$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa File: ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa (raw, json) Hash identifier: NmGu8V15gEeD1iw3jIrSD4Ppg3fikki+i2XHqM+npuM= Subject key identifier: 13:C2:B7:43:C3:84:12:B8:B0:28:C9:C0:58:06:15:36:69:F4:02:8C Certificate issuer: /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Certificate serial: 010D0C9F4328584FB671102B15D632F82376EEC0 Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 7029 IP address blocks: 172.82.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:10:2b:15:d6:32:f8:23:76:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=04d2faf7-1a1a-4222-bd13-0cecfd29ee48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:32:57:d8:5c:75:d7:66:06:eb:2e:9d:48: c2:75:ec:97:5d:2c:79:f3:20:c5:c8:0f:6f:bb:f4: 5e:70:a5:c3:3b:31:52:80:3d:63:b6:f5:cd:41:12: 60:1f:23:9d:9f:58:e7:76:31:b7:1e:95:a5:d1:dd: 12:f9:e3:33:77:70:f0:ec:00:3a:bb:e5:7d:eb:16: 03:48:20:4d:87:fe:fa:c9:df:37:be:57:e8:89:92: 47:0b:58:7f:2a:6e:86:79:5d:82:84:f0:95:dd:ac: af:a3:1e:52:a2:85:9a:64:1f:bb:9e:c8:4b:25:63: c0:24:ac:16:3a:48:94:76:23:2c:17:ee:6a:a6:02: 6c:4b:42:81:f1:48:e4:e7:e7:a6:65:e2:16:88:6f: b1:e0:c1:82:9e:91:64:9f:4b:eb:52:85:6b:f1:bc: 47:c3:7c:f3:41:60:3e:bc:32:3d:6e:86:2d:4e:4a: 5e:ff:b5:d7:fb:0b:f4:af:df:1f:fc:ef:3d:70:b0: 0b:a1:c1:2f:bf:05:d6:7e:91:b8:55:31:16:83:07: 7f:03:90:66:91:9a:d4:62:e9:fb:0e:3c:92:44:8c: c4:ea:5f:1d:e3:07:9b:f7:ff:a3:39:3e:92:2f:33: ed:01:c6:56:cb:22:35:7b:8a:8e:73:a7:12:88:f0: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C2:B7:43:C3:84:12:B8:B0:28:C9:C0:58:06:15:36:69:F4:02:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl X509v3 Authority Key Identifier: keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer sbgp-ipAddrBlock: critical IPv4: 172.82.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d6:cc:b2:b1:ce:a9:e9:67:d4:3f:3f:20:f2:ee:04:32:d2: 37:05:b6:57:5c:d1:33:27:df:aa:56:62:18:85:af:8e:ad:7e: a9:87:7a:74:e7:c6:92:3e:44:29:45:e8:93:53:64:96:e0:7a: fe:2c:53:c2:3c:66:07:e9:87:d1:83:c7:6a:fa:a3:cf:48:80: b9:df:b5:54:1b:ad:92:37:a7:c3:6b:63:79:aa:59:eb:60:bd: ab:80:d8:6c:78:14:ea:04:34:7a:32:08:d3:11:03:4c:8d:a6: c0:ee:3a:cd:5e:c7:22:a8:e7:b4:6c:35:a8:a4:02:0e:c2:67: 12:3b:8a:7e:55:73:c3:7d:1e:fe:47:b9:57:a5:03:f1:7a:aa: 60:a9:01:34:ac:21:01:93:65:7e:87:92:d2:ce:e6:65:db:0e: b9:9b:f4:4b:7d:c6:20:eb:c7:4f:b1:df:43:a4:6e:ce:77:a0: 64:3d:e9:04:d6:5a:31:52:d1:32:9f:f1:80:57:8e:19:e8:89: 92:24:ab:2b:5f:7a:c1:45:5d:ad:70:64:93:fe:4d:59:5d:a8: 31:9b:c5:d5:1d:03:72:0b:24:51:91:50:f3:be:8c:f6:85:47: 4c:03:b2:53:17:0c:3f:6e:d0:15:db:7b:58:6c:ab:de:ad:5b: 41:9a:07:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cRArFdYy+CN27sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0 MGVmMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk MDRkMmZhZjctMWExYS00MjIyLWJkMTMtMGNlY2ZkMjllZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYAyV9hcdddmBusunUjCdeyXXSx58yDFyA9v u/RecKXDOzFSgD1jtvXNQRJgHyOdn1jndjG3HpWl0d0S+eMzd3Dw7AA6u+V96xYD SCBNh/76yd83vlfoiZJHC1h/Km6GeV2ChPCV3ayvox5SooWaZB+7nshLJWPAJKwW OkiUdiMsF+5qpgJsS0KB8Ujk5+emZeIWiG+x4MGCnpFkn0vrUoVr8bxHw3zzQWA+ vDI9boYtTkpe/7XX+wv0r98f/O89cLALocEvvwXWfpG4VTEWgwd/A5BmkZrUYun7 DjySRIzE6l8d4web9/+jOT6SLzPtAcZWyyI1e4qOc6cSiPARpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPCt0PDhBK4sCjJwFgGFTZp9AKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4 ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvZmYwZDUxM2ItYTgwZi0z YzY4LTlhMjUtYzM1OTE3YjMzZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY0OGZhZTctOTQ3ZC00YWIwLTlk MjYtYzFkYTM4ZTQ0MGVmL2Q2NDhmYWU3LTk0N2QtNGFiMC05ZDI2LWMxZGEzOGU0 NDBlZi5jcmwwHwYDVR0jBBgwFoAUgPOgyp2g4vup2o8BO87c43/AxuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRh MzhlNDQwZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPWzLKxzqnpZ9Q/PyDy7gQy0jcFtldc0TMn36pWYhiFr46tfqmHenTn xpI+RClF6JNTZJbgev4sU8I8Zgfph9GDx2r6o89IgLnftVQbrZI3p8NrY3mqWetg vauA2Gx4FOoENHoyCNMRA0yNpsDuOs1exyKo57RsNaikAg7CZxI7in5Vc8N9Hv5H uVelA/F6qmCpATSsIQGTZX6HktLO5mXbDrmb9Et9xiDrx0+x30Okbs53oGQ96QTW WjFS0TKf8YBXjhnoiZIkqytfesFFXa1wZJP+TVldqDGbxdUdA3ILJFGRUPO+jPaF R0wDslMXDD9u0BXbe1hsq96tW0GaB+8= -----END CERTIFICATE-----Generated at Thu Nov 5 14:07:19 2026 by rpki-client