$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa File: 90e30d69-d192-3d3b-af69-a1564717f280.roa (raw, json) Hash identifier: G86B5NTfkDuNe9z1dg01brylOymgteMxp6M0Ftr2pbk= Subject key identifier: 72:90:A8:57:0C:C8:D6:68:B9:5E:35:D2:80:E6:31:DA:EF:7F:B8:67 Certificate issuer: /CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Certificate serial: 010D0C9F4328584EA79875B5A606794E23923B00 Authority key identifier: 7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30580 IP address blocks: 104.249.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:75:b5:a6:06:79:4e:23:92:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3681ef63-b03c-48af-8191-e13ce8cb78c3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=65f67681-d31e-4d35-a6c8-80b9812fc8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:1f:59:be:fd:a1:05:d4:ad:4d:79:99:9e: 2b:2a:09:af:03:0a:2e:5d:68:64:55:bd:a5:95:76: d5:55:79:6d:4c:f6:3e:01:40:48:dd:57:bc:65:82: f9:b5:8c:50:07:01:63:6f:c9:66:5d:c0:6e:db:0f: a8:e2:e3:4e:e8:d6:e1:cf:40:0b:05:08:ab:9a:9a: 86:62:45:ab:f3:bb:4c:42:db:96:50:52:7e:43:0e: d2:ff:12:06:f7:0f:1a:c2:9e:17:22:b8:9f:71:e3: ab:2c:f8:45:f5:f5:00:0c:75:96:0b:2f:1d:3f:f1: a5:34:a3:a8:69:33:56:e5:61:84:12:e1:e5:a2:6f: c9:d7:dd:b8:cb:dc:a0:02:75:6f:f7:37:a6:74:fb: 6a:7c:45:8b:02:3f:80:b9:82:80:c4:3c:a2:bc:7c: 3e:f9:4b:13:a5:77:56:dd:a0:35:67:ad:86:0b:66: 67:0c:15:f4:e7:69:24:4a:ed:33:e7:89:d1:aa:d3: 32:57:2e:bb:d3:f4:f3:1e:f5:3b:7f:36:98:34:fd: c7:62:91:5d:28:64:1c:34:1e:5f:51:f4:c8:09:39: b7:3d:1d:ef:ef:ef:1c:82:d5:d1:84:5c:24:fb:b1: e9:bd:2b:a1:39:54:87:13:15:60:3a:e8:db:59:7b: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:90:A8:57:0C:C8:D6:68:B9:5E:35:D2:80:E6:31:DA:EF:7F:B8:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/90e30d69-d192-3d3b-af69-a1564717f280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3/3681ef63-b03c-48af-8191-e13ce8cb78c3.crl X509v3 Authority Key Identifier: keyid:7B:B8:74:AC:94:43:89:50:D9:20:1E:3B:BD:36:E6:81:97:D1:3E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3681ef63-b03c-48af-8191-e13ce8cb78c3.cer sbgp-ipAddrBlock: critical IPv4: 104.249.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:aa:71:38:14:dd:b1:37:da:08:83:d3:c8:a5:19:2e:f1:44: fd:55:c0:32:2a:6d:93:63:8a:e6:e5:01:21:c3:e0:68:00:e6: 32:cf:7e:64:9d:4b:68:ad:f8:04:fd:47:af:50:f6:24:1d:2e: b8:80:4b:33:c2:fa:9e:dd:ba:ae:24:fb:38:d6:52:8a:17:d0: 91:93:fd:ed:da:5f:aa:22:09:32:26:04:be:02:bd:dd:1b:6e: 07:3b:31:d4:4b:d9:ea:0a:15:92:ce:4d:9c:63:f5:18:82:61: 21:af:bb:c8:1e:4c:ff:49:a2:90:fd:1b:79:52:f8:fd:d8:19: cd:cb:47:df:48:46:52:04:a0:98:8d:eb:bb:9b:0c:e0:36:f7: db:d2:c5:b9:79:57:6d:e8:70:54:18:04:eb:d1:15:cb:0d:fe: 72:01:34:65:0c:96:5d:11:67:ae:50:eb:78:06:de:a0:06:9e: a5:f4:91:1f:a2:95:05:ac:f6:6c:0f:9d:a1:84:69:2f:48:9d: 98:10:ab:04:01:24:06:ca:a8:c1:16:ae:be:64:75:b9:c0:9b: d9:53:ff:64:e9:a3:2a:5f:30:84:e0:86:79:fa:f4:f9:79:ab: b6:b8:9a:b7:ed:26:8a:ef:57:83:f3:4b:f1:b3:b3:a9:1d:7b: e5:4e:5b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmHW1pgZ5TiOSOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4MWVmNjMtYjAzYy00OGFmLTgxOTEtZTEzY2U4Y2I3 OGMzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjVmNjc2ODEtZDMxZS00ZDM1LWE2YzgtODBiOTgxMmZjOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfofWb79oQXUrU15mZ4rKgmvAwouXWhkVb2l lXbVVXltTPY+AUBI3Ve8ZYL5tYxQBwFjb8lmXcBu2w+o4uNO6Nbhz0ALBQirmpqG YkWr87tMQtuWUFJ+Qw7S/xIG9w8awp4XIrifceOrLPhF9fUADHWWCy8dP/GlNKOo aTNW5WGEEuHlom/J1924y9ygAnVv9zemdPtqfEWLAj+AuYKAxDyivHw++UsTpXdW 3aA1Z62GC2ZnDBX052kkSu0z54nRqtMyVy670/TzHvU7fzaYNP3HYpFdKGQcNB5f UfTICTm3PR3v7+8cgtXRhFwk+7HpvSuhOVSHExVgOujbWXuIhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKQqFcMyNZouV410oDmMdrvf7hnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgx ZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNjZThjYjc4YzMvOTBlMzBkNjktZDE5Mi0z ZDNiLWFmNjktYTE1NjQ3MTdmMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzY4MWVmNjMtYjAzYy00OGFmLTgx OTEtZTEzY2U4Y2I3OGMzLzM2ODFlZjYzLWIwM2MtNDhhZi04MTkxLWUxM2NlOGNi NzhjMy5jcmwwHwYDVR0jBBgwFoAUe7h0rJRDiVDZIB47vTbmgZfRPg8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNjgxZWY2My1iMDNjLTQ4YWYtODE5MS1lMTNj ZThjYjc4YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPmFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqqcTgU3bE32giD08ilGS7xRP1VwDIqbZNjiublASHD4GgA5jLPfmSd S2it+AT9R69Q9iQdLriASzPC+p7duq4k+zjWUooX0JGT/e3aX6oiCTImBL4Cvd0b bgc7MdRL2eoKFZLOTZxj9RiCYSGvu8geTP9JopD9G3lS+P3YGc3LR99IRlIEoJiN 67ubDOA299vSxbl5V23ocFQYBOvRFcsN/nIBNGUMll0RZ65Q63gG3qAGnqX0kR+i lQWs9mwPnaGEaS9InZgQqwQBJAbKqMEWrr5kdbnAm9lT/2TpoypfMITghnn69Pl5 q7a4mrftJorvV4PzS/Gzs6kde+VOWx8= -----END CERTIFICATE-----Generated at Fri Sep 11 08:39:28 2026 by rpki-client