$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa File: 86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa (raw, json) Hash identifier: 8CXvHHSgTigzlsdCboe8DxsaZ1ZEtUApqy2NNtawkJU= Subject key identifier: 1D:F6:30:40:87:24:C3:44:B3:68:58:AC:4E:D4:55:D4:95:03:9F:82 Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584EFF77779801328D1A78AB1C00 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 23158 IP address blocks: 104.255.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:77:98:01:32:8d:1a:78:ab:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=d5d756cc-78a1-400f-ac07-0b5eef69a683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ba:10:4f:35:04:c5:8a:75:71:c8:11:de:5b: 26:02:de:e5:dc:22:0f:0a:5d:94:ee:c3:57:2e:9d: 3c:b6:4b:9c:eb:05:6a:ec:9a:1b:11:c5:71:a9:f6: fc:1a:ab:f0:40:6e:8e:a3:e6:8a:31:20:8b:ee:cc: 71:e2:68:b9:8e:1f:dc:32:e8:3f:c6:62:7a:d6:b0: 37:ad:a0:d9:13:29:d4:ac:d5:da:8f:0c:9b:90:a0: bf:84:e5:87:25:c6:29:f4:bc:cd:b9:7f:c8:da:da: f8:42:bf:5e:62:8c:f1:8e:82:30:26:eb:dd:22:41: 46:fc:50:7a:79:94:b7:e6:ff:04:cb:13:db:ab:7b: de:c2:db:e8:88:9c:14:b4:7e:17:34:ee:73:74:d4: 70:2d:3e:13:36:58:12:5a:f7:c1:d3:9e:9c:46:46: a3:d8:e5:f0:5b:a3:54:68:24:a7:56:ab:aa:84:88: 0e:75:e2:72:c7:31:fc:54:32:9b:c8:7f:48:f6:7b: cc:89:2e:54:c6:c7:3b:0a:14:03:64:c3:19:97:1c: fd:ac:38:4f:d0:6d:14:36:b8:c6:b0:08:1d:de:b7: 42:dc:af:63:5f:25:80:84:05:68:6b:2d:52:7d:bb: 5d:f8:d2:d5:94:bc:7e:b0:97:7f:d8:75:ba:b2:7d: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F6:30:40:87:24:C3:44:B3:68:58:AC:4E:D4:55:D4:95:03:9F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 104.255.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:44:83:ac:fc:fa:b0:06:bc:cd:67:ab:f7:96:21:04:a8:15: 11:ca:6f:eb:f7:df:82:52:a3:74:fa:38:70:54:80:2f:e7:b7: aa:17:6d:58:47:70:85:39:d2:53:b6:98:83:c1:5e:d9:fe:a8: 5b:e8:56:c2:fd:7d:44:97:24:31:d2:6c:96:8b:95:cc:5a:2d: b9:14:f2:4d:64:c7:ac:75:58:85:ec:cd:35:96:08:66:6c:3d: 71:08:e0:e9:4a:d2:73:0c:01:42:59:74:8e:8a:01:1c:25:eb: 16:be:c8:c9:1b:63:53:b3:97:7b:d0:22:79:40:41:c3:51:1e: a8:57:a9:47:ab:b2:fe:ab:59:74:cf:c7:88:09:d9:a6:72:a3: 9c:59:2d:b7:19:88:0f:6c:32:40:a6:b2:05:6f:da:fc:7e:95: 0c:6c:f4:84:06:14:06:ce:d7:d7:12:d2:9a:21:d6:df:56:67: f6:ee:13:40:35:ba:19:7c:7a:54:fe:44:69:2b:01:d4:bd:41: 8e:4e:22:60:3b:c0:c0:79:95:96:65:89:d0:ef:58:79:dd:44: fd:97:2d:7d:e0:ab:b2:bb:43:96:a7:a4:6a:69:4f:7f:73:dd: 7f:4b:54:91:2e:ec:8e:1b:7b:b7:3c:d1:82:6b:08:2e:1f:56: e5:59:18:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3eYATKNGnirHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDVkNzU2Y2MtNzhhMS00MDBmLWFjMDctMGI1ZWVmNjlhNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLoQTzUExYp1ccgR3lsmAt7l3CIPCl2U7sNX Lp08tkuc6wVq7JobEcVxqfb8GqvwQG6Oo+aKMSCL7sxx4mi5jh/cMug/xmJ61rA3 raDZEynUrNXajwybkKC/hOWHJcYp9LzNuX/I2tr4Qr9eYozxjoIwJuvdIkFG/FB6 eZS35v8EyxPbq3vewtvoiJwUtH4XNO5zdNRwLT4TNlgSWvfB056cRkaj2OXwW6NU aCSnVquqhIgOdeJyxzH8VDKbyH9I9nvMiS5Uxsc7ChQDZMMZlxz9rDhP0G0UNrjG sAgd3rdC3K9jXyWAhAVoay1Sfbtd+NLVlLx+sJd/2HW6sn1vKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB32MECHJMNEs2hYrE7UVdSVA5+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvODY4NDZhMDktYmM3Yi0z ZjJlLTgzMGMtZDJhODc3OWYzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtEg6z8+rAGvM1nq/eWIQSoFRHKb+v334JSo3T6OHBUgC/nt6oXbVhH cIU50lO2mIPBXtn+qFvoVsL9fUSXJDHSbJaLlcxaLbkU8k1kx6x1WIXszTWWCGZs PXEI4OlK0nMMAUJZdI6KARwl6xa+yMkbY1Ozl3vQInlAQcNRHqhXqUersv6rWXTP x4gJ2aZyo5xZLbcZiA9sMkCmsgVv2vx+lQxs9IQGFAbO19cS0poh1t9WZ/buE0A1 uhl8elT+RGkrAdS9QY5OImA7wMB5lZZlidDvWHndRP2XLX3gq7K7Q5anpGppT39z 3X9LVJEu7I4be7c80YJrCC4fVuVZGP0= -----END CERTIFICATE-----Generated at Sun Sep 20 15:48:54 2026 by rpki-client