$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa File: 871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa (raw, json) Hash identifier: Vk1MBxhyyN1QJxn7RPP84vmQneYm9JhKPjrPrBK9/Ok= Subject key identifier: 53:4E:30:D3:91:39:54:28:15:3E:2D:7B:79:E0:D5:89:A7:2D:4A:91 Certificate issuer: /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Certificate serial: 010D0C9F4328584F89A86645112D1BC80995FE80 Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 41378 IP address blocks: 104.249.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:66:45:11:2d:1b:c8:09:95:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=e30cf314-be36-406c-8f1b-0ed20c22963b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5b:f7:dd:e0:4a:2f:8c:37:dd:b1:6f:26:c4: 6e:61:10:00:2a:11:25:be:c0:49:68:a3:15:c2:a1: fd:00:38:04:5a:c9:40:5a:c3:0f:78:71:7e:8a:21: f4:84:0f:e0:7b:47:e7:07:14:3d:8f:8d:ec:10:fa: 03:29:e1:6c:d0:f0:b2:08:80:3a:0e:d9:e6:a4:73: 99:85:ad:8d:de:d7:0a:48:85:54:53:d2:75:ae:2e: 7d:12:de:50:69:71:89:11:66:51:89:fe:3d:bc:c6: 28:d2:8f:47:e7:93:05:3d:3c:c0:67:32:e8:66:81: 9b:83:0a:f6:b7:33:dc:26:df:56:08:a1:89:b2:92: f7:b6:3f:bd:66:a9:39:ac:31:3c:83:fa:26:56:be: 73:55:44:3e:cf:9f:5a:ea:89:59:3b:a4:e2:f1:cb: 42:b7:ec:a2:c0:67:37:62:d8:3d:67:e1:bc:15:e9: 12:19:2c:7c:69:dd:2a:52:01:5a:f8:0c:70:58:d2: 74:45:f8:b0:a0:79:e2:7b:5b:d4:9b:86:9e:97:a6: 6a:e7:64:09:10:8f:9d:c4:0a:c8:5e:54:9b:61:5d: c4:b2:7e:aa:49:e8:74:51:be:8d:8b:00:01:eb:99: ee:8b:d1:d9:05:54:a3:42:b7:c3:c2:39:46:79:bd: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4E:30:D3:91:39:54:28:15:3E:2D:7B:79:E0:D5:89:A7:2D:4A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/871664da-4c4c-3d9d-9cee-abde3f5a9e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl X509v3 Authority Key Identifier: keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer sbgp-ipAddrBlock: critical IPv4: 104.249.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3d:38:f7:8d:e7:ae:74:27:a7:3e:fe:85:f2:88:c4:5c:39: b6:fa:92:5f:2a:ad:fa:f5:95:da:e6:dc:b6:3b:3f:a1:a5:65: 90:f4:58:a8:50:d8:97:bd:c0:71:5d:90:8c:3b:8c:33:11:a6: 6e:4a:18:69:1c:aa:6c:ee:84:c3:af:07:4d:d0:63:d7:82:51: 81:bf:c9:b2:df:70:f3:b1:3c:03:3f:b5:53:68:a3:81:f2:a5: 75:ef:ae:ba:f7:b0:11:61:c7:c8:46:ba:77:35:42:33:90:b0: 55:26:60:82:00:11:84:6f:90:b0:36:54:63:0c:42:7e:ca:73: c1:c3:05:62:82:c7:a8:a6:86:e3:f8:b7:d9:ec:ac:b8:4a:d4: 64:30:97:a9:d6:4c:87:77:8e:aa:2e:f3:7c:37:21:e5:3d:cd: b4:3d:70:2c:8f:4d:06:cb:25:1f:0a:fb:9d:12:37:5c:2a:1a: 98:e5:8f:35:ef:10:31:f2:15:db:c0:df:87:86:1a:18:ad:e5: 5e:33:89:a8:36:9d:5a:33:11:76:d5:88:1c:84:5a:39:78:44: 5b:35:72:a7:d5:9c:81:3b:fb:a1:8e:34:9b:7c:7f:59:15:18: 06:ad:12:18:44:4d:e0:ce:67:30:fe:63:ee:8f:86:87:fe:36: 4d:f1:64:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqGZFES0byAmV/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4 MjFlMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZTMwY2YzMTQtYmUzNi00MDZjLThmMWItMGVkMjBjMjI5NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Vv33eBKL4w33bFvJsRuYRAAKhElvsBJaKMV wqH9ADgEWslAWsMPeHF+iiH0hA/ge0fnBxQ9j43sEPoDKeFs0PCyCIA6DtnmpHOZ ha2N3tcKSIVUU9J1ri59Et5QaXGJEWZRif49vMYo0o9H55MFPTzAZzLoZoGbgwr2 tzPcJt9WCKGJspL3tj+9Zqk5rDE8g/omVr5zVUQ+z59a6olZO6Ti8ctCt+yiwGc3 Ytg9Z+G8FekSGSx8ad0qUgFa+AxwWNJ0RfiwoHnie1vUm4ael6Zq52QJEI+dxArI XlSbYV3Esn6qSeh0Ub6NiwAB65nui9HZBVSjQrfDwjlGeb1vtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNOMNOROVQoFT4te3ng1YmnLUqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvODcxNjY0ZGEtNGM0Yy0z ZDlkLTljZWUtYWJkZTNmNWE5ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4 MTBlYjgyMWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU9OPeN5650J6c+/oXyiMRcObb6kl8qrfr1ldrm3LY7P6GlZZD0WKhQ 2Je9wHFdkIw7jDMRpm5KGGkcqmzuhMOvB03QY9eCUYG/ybLfcPOxPAM/tVNoo4Hy pXXvrrr3sBFhx8hGunc1QjOQsFUmYIIAEYRvkLA2VGMMQn7Kc8HDBWKCx6imhuP4 t9nsrLhK1GQwl6nWTId3jqou83w3IeU9zbQ9cCyPTQbLJR8K+50SN1wqGpjljzXv EDHyFdvA34eGGhit5V4ziag2nVozEXbViByEWjl4RFs1cqfVnIE7+6GONJt8f1kV GAatEhhETeDOZzD+Y+6Phof+Nk3xZD4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:14:59 2026 by rpki-client