$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa File: 1a8b4670-b976-3f02-829a-82952c6e8f62.roa (raw, json) Hash identifier: 2OP5NEgrnlCbnWATQjcopge2xGkyvBalW9v3FAdfWOo= Subject key identifier: 64:98:8F:89:B7:C2:08:1A:FA:CB:10:3B:88:00:65:58:27:6C:FB:18 Certificate issuer: /CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Certificate serial: 010D0C9F4328584EF87CD0D7E675167302877000 Authority key identifier: 7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 393731 IP address blocks: 104.204.224.0/21 maxlen: 24 148.170.224.0/20 maxlen: 24 199.88.52.0/22 maxlen: 24 204.156.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:d0:d7:e6:75:16:73:02:87:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=52afb5e0-885b-4015-b0a3-e93779c864e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:89:3c:c1:dc:20:21:91:5f:52:09:53:a5: 8c:be:a4:97:66:18:16:6d:ba:19:7d:16:9b:2e:9d: f6:c0:58:59:10:c7:9b:62:6f:d9:da:b7:95:5a:10: 32:cc:f1:31:07:58:2b:19:24:85:cc:be:1f:3d:97: 1a:30:e4:fb:f4:fd:24:de:eb:5e:d0:f9:dd:d2:63: 7d:69:3b:3a:99:b5:b6:66:35:40:d2:84:f5:42:be: f7:c6:95:a2:45:a0:79:44:90:6d:c0:a5:df:bc:64: 5b:26:34:fc:25:45:f4:b5:ce:99:15:02:f0:d9:89: d8:f4:ef:f2:4c:76:57:3a:8b:87:e5:9c:c2:59:70: 9e:40:02:9d:4d:6f:a2:11:9f:41:c0:b3:30:6e:8d: b8:67:a7:d9:45:46:86:04:35:85:60:38:0d:61:8a: e8:67:1f:34:87:d6:2c:b6:d5:27:d4:49:7e:49:78: d6:31:e4:a6:dd:f0:b3:2a:6a:f8:99:0f:24:64:5e: 4d:80:4a:00:4b:42:a0:71:ba:3f:d4:fa:72:5e:73: 9e:e4:e1:bc:bc:b0:c3:82:9e:bb:06:73:49:ac:20: a3:85:56:62:f7:fb:c5:cb:24:f1:e1:9c:bb:0d:50: a9:37:86:ae:12:2a:c2:64:ee:fb:23:d3:00:33:c4: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:8F:89:B7:C2:08:1A:FA:CB:10:3B:88:00:65:58:27:6C:FB:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl X509v3 Authority Key Identifier: keyid:7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer sbgp-ipAddrBlock: critical IPv4: 104.204.224.0/21 148.170.224.0/20 199.88.52.0/22 204.156.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5d:c4:fa:72:11:7d:a6:43:53:84:b8:70:b9:16:8f:d6:74: 58:e4:a2:c9:60:ef:0f:14:d6:69:0a:3e:85:1f:7e:c7:d9:d3: b0:9b:ac:dc:37:95:e2:49:c4:03:68:f9:88:ac:36:8e:fb:ba: 81:22:7e:48:b7:4a:ac:9c:7a:76:19:e9:c6:d8:20:86:3f:ad: 63:c2:6e:10:8f:bb:f7:1d:f9:be:c4:d3:fc:06:b9:ef:d7:db: 25:3e:f3:3a:ab:d8:55:5c:a2:ec:c9:f1:1f:43:84:f2:e6:a2: c4:6f:89:35:07:73:bd:52:6a:cd:f7:b5:df:64:d1:21:3a:99: dc:2e:f1:51:b2:ae:f1:b6:82:5b:87:36:ca:32:f2:72:6e:3f: 45:49:55:92:ce:2a:94:0e:13:7a:8e:38:3a:68:04:13:67:f9: de:0a:1d:cb:55:34:8a:72:a6:5c:d0:fd:83:6e:6b:67:29:1e: 87:86:4d:16:d3:ac:5e:af:89:f8:12:66:4c:d6:be:2a:7c:b7: 6f:34:9b:4c:b5:7c:5a:c6:5f:27:5f:90:fd:87:1c:c3:20:1f: 9a:15:3f:78:65:96:e0:d1:37:49:43:4f:cb:15:60:75:b2:1c: c9:ed:ee:c9:89:ab:48:8c:69:03:bd:cb:01:90:18:2f:73:01: 10:d9:cb:70 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE74fNDX5nUWcwKHcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzVmZDRhNjItZDhjYy00ZTQ0LWI1Y2ItNTNhOTNjMmI3 NTY5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NTJhZmI1ZTAtODg1Yi00MDE1LWIwYTMtZTkzNzc5Yzg2NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+CJPMHcICGRX1IJU6WMvqSXZhgWbboZfRab Lp32wFhZEMebYm/Z2reVWhAyzPExB1grGSSFzL4fPZcaMOT79P0k3ute0Pnd0mN9 aTs6mbW2ZjVA0oT1Qr73xpWiRaB5RJBtwKXfvGRbJjT8JUX0tc6ZFQLw2YnY9O/y THZXOouH5ZzCWXCeQAKdTW+iEZ9BwLMwbo24Z6fZRUaGBDWFYDgNYYroZx80h9Ys ttUn1El+SXjWMeSm3fCzKmr4mQ8kZF5NgEoAS0Kgcbo/1PpyXnOe5OG8vLDDgp67 BnNJrCCjhVZi9/vFyyTx4Zy7DVCpN4auEirCZO77I9MAM8QlaQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFGSYj4m3wgga+ssQO4gAZVgnbPsYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNWZk NGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5M2MyYjc1NjkvMWE4YjQ2NzAtYjk3Ni0z ZjAyLTgyOWEtODI5NTJjNmU4ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzVmZDRhNjItZDhjYy00ZTQ0LWI1 Y2ItNTNhOTNjMmI3NTY5L2M1ZmQ0YTYyLWQ4Y2MtNGU0NC1iNWNiLTUzYTkzYzJi NzU2OS5jcmwwHwYDVR0jBBgwFoAUfkORidGCfymSMf0R/F6llB6WlNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNWZkNGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5 M2MyYjc1NjkuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDaMzgAwQE lKrgAwQCx1g0AwQDzJygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABpdxPpyEX2mQ1OEuHC5Fo/WdFjkoslg 7w8U1mkKPoUffsfZ07CbrNw3leJJxANo+YisNo77uoEifki3SqycenYZ6cbYIIY/ rWPCbhCPu/cd+b7E0/wGue/X2yU+8zqr2FVcouzJ8R9DhPLmosRviTUHc71Sas33 td9k0SE6mdwu8VGyrvG2gluHNsoy8nJuP0VJVZLOKpQOE3qOODpoBBNn+d4KHctV NIpyplzQ/YNua2cpHoeGTRbTrF6vifgSZkzWvip8t280m0y1fFrGXydfkP2HHMMg H5oVP3hlluDRN0lDT8sVYHWyHMnt7smJq0iMaQO9ywGQGC9zARDZy3A= -----END CERTIFICATE-----Generated at Mon Sep 21 17:01:43 2026 by rpki-client