$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa File: 86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa (raw, json) Hash identifier: Y5tE8gTdwGf6EzFNF9V/e1L6usKXCX+cHHF+T+ISVRQ= Subject key identifier: 01:8B:C2:EB:D1:B5:A4:62:A2:B6:AD:D2:4D:AC:1B:BF:16:CD:9F:EB Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584FA1632AFD3AC0968FF4E95180 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 23158 IP address blocks: 104.255.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:2a:fd:3a:c0:96:8f:f4:e9:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=ab3c61bf-11a0-4aa7-bc16-037d0a16cee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:00:b5:1d:c0:cf:f4:b6:6c:dd:8a:53:b4: ef:b2:71:76:17:90:a3:5e:26:75:f4:7c:04:ff:80: 40:1e:2f:4d:17:b2:c4:7b:01:c5:e9:5b:6d:19:83: d5:f9:39:7a:14:72:23:2b:8a:80:65:c8:26:4c:97: 5f:9f:29:e0:e6:e6:43:2a:eb:13:81:6a:92:3f:57: 59:7c:1e:a1:53:ae:84:44:41:dc:77:9d:1a:0a:e6: 4a:1f:7a:9d:4e:9d:c3:9f:82:48:9b:de:e5:d7:32: d9:48:fc:36:dc:61:0c:c1:cb:a1:45:dc:45:e8:11: 09:6d:04:cc:1a:14:a8:f9:f3:73:f1:ff:41:ef:8e: 2a:08:15:9b:ee:9d:f7:f3:4a:bb:89:20:40:13:1f: 63:ec:17:a3:a1:71:8f:6b:49:8b:91:ad:21:7d:e6: 94:e8:02:cb:a8:4c:38:4d:f8:67:b7:84:c8:c6:1b: ac:f3:ab:de:92:b8:e9:7f:fe:b6:8d:be:d0:a9:18: 64:98:a7:06:cb:df:15:16:8c:b7:94:a3:6b:88:7f: 87:78:7f:67:11:fa:10:8a:dc:3d:88:bc:22:ee:32: db:84:dc:cd:8f:a9:7a:fd:f1:3d:ec:f9:d6:ab:17: 96:33:48:23:bc:e2:5a:56:a7:e9:e9:8c:b2:0c:78: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8B:C2:EB:D1:B5:A4:62:A2:B6:AD:D2:4D:AC:1B:BF:16:CD:9F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 104.255.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a5:4e:52:d6:3f:6b:95:da:5a:d4:62:27:91:69:3b:ad:5f: 10:e3:82:81:cd:1c:04:a4:41:56:c5:98:0b:e3:05:77:d8:70: 28:ed:88:f3:89:48:5a:ba:ad:51:6d:68:40:f1:a2:f0:4b:37: ca:a7:ce:03:2a:3d:df:b8:e9:75:64:6a:cc:24:f2:2e:fb:24: a1:10:25:dd:16:f0:20:dc:1d:02:dc:0a:10:be:db:42:3a:17: 51:dd:91:81:6e:2c:c4:2c:7b:14:5f:85:f5:d2:65:ff:10:91: 0d:68:6a:07:1e:87:26:3a:96:bb:1f:7c:63:fb:94:34:dd:02: fa:58:17:4d:59:b6:ea:09:01:fe:b8:fe:8d:3b:b2:9c:ca:08: 8d:bb:7e:39:d5:6d:e9:c7:67:40:18:41:62:fe:85:6f:92:e8: d3:c4:94:70:69:52:cb:ef:1e:31:20:27:ac:f4:74:5f:7a:5e: 5b:09:31:85:7b:fd:a2:8e:3d:b7:b8:09:a1:b3:a6:2f:7f:0e: f3:a9:e6:9b:8e:af:a9:a2:8e:cb:b9:ff:40:b4:93:7a:73:62: 06:59:8d:68:fc:a8:a7:1c:43:67:82:92:60:d4:3f:6f:8d:78: 9e:97:d8:9a:c5:08:57:12:2a:e8:4e:df:21:a7:8b:77:88:53: f2:9d:05:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYyr9OsCWj/TpUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk YWIzYzYxYmYtMTFhMC00YWE3LWJjMTYtMDM3ZDBhMTZjZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9wAtR3Az/S2bN2KU7TvsnF2F5CjXiZ19HwE /4BAHi9NF7LEewHF6VttGYPV+Tl6FHIjK4qAZcgmTJdfnyng5uZDKusTgWqSP1dZ fB6hU66EREHcd50aCuZKH3qdTp3Dn4JIm97l1zLZSPw23GEMwcuhRdxF6BEJbQTM GhSo+fNz8f9B744qCBWb7p3380q7iSBAEx9j7BejoXGPa0mLka0hfeaU6ALLqEw4 Tfhnt4TIxhus86vekrjpf/62jb7QqRhkmKcGy98VFoy3lKNriH+HeH9nEfoQitw9 iLwi7jLbhNzNj6l6/fE97PnWqxeWM0gjvOJaVqfp6YyyDHj8zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGLwuvRtaRiorat0k2sG78WzZ/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvODY4NDZhMDktYmM3Yi0z ZjJlLTgzMGMtZDJhODc3OWYzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACClTlLWP2uV2lrUYieRaTutXxDjgoHNHASkQVbFmAvjBXfYcCjtiPOJ SFq6rVFtaEDxovBLN8qnzgMqPd+46XVkaswk8i77JKEQJd0W8CDcHQLcChC+20I6 F1HdkYFuLMQsexRfhfXSZf8QkQ1oagcehyY6lrsffGP7lDTdAvpYF01ZtuoJAf64 /o07spzKCI27fjnVbenHZ0AYQWL+hW+S6NPElHBpUsvvHjEgJ6z0dF96XlsJMYV7 /aKOPbe4CaGzpi9/DvOp5puOr6mijsu5/0C0k3pzYgZZjWj8qKccQ2eCkmDUP2+N eJ6X2JrFCFcSKuhO3yGni3eIU/KdBYI= -----END CERTIFICATE-----Generated at Thu Nov 5 07:10:23 2026 by rpki-client