$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40/a944186b-69d7-30cc-b7ad-ebec198131f1.roa File: a944186b-69d7-30cc-b7ad-ebec198131f1.roa (raw, json) Hash identifier: kqAriq49Vqs3EKz4qN3cQDWdEuBKq8gbHI7L+e6DStI= Subject key identifier: 62:01:31:40:60:C7:72:0A:99:90:0E:AC:63:4D:3D:73:7B:CB:A1:EF Certificate issuer: /CN=2db849bf-50b1-4c24-bc8f-58b25b70bb40 Certificate serial: 010D0C9F4328584F70434F2F35C2A9A86534AEC7 Authority key identifier: A2:AA:CF:E6:5A:1E:B9:E2:41:C7:ED:E7:63:7B:9E:60:05:C2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40/a944186b-69d7-30cc-b7ad-ebec198131f1.roa Signing time: Thu 08 Oct 2026 22:41:36 +0000 ROA not before: Thu 08 Oct 2026 22:41:36 +0000 ROA not after: Wed 06 Jan 2027 23:41:36 +0000 asID: 40731 IP address blocks: 104.152.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40/2db849bf-50b1-4c24-bc8f-58b25b70bb40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40/2db849bf-50b1-4c24-bc8f-58b25b70bb40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:43:4f:2f:35:c2:a9:a8:65:34:ae:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db849bf-50b1-4c24-bc8f-58b25b70bb40 Validity Not Before: Oct 8 22:41:36 2026 GMT Not After : Jan 6 23:41:36 2027 GMT Subject: CN=e6ec6f32-a322-4616-a589-036477b5785c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:f3:3f:33:3d:6b:68:55:3a:7d:35:f4:0b: 26:d6:53:ac:17:e3:b9:e4:0e:e1:0f:49:41:f1:dd: 18:8e:d0:4a:1a:d3:cb:66:29:b1:e9:0c:72:c5:23: ad:9d:51:55:1d:52:0b:b0:48:55:00:b9:e4:a9:7c: f2:c3:a4:f3:e4:02:25:27:39:3e:7c:8f:10:a4:5a: 4d:c0:77:9e:28:17:19:69:c4:98:0b:fa:02:71:a5: 14:29:35:b7:c5:67:20:c6:90:89:d0:ef:46:8f:44: 42:34:4a:83:eb:de:92:02:fc:e7:a5:e6:fb:d3:e0: 69:5b:56:f9:15:94:f1:bd:32:ad:e5:09:95:32:cc: 81:40:21:3b:4d:25:66:9c:05:7a:97:01:12:0d:4f: 80:0b:71:21:8c:7c:56:57:aa:77:44:a1:c0:f9:2a: 0e:7a:ed:92:41:e6:c0:a2:8b:17:d7:70:19:19:75: 5c:92:5e:6f:02:39:c0:6f:6d:4b:4e:e0:a0:1b:c9: 45:1e:2e:1a:6e:a7:01:74:c0:6a:94:71:f9:f4:43: 4b:88:db:e1:56:83:c4:1d:88:03:cc:bf:39:dd:91: 0b:9c:d8:66:7d:d9:40:6d:8e:ac:97:bc:93:da:e1: 8b:d1:c8:7a:99:56:6e:80:95:46:ac:82:1c:4f:cb: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:01:31:40:60:C7:72:0A:99:90:0E:AC:63:4D:3D:73:7B:CB:A1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40/a944186b-69d7-30cc-b7ad-ebec198131f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40/2db849bf-50b1-4c24-bc8f-58b25b70bb40.crl X509v3 Authority Key Identifier: keyid:A2:AA:CF:E6:5A:1E:B9:E2:41:C7:ED:E7:63:7B:9E:60:05:C2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2db849bf-50b1-4c24-bc8f-58b25b70bb40.cer sbgp-ipAddrBlock: critical IPv4: 104.152.