 42:5b:0d:2e:10:49:40:62:53:9e:a6:3e:78:f4:e8: 2a:14:73:af:25:3e:e1:31:65:a8:df:4e:d6:dc:cb: 6a:16:38:04:2b:43:25:42:35:0b:a8:63:49:83:d9: 95:c6:49:8b:05:4a:04:88:4a:03:60:25:a5:eb:0a: 64:3d:62:22:2b:63:b7:51:d6:fb:25:88:88:ec:46: c2:5c:f6:53:f8:55:c4:53:80:fe:e2:4e:0a:ef:53: fc:fb:bc:2b:f3:c1:af:f8:8f:f9:cd:a3:21:b6:61: 70:d7:09:d6:49:5c:ef:6f:e8:cc:30:c6:44:3d:d3: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:77:54:A7:56:E1:FB:88:61:F8:12:E6:3B:5F:3C:33:F0:FB:FE:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/c8847bd4-be8e-3fcb-aad9-cea490dfbb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 104.255.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:d3:84:52:cc:e2:fb:1b:5f:15:46:f9:1d:3b:41:96:a3:a8: 6a:3a:35:98:82:16:82:98:bb:81:4e:fa:2d:17:36:44:34:be: be:c7:ea:ef:c1:e1:18:29:2b:3f:8d:ef:40:6d:cc:c5:2a:0e: 89:a9:3b:a5:b3:6c:2e:78:90:7c:57:e0:f3:34:17:6b:ba:03: 95:ad:bc:5d:ce:30:18:4e:f9:2a:fc:4d:ad:2b:62:02:28:06: 78:cd:84:3e:ae:83:5f:7d:2b:9e:5e:76:7f:c6:a8:84:8a:8d: 1e:c1:f3:94:8f:30:13:3e:6b:3e:11:1d:91:84:96:d4:be:cf: 25:05:55:ef:ef:99:3c:42:8a:e3:25:28:e3:da:19:41:87:38: 99:7e:a3:54:9e:bd:c7:4a:54:18:b6:f8:a4:23:70:b6:2e:f3: 52:ef:76:0f:9a:18:40:d8:42:df:29:15:19:63:f6:3b:86:b9: 6b:ac:7c:18:dd:e5:8b:14:fc:bd:43:5c:e7:87:6c:a5:1d:14: 73:60:06:51:d5:4c:c2:d9:de:fd:2b:0a:ee:83:e3:0d:b5:21: ed:9c:f1:df:56:ad:06:23:57:69:17:d5:e5:52:d8:3f:9c:bd: 8f:85:81:13:62:ac:db:dd:23:fd:4b:96:c4:7d:ed:50:f5:6e: 21:96:bb:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdqG5INIkU5cPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MzkzMGUyZWQtZjBmMy00YWYyLThlNDctMzQ0ZmY4MTY0ZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn1P4x5B+PSWGEk55dd5+xTG9qOiStchVoGX J0pHHcMiVynf+Zihd/pCCJ+yfQ9Nvvdbz62xWw1nNAFY1sA0Hql8TO8v3yHVxeGi +v3Zn5ljqTPJJjMsUZmfV7rEne8AbOgH+OzuwhljnVOdSY/JzHZkz5kiMwUeRH0p RE6RkfGe81fcz5ZCWw0uEElAYlOepj549OgqFHOvJT7hMWWo307W3MtqFjgEK0Ml QjULqGNJg9mVxkmLBUoEiEoDYCWl6wpkPWIiK2O3Udb7JYiI7EbCXPZT+FXEU4D+ 4k4K71P8+7wr88Gv+I/5zaMhtmFw1wnWSVzvb+jMMMZEPdOFwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNB3VKdW4fuIYfgS5jtfPDPw+/6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvYzg4NDdiZDQtYmU4ZS0z ZmNiLWFhZDktY2VhNDkwZGZiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHThFLM4vsbXxVG+R07QZajqGo6NZiCFoKYu4FO+i0XNkQ0vr7H6u/B 4RgpKz+N70BtzMUqDompO6WzbC54kHxX4PM0F2u6A5WtvF3OMBhO+Sr8Ta0rYgIo BnjNhD6ug199K55edn/GqISKjR7B85SPMBM+az4RHZGEltS+zyUFVe/vmTxCiuMl KOPaGUGHOJl+o1SevcdKVBi2+KQjcLYu81Lvdg+aGEDYQt8pFRlj9juGuWusfBjd 5YsU/L1DXOeHbKUdFHNgBlHVTMLZ3v0rCu6D4w21Ie2c8d9WrQYjV2kX1eVS2D+c vY+FgRNirNvdI/1LlsR97VD1biGWuyE= -----END CERTIFICATE-----Generated at Sat Sep 12 14:23:45 2026 by rpki-client