$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa File: afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa (raw, json) Hash identifier: boEg/4JDNPUD/CnazClYAmFBahDUC/Bfw2b0ii337U8= Subject key identifier: 9B:D8:34:0A:B5:26:B1:CE:D9:2D:D6:BB:35:D3:C8:E0:AA:F4:C3:D5 Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Certificate serial: 010D0C9F4328584F6F2302962458F50502767AC0 Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 55992 IP address blocks: 104.192.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:02:96:24:58:f5:05:02:76:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=694d6576-c920-49a7-ae6c-0fc66a0af3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:c9:e1:25:90:f6:2e:12:fe:08:3b:a8:b8: 23:bf:40:fb:04:27:86:d1:4d:c3:a2:6c:60:19:a8: 61:bd:0d:81:a2:7e:06:92:b7:c3:5a:b9:e3:b6:59: 2a:1a:60:6a:66:7e:c2:62:62:f6:79:21:d1:15:63: 7f:90:e5:f3:1e:87:1d:a6:f6:6e:0c:0e:dc:6f:dd: 9e:3e:9c:3c:a9:72:77:40:29:b9:e6:c5:e1:d2:8b: 85:22:fe:12:04:9c:18:a1:f5:be:33:9b:bc:77:09: e5:a5:7b:44:4c:06:00:4a:19:34:1b:70:11:4d:fb: f5:61:de:45:27:19:4b:79:e6:68:ac:5b:51:db:3a: b0:c2:10:0a:3c:15:b7:0c:a3:2c:2c:01:a9:07:06: 9e:ef:8a:c0:0e:94:e2:45:9a:ee:74:e5:29:07:4c: d3:7a:30:f8:04:6a:5b:c6:ad:a5:9f:55:ed:42:1f: 1f:a7:63:8e:bd:96:d3:4c:cc:41:05:c5:4f:d6:e5: 6e:93:43:c5:b8:af:69:1e:db:4e:a3:26:3a:58:e8: 7e:b0:6b:db:9b:44:08:e7:66:28:44:9b:9c:a6:75: 36:6a:0c:0e:a6:4f:c6:c2:b7:2d:57:2c:9e:49:30: 6f:6c:8c:d1:46:e0:50:64:d6:9d:6f:c0:67:65:47: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:34:0A:B5:26:B1:CE:D9:2D:D6:BB:35:D3:C8:E0:AA:F4:C3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/afc599f9-cadc-3568-a1ec-95c3cd7ebc53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl X509v3 Authority Key Identifier: keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer sbgp-ipAddrBlock: critical IPv4: 104.192.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d1:c9:6b:73:49:80:2a:2c:b1:0c:cb:5a:4a:aa:22:7b:fd: be:a3:37:fa:eb:7d:6d:ce:3d:9c:7d:aa:1d:94:42:41:04:21: 55:de:37:c7:ee:7d:85:e8:a6:99:d8:6c:c8:7b:41:1e:d8:73: 64:d5:b4:eb:a7:a6:60:ba:8e:f4:16:fc:c6:b7:4a:b0:c4:df: 23:27:cf:91:53:14:c8:36:ea:7a:6b:d8:b2:45:a8:5d:fc:2b: 33:76:b1:fc:52:92:f4:df:1e:a9:02:ff:36:54:22:f5:59:f9: ea:6e:e4:27:d3:36:9b:fb:28:6c:b6:8a:9c:42:62:90:b4:8f: b4:87:bd:b2:81:5a:73:6f:e4:bf:eb:09:50:b1:a1:24:c9:89: 11:21:a4:78:03:5d:39:b4:96:ba:de:d8:de:d7:bb:bc:44:14: 64:d4:ec:cd:23:2e:fb:88:40:0f:a1:66:01:9a:b6:a9:8c:32: c6:20:73:31:9c:66:ca:2b:5e:91:2d:bb:bf:ea:1e:8f:58:03: 14:8d:ae:22:29:b3:bd:d1:eb:c5:e6:2f:d6:43:46:c6:77:41: a2:a1:b6:94:7f:29:31:c4:c0:7a:5d:c9:67:13:0e:75:ce:5e: be:81:f9:78:dc:38:4a:89:49:96:ea:3d:19:77:6d:6d:35:75: 0a:33:70:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwKWJFj1BQJ2esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl Y2FmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk Njk0ZDY1NzYtYzkyMC00OWE3LWFlNmMtMGZjNjZhMGFmM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1HJ4SWQ9i4S/gg7qLgjv0D7BCeG0U3Domxg GahhvQ2Bon4GkrfDWrnjtlkqGmBqZn7CYmL2eSHRFWN/kOXzHocdpvZuDA7cb92e Ppw8qXJ3QCm55sXh0ouFIv4SBJwYofW+M5u8dwnlpXtETAYAShk0G3ARTfv1Yd5F JxlLeeZorFtR2zqwwhAKPBW3DKMsLAGpBwae74rADpTiRZrudOUpB0zTejD4BGpb xq2ln1XtQh8fp2OOvZbTTMxBBcVP1uVuk0PFuK9pHttOoyY6WOh+sGvbm0QI52Yo RJucpnU2agwOpk/GwrctVyyeSTBvbIzRRuBQZNadb8BnZUfl0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvYNAq1JrHO2S3WuzXTyOCq9MPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvYWZjNTk5ZjktY2FkYy0z NTY4LWExZWMtOTVjM2NkN2ViYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5 NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4 ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1 ZmY3OGVjYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaMBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzRyWtzSYAqLLEMy1pKqiJ7/b6jN/rrfW3OPZx9qh2UQkEEIVXeN8fu fYXoppnYbMh7QR7Yc2TVtOunpmC6jvQW/Ma3SrDE3yMnz5FTFMg26npr2LJFqF38 KzN2sfxSkvTfHqkC/zZUIvVZ+epu5CfTNpv7KGy2ipxCYpC0j7SHvbKBWnNv5L/r CVCxoSTJiREhpHgDXTm0lrre2N7Xu7xEFGTU7M0jLvuIQA+hZgGatqmMMsYgczGc ZsorXpEtu7/qHo9YAxSNriIps73R68XmL9ZDRsZ3QaKhtpR/KTHEwHpdyWcTDnXO Xr6B+XjcOEqJSZbqPRl3bW01dQozcFU= -----END CERTIFICATE-----Generated at Wed Oct 28 11:39:45 2026 by rpki-client