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:27:40:05:22:63:a0:12:75:b5:00:97:d6:3e:10:45:f3:c9: d8:6f:75:a0:e7:2b:23:3e:a4:10:75:60:e8:39:2f:3f:33:72: cc:3d:ad:85:cb:56:a2:dd:14:96:20:09:ea:71:f8:e8:20:88: 83:ad:16:52:33:06:c2:f8:42:2b:97:c8:e6:be:b8:ce:b2:2b: dd:23:df:c7:82:7a:7c:bd:16:02:b7:0e:c6:cb:bf:29:68:d5: 8c:a5:c3:8c:ef:b7:36:31:55:a1:75:70:93:45:c9:37:20:09: 85:2a:f8:00:64:5b:11:07:c7:08:02:44:8b:07:15:c7:c5:a8: b5:4a:16:22:71:fd:bb:be:02:ac:91:57:ad:39:08:13:14:c3: 4d:e3:ac:70:cc:42:a6:18:41:5a:7f:cf:f9:b3:88:40:70:53: fe:04:31:e9:56:c8:1e:da:96:0a:11:51:e7:c3:4d:63:82:64: 97:62:67:e7:ae:d4:11:d5:cd:40:17:35:c9:a4:31:32:2f:f1: 1a:ca:9a:9f:4c:43:ca:3b:e7:64:55:77:d3:1c:5c:c4:c9:af: 71:24:1b:a4:bb:83:03:2a:39:23:6c:bf:15:32:f8:dd:c3:b4: 9e:4b:b1:a7:a5:7c:96:9c:2b:cb:56:cc:2d:a5:cb:22:43:3a: fe:75:92:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wQ08vNcKpqGU0rscwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiODQ5YmYtNTBiMS00YzI0LWJjOGYtNThiMjViNzBi YjQwMB4XDTI2MTAwODIyNDEzNloXDTI3MDEwNjIzNDEzNlowLzEtMCsGA1UEAxMk ZTZlYzZmMzItYTMyMi00NjE2LWE1ODktMDM2NDc3YjU3ODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxPzPzM9a2hVOn019Asm1lOsF+O55A7hD0lB 8d0YjtBKGtPLZimx6QxyxSOtnVFVHVILsEhVALnkqXzyw6Tz5AIlJzk+fI8QpFpN wHeeKBcZacSYC/oCcaUUKTW3xWcgxpCJ0O9Gj0RCNEqD696SAvznpeb70+BpW1b5 FZTxvTKt5QmVMsyBQCE7TSVmnAV6lwESDU+AC3EhjHxWV6p3RKHA+SoOeu2SQebA oosX13AZGXVckl5vAjnAb21LTuCgG8lFHi4abqcBdMBqlHH59ENLiNvhVoPEHYgD zL853ZELnNhmfdlAbY6sl7yT2uGL0ch6mVZugJVGrIIcT8uEawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIBMUBgx3IKmZAOrGNNPXN7y6HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yZGI4 NDliZi01MGIxLTRjMjQtYmM4Zi01OGIyNWI3MGJiNDAvYTk0NDE4NmItNjlkNy0z MGNjLWI3YWQtZWJlYzE5ODEzMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMmRiODQ5YmYtNTBiMS00YzI0LWJj OGYtNThiMjViNzBiYjQwLzJkYjg0OWJmLTUwYjEtNGMyNC1iYzhmLTU4YjI1Yjcw YmI0MC5jcmwwHwYDVR0jBBgwFoAUoqrP5loeueJBx+3nY3ueYAXCU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8yZGI4NDliZi01MGIxLTRjMjQtYmM4Zi01OGIy NWI3MGJiNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACknQAUiY6ASdbUAl9Y+EEXzydhvdaDnKyM+pBB1YOg5Lz8zcsw9rYXL VqLdFJYgCepx+OggiIOtFlIzBsL4QiuXyOa+uM6yK90j38eCeny9FgK3DsbLvylo 1Yylw4zvtzYxVaF1cJNFyTcgCYUq+ABkWxEHxwgCRIsHFcfFqLVKFiJx/bu+AqyR V605CBMUw03jrHDMQqYYQVp/z/mziEBwU/4EMelWyB7algoRUefDTWOCZJdiZ+eu 1BHVzUAXNcmkMTIv8RrKmp9MQ8o752RVd9McXMTJr3EkG6S7gwMqOSNsvxUy+N3D tJ5LsaelfJacK8tWzC2lyyJDOv51ku4= -----END CERTIFICATE-----Generated at Mon Nov 2 07:11:09 2026 by rpki-client