$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa File: 9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa (raw, json) Hash identifier: jTEUsZEGZ+jl83aIe77PZs7cZpFrpSLblofPMu0rq+0= Subject key identifier: 43:B5:7A:16:D6:AF:73:93:25:D7:34:2E:6A:D3:7D:17:F6:FA:09:6B Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584F03A78CE5A18651EC02271500 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 8014 IP address blocks: 104.166.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:8c:e5:a1:86:51:ec:02:27:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=61d28533-5448-4127-9981-e3148fc93672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:33:d5:8a:f6:45:66:27:6f:51:84:70:b0: 54:56:56:fd:5d:0d:35:00:07:88:4a:2d:48:d2:5e: c5:1f:49:03:87:d7:01:d8:47:e2:26:07:dc:e3:e4: 2c:f3:98:a1:d3:bf:50:60:62:9a:de:ca:ab:01:09: 30:fc:5c:e9:eb:13:ab:9e:e8:c2:f1:69:93:2b:0a: 39:64:df:8d:b8:38:0f:8f:1c:d4:4c:67:9d:b2:e2: 72:6a:4d:36:d9:93:c0:3b:b0:a9:b2:8f:b2:ed:8c: df:0d:11:da:71:de:79:ac:46:5d:03:76:01:73:df: 40:98:28:e9:f7:95:ee:53:6d:b6:3f:bd:9a:e1:38: e7:71:4d:a4:de:62:f1:b2:c9:e4:8c:5c:47:ea:49: 40:dc:00:2e:3e:c3:1f:7e:5f:ed:6e:0b:6b:85:8c: 6d:db:ff:d5:3d:bb:8f:ba:1b:45:22:4b:40:85:61: 22:52:d5:92:05:fb:57:9c:1e:2e:47:4f:2e:1a:b0: 96:f1:66:c9:c7:de:08:b2:d1:d3:6d:44:a0:f8:b5: 14:2c:c2:38:85:13:48:32:2c:ad:96:01:9b:6c:ed: 07:49:1f:81:1f:d3:7c:01:9d:25:cc:cd:69:91:8c: c8:4c:17:8c:f4:aa:f0:47:53:c5:0e:3a:97:6f:2b: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B5:7A:16:D6:AF:73:93:25:D7:34:2E:6A:D3:7D:17:F6:FA:09:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9fa816cf-f742-38b8-abc3-b6e6cac0881f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 104.166.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a0:93:7a:b0:f0:2f:1d:87:79:ab:82:27:b2:2b:73:39:f0: 29:1c:63:91:4a:92:2a:53:10:a6:9f:a5:af:72:3c:1e:a3:30: cb:05:88:de:81:8b:18:d6:3c:78:c2:1b:c7:9a:f1:32:26:d4: 3b:f5:0c:be:9b:89:52:b8:3f:6b:af:96:99:44:59:b5:0c:0d: af:30:4a:a2:4d:23:54:f6:70:93:c9:43:98:e7:4c:db:5c:ba: 15:cd:2b:ae:ab:6e:dd:2a:e7:34:2b:43:84:64:66:0c:34:74: f8:e2:78:da:ae:ad:72:e3:cc:f4:35:8c:22:ee:5f:90:df:68: e3:3c:be:b1:78:a6:f2:4a:b0:78:31:37:bc:73:e7:96:10:56: f9:93:bd:38:b5:e8:67:7a:b6:93:dc:bd:72:b7:e1:8d:2d:28: 8b:3a:e5:02:47:32:4f:f8:7a:5a:6e:54:b2:21:e1:15:6e:42: 23:a5:1b:76:4c:19:e2:99:71:02:b6:ec:e4:49:b3:b1:95:5f: 5d:3e:88:48:b8:ee:25:90:82:56:fc:56:87:cb:a0:ab:16:dc: 0d:de:94:4d:9e:e2:53:19:c7:87:15:c7:9d:4a:8b:48:22:8e: d8:76:ea:fe:43:0a:3a:77:83:ae:d7:2a:7c:d9:16:b9:d0:2c: a0:48:96:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp4zloYZR7AInFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NjFkMjg1MzMtNTQ0OC00MTI3LTk5ODEtZTMxNDhmYzkzNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Csz1Yr2RWYnb1GEcLBUVlb9XQ01AAeISi1I 0l7FH0kDh9cB2EfiJgfc4+Qs85ih079QYGKa3sqrAQkw/Fzp6xOrnujC8WmTKwo5 ZN+NuDgPjxzUTGedsuJyak022ZPAO7Cpso+y7YzfDRHacd55rEZdA3YBc99AmCjp 95XuU222P72a4TjncU2k3mLxssnkjFxH6klA3AAuPsMffl/tbgtrhYxt2//VPbuP uhtFIktAhWEiUtWSBftXnB4uR08uGrCW8WbJx94IstHTbUSg+LUULMI4hRNIMiyt lgGbbO0HSR+BH9N8AZ0lzM1pkYzITBeM9KrwR1PFDjqXbyuzqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO1ehbWr3OTJdc0LmrTfRf2+glrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOWZhODE2Y2YtZjc0Mi0z OGI4LWFiYzMtYjZlNmNhYzA4ODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWgk3qw8C8dh3mrgieyK3M58CkcY5FKkipTEKafpa9yPB6jMMsFiN6B ixjWPHjCG8ea8TIm1Dv1DL6biVK4P2uvlplEWbUMDa8wSqJNI1T2cJPJQ5jnTNtc uhXNK66rbt0q5zQrQ4RkZgw0dPjieNqurXLjzPQ1jCLuX5DfaOM8vrF4pvJKsHgx N7xz55YQVvmTvTi16Gd6tpPcvXK34Y0tKIs65QJHMk/4elpuVLIh4RVuQiOlG3ZM GeKZcQK27ORJs7GVX10+iEi47iWQglb8VofLoKsW3A3elE2e4lMZx4cVx51Ki0gi jth26v5DCjp3g67XKnzZFrnQLKBIlm8= -----END CERTIFICATE-----Generated at Thu Sep 10 20:37:07 2026 by rpki-client