$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa File: a45363ac-38b7-3765-9fd2-71955777f847.roa (raw, json) Hash identifier: 6+v2Jh9/bAIvYq05u9Vquqg8uGZ62I1jBbYubsFqo/c= Subject key identifier: 7C:BE:B8:BF:AE:1E:29:9D:E2:94:DB:2B:5C:6D:D2:D4:0E:E3:EA:2F Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584F671FC118E275E500A09B6C60 Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa Signing time: Mon 05 Oct 2026 16:07:41 +0000 ROA not before: Mon 05 Oct 2026 16:07:41 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 401927 IP address blocks: 104.204.192.0/21 maxlen: 24 2604:1d20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:1f:c1:18:e2:75:e5:00:a0:9b:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Oct 5 16:07:41 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=5a945fb5-15db-4e56-827e-6d2cf632145e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:71:e1:6c:c7:d3:94:da:63:54:7f:22:a9: c4:22:e9:05:48:61:3c:cd:39:cf:2e:67:c7:77:8d: c7:71:91:15:53:80:7d:39:6a:03:ac:aa:95:9c:ce: d7:d8:b8:64:84:0e:1a:9b:2d:29:35:64:8e:d3:9b: 2d:53:90:e1:72:32:d0:07:9f:7e:ff:9c:6f:a7:7f: 01:30:10:4d:bc:86:4d:be:8e:d8:a3:f6:38:0e:fe: 4c:3f:cc:e2:8a:66:fa:fc:f6:a1:8b:59:b5:95:7a: 5d:e3:35:24:9e:55:7a:f6:27:5d:c5:dc:14:45:3b: 62:ca:79:03:0c:60:20:e1:82:23:69:59:01:08:16: 2c:7a:75:13:c6:28:28:ce:e1:29:9a:18:2d:ca:75: 5e:47:b2:f8:5c:02:97:9b:fc:c9:0d:15:7e:ba:2c: 81:6f:26:ab:07:5e:52:96:79:02:e8:4f:83:4d:6d: d7:70:88:de:fb:f1:63:4a:fa:a9:80:85:f1:d7:bd: 72:07:21:74:fc:fa:bb:de:05:e3:49:e9:7f:49:e1: 79:22:d3:3e:ac:4c:ca:e1:24:d7:ba:76:d1:73:32: a5:f9:7e:ac:bf:0d:c2:3f:30:89:24:99:ba:7a:a3: 38:27:08:98:88:1d:f5:4b:a4:04:aa:f1:71:54:27: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BE:B8:BF:AE:1E:29:9D:E2:94:DB:2B:5C:6D:D2:D4:0E:E3:EA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: 104.204.192.0/21 IPv6: 2604:1d20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ab:da:f2:ee:42:f8:a8:b3:fe:b0:53:97:98:b7:41:10:04: f5:52:3a:bb:56:06:f9:66:6d:cc:f9:22:5d:95:53:a3:b4:93: db:d5:6f:58:89:c9:74:8e:9c:99:a0:54:ab:06:25:2f:5c:15: 56:73:48:e9:58:b8:2b:a4:8f:c1:7f:da:3e:f7:30:ad:07:84: 4b:fa:98:02:7c:76:19:81:93:af:06:c1:35:37:f9:85:bc:fe: 45:9a:0b:fb:f0:7a:3b:d3:55:cf:41:37:19:a6:72:62:e0:78: 14:ef:34:23:b1:7d:a1:43:54:22:b8:02:10:8e:48:75:10:2c: 65:17:61:f5:5f:cc:58:3a:0c:87:45:a1:a4:c0:97:22:df:b3: f6:88:f8:fe:8f:16:91:f7:8e:b1:e6:62:b9:44:cc:3a:af:5c: bf:0e:47:28:f6:8e:87:56:8e:bd:f7:48:5f:48:79:10:36:fe: f7:6e:49:ad:4a:9d:f3:67:2c:b1:93:a8:e3:a7:8f:16:0f:15: ba:1b:2a:5d:21:1d:2b:a9:56:45:77:45:6e:b8:49:ea:ec:55: fa:05:5b:13:da:b8:72:fa:62:ae:8f:2b:c1:c2:81:3c:80:5a: ec:a7:74:4a:82:ea:e7:b9:21:34:d7:31:0a:ae:eb:44:3c:ba: 7c:96:63:64 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9nH8EY4nXlAKCbbGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI2MTAwNTE2MDc0MVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NWE5NDVmYjUtMTVkYi00ZTU2LTgyN2UtNmQyY2Y2MzIxNDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqRx4WzH05TaY1R/IqnEIukFSGE8zTnPLmfH d43HcZEVU4B9OWoDrKqVnM7X2LhkhA4amy0pNWSO05stU5DhcjLQB59+/5xvp38B MBBNvIZNvo7Yo/Y4Dv5MP8ziimb6/Pahi1m1lXpd4zUknlV69iddxdwURTtiynkD DGAg4YIjaVkBCBYsenUTxigozuEpmhgtynVeR7L4XAKXm/zJDRV+uiyBbyarB15S lnkC6E+DTW3XcIje+/FjSvqpgIXx171yByF0/Pq73gXjSel/SeF5ItM+rEzK4STX unbRczKl+X6svw3CPzCJJJm6eqM4JwiYiB31S6QEqvFxVCdZHwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHy+uL+uHimd4pTbK1xt0tQO4+ovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvYTQ1MzYzYWMtMzhiNy0z NzY1LTlmZDItNzE5NTU3NzdmODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaMzAMA0E AgACMAcDBQAmBB0gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGWr2vLuQvios/6wU5eYt0EQBPVSOrtWBvlm bcz5Il2VU6O0k9vVb1iJyXSOnJmgVKsGJS9cFVZzSOlYuCukj8F/2j73MK0HhEv6 mAJ8dhmBk68GwTU3+YW8/kWaC/vwejvTVc9BNxmmcmLgeBTvNCOxfaFDVCK4AhCO SHUQLGUXYfVfzFg6DIdFoaTAlyLfs/aI+P6PFpH3jrHmYrlEzDqvXL8ORyj2jodW jr33SF9IeRA2/vduSa1KnfNnLLGTqOOnjxYPFbobKl0hHSupVkV3RW64SersVfoF WxPauHL6Yq6PK8HCgTyAWuyndEqC6ue5ITTXMQqu60Q8unyWY2Q= -----END CERTIFICATE-----Generated at Sat Oct 10 17:22:24 2026 by rpki-client