$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa File: 4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa (raw, json) Hash identifier: qKLFiFC13Whddogu7yP3ROuJVKP9bOy7mfUzzTVweJc= Subject key identifier: 9D:5E:5A:A5:52:AE:0C:7F:2B:2E:3C:8C:E1:26:07:6B:B0:C3:6E:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584FBAA138941506927CB544BFE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 1299 IP address blocks: 104.103.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:38:94:15:06:92:7c:b5:44:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=52aca45c-fe1f-4a76-b84b-070e2cc64330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:2c:60:e3:89:2f:91:6c:2a:11:2f:7b:6f: 43:23:98:23:30:04:fd:53:d7:69:08:13:75:c8:34: 7a:e4:d2:29:66:86:03:09:b1:05:80:46:0c:9a:1e: ea:15:35:f9:e4:a2:39:64:9c:45:5a:87:8b:a7:4a: c1:9b:e6:1c:5c:92:bf:8f:5a:e0:b9:76:c1:ea:05: 77:94:cb:ae:72:79:78:15:e1:f9:ec:73:35:a6:12: ab:48:74:eb:9d:3f:d1:19:f1:8a:fb:1c:2d:82:61: b6:23:52:8b:44:00:8d:51:d6:82:c5:6f:57:cc:fd: a7:79:0d:96:ec:34:cb:05:7b:5b:ba:c8:e9:4c:6b: 56:d2:05:b8:9c:4c:1f:00:0e:0b:fa:10:b6:02:b0: b9:b4:d0:0a:e8:d8:5c:19:8c:6e:19:41:d2:7d:ab: 93:ec:e7:bb:73:c6:ce:cb:8a:bd:6f:59:76:fc:64: 59:a8:38:34:a7:2f:79:43:88:31:fc:d9:41:d6:1a: 0c:a5:36:bd:95:92:5c:1f:f0:aa:98:58:80:ea:27: 3e:66:08:bd:dc:21:ba:bb:ae:8a:49:91:3c:ea:e2: cb:af:58:50:19:a3:f1:62:46:70:e8:63:a9:d9:c8: c9:70:1c:e0:d4:ae:8c:69:64:d9:98:8f:04:28:af: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5E:5A:A5:52:AE:0C:7F:2B:2E:3C:8C:E1:26:07:6B:B0:C3:6E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0d:0f:47:d2:34:61:5a:4b:06:aa:5f:d5:d3:c3:18:3e:42: 84:f0:64:3b:9d:19:29:72:e9:ec:a7:a1:6c:0a:cd:97:fc:1f: ec:f6:d7:a7:8a:0b:52:a3:bb:06:f8:5b:3d:0a:5d:c5:6d:b9: 42:99:c8:6c:00:b8:b4:27:b7:0a:55:34:44:76:73:77:fb:ff: bc:9e:8c:a2:fd:0d:da:e0:37:46:e9:33:48:73:11:88:95:08: 58:c1:71:d9:39:11:fd:05:c7:7f:99:4a:0a:70:b8:2e:54:5a: 1f:a6:03:8b:b0:af:e8:92:57:fc:04:d5:68:a2:26:1a:55:fa: 94:e7:77:1d:f6:24:00:74:ef:e1:ec:46:dd:f6:80:fd:90:18: 1f:e2:de:37:5a:3f:b3:c0:99:78:c0:03:38:4c:70:d7:3a:2c: 79:64:b9:c9:b8:bb:c8:4b:9c:c8:f0:c5:d1:a3:0e:64:7d:22: 3f:3f:05:9e:2e:1d:3b:19:7d:10:42:1f:7d:c8:f9:f2:b3:e2: e5:37:09:6d:92:6a:45:cc:3e:93:fa:cf:5f:09:45:3a:b1:2f: 0c:68:a4:14:ad:ae:92:59:f8:8e:07:a9:8e:61:8e:e5:22:f6: 26:6d:4a:71:a4:59:83:2d:fd:e0:87:c7:1a:9c:94:d3:d1:8f: 5b:c8:dd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oTiUFQaSfLVEv+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk NTJhY2E0NWMtZmUxZi00YTc2LWI4NGItMDcwZTJjYzY0MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvssYOOJL5FsKhEve29DI5gjMAT9U9dpCBN1 yDR65NIpZoYDCbEFgEYMmh7qFTX55KI5ZJxFWoeLp0rBm+YcXJK/j1rguXbB6gV3 lMuucnl4FeH57HM1phKrSHTrnT/RGfGK+xwtgmG2I1KLRACNUdaCxW9XzP2neQ2W 7DTLBXtbusjpTGtW0gW4nEwfAA4L+hC2ArC5tNAK6NhcGYxuGUHSfauT7Oe7c8bO y4q9b1l2/GRZqDg0py95Q4gx/NlB1hoMpTa9lZJcH/CqmFiA6ic+Zgi93CG6u66K SZE86uLLr1hQGaPxYkZw6GOp2cjJcBzg1K6MaWTZmI8EKK83OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1eWqVSrgx/Ky48jOEmB2uww24GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFmZjJjZGEtNWI1Mi0z NWVkLTkzMzQtOTJlZTRmYzJlNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8ND0fSNGFaSwaqX9XTwxg+QoTwZDudGSly6eynoWwKzZf8H+z216eK C1Kjuwb4Wz0KXcVtuUKZyGwAuLQntwpVNER2c3f7/7yejKL9DdrgN0bpM0hzEYiV CFjBcdk5Ef0Fx3+ZSgpwuC5UWh+mA4uwr+iSV/wE1WiiJhpV+pTndx32JAB07+Hs Rt32gP2QGB/i3jdaP7PAmXjAAzhMcNc6LHlkucm4u8hLnMjwxdGjDmR9Ij8/BZ4u HTsZfRBCH33I+fKz4uU3CW2SakXMPpP6z18JRTqxLwxopBStrpJZ+I4HqY5hjuUi 9iZtSnGkWYMt/eCHxxqclNPRj1vI3bw= -----END CERTIFICATE-----Generated at Thu Nov 5 02:06:05 2026 by rpki-client