$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa File: b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa (raw, json) Hash identifier: eaLkIHWSaLHH9OPViPBVuTpbYH97vi5AF/rr3PKzcm8= Subject key identifier: 69:56:44:D0:D0:FA:B1:02:0E:8C:90:06:94:D0:E4:5F:A8:D7:2C:CF Certificate issuer: /CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3 Certificate serial: 010D0C9F4328584F9FFDBD9E24DF0A5F11505E80 Authority key identifier: 48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 2386 IP address blocks: 156.134.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:bd:9e:24:df:0a:5f:11:50:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=d79cdd99-af58-482a-b4b0-d34bd71d3c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6f:54:1f:2e:45:e5:57:76:b7:3d:88:29:65: d0:66:82:9f:c7:44:6d:48:9e:3c:5f:45:e2:dc:6b: 3a:f5:04:e0:31:a0:de:91:48:4c:38:59:07:94:7e: 98:f0:28:14:d1:c0:f1:19:91:5b:24:3b:6a:7d:80: 70:3a:44:b6:f1:28:05:f8:a7:07:f6:4c:92:15:bb: c4:e8:58:50:4b:20:21:1e:8f:50:4a:d0:5d:61:12: 06:54:83:0d:5b:15:33:c6:e3:8e:eb:15:1a:44:34: 0a:42:f7:c2:0e:ca:15:64:36:fe:69:83:fb:a4:3b: b9:f8:da:bb:99:00:f6:53:5b:98:2c:1a:44:f9:db: 7c:a3:6e:1e:5b:9a:59:6c:be:94:fb:13:d2:4e:b8: 12:90:3d:a4:eb:c7:55:dd:69:37:5c:8d:e4:c3:70: c3:e6:ba:2e:e1:97:92:c9:eb:96:20:09:5a:14:83: f6:10:82:7f:ec:da:30:bc:de:aa:f4:62:37:34:b2: 57:b0:b8:82:3f:3e:df:eb:3f:30:af:29:43:d7:5c: e2:9b:5a:c7:66:6e:f1:af:33:23:11:6b:80:cc:e3: 62:04:e7:c0:68:85:05:ad:32:49:d0:39:2d:7b:07: 24:3d:28:fc:2b:64:ec:76:33:b7:81:ab:58:1e:5a: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:56:44:D0:D0:FA:B1:02:0E:8C:90:06:94:D0:E4:5F:A8:D7:2C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl X509v3 Authority Key Identifier: keyid:48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer sbgp-ipAddrBlock: critical IPv4: 156.134.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9d:30:93:7d:d1:50:dc:d8:18:e5:09:ea:0e:5f:ac:9b:e3: bc:a8:c6:5e:d9:3a:fb:54:c4:70:d6:d0:b6:f2:8f:9d:59:d9: 4a:6a:05:4d:94:eb:56:c6:29:f1:9a:31:bc:a7:c3:fb:58:d0: 3b:70:2c:04:5e:6c:82:16:83:72:69:0b:3e:cc:9a:b3:5b:f9: 61:98:46:4c:19:64:09:b4:ce:51:8b:7d:17:f4:bc:3a:7b:a8: c1:44:f1:3c:c8:5b:48:b5:b2:e2:4a:12:0d:56:ce:9f:2c:2e: f6:1a:d9:9c:46:f3:cd:db:6f:ea:66:55:24:f6:fa:b8:00:75: 92:8e:eb:bf:76:76:ee:d1:56:9f:09:5f:c3:63:ee:ff:1a:d7: 75:1e:72:f3:42:6c:38:dd:0a:a7:0c:d3:10:42:d3:4d:ba:7a: fa:e2:bd:45:51:3a:a0:f1:eb:a8:0b:4d:a4:b4:b2:4c:09:25: 07:d9:b3:03:11:a9:f1:1f:ae:d1:75:5c:f7:97:76:c6:35:9b: b3:92:89:17:79:59:ed:e4:bb:a9:0b:61:68:03:1c:54:36:99: 47:cd:4d:6c:e9:a3:c4:5f:a7:59:17:37:00:fe:20:dd:45:ca: 29:ba:95:86:4c:76:4f:36:33:06:80:73:37:f9:d1:ff:f2:17: 83:da:a5:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/b2eJN8KXxFQXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzYzRiYjEtNjY3OS00ZDYxLWE3MmMtODllNThkNDQ3 OWUzMB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk ZDc5Y2RkOTktYWY1OC00ODJhLWI0YjAtZDM0YmQ3MWQzYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG9UHy5F5Vd2tz2IKWXQZoKfx0RtSJ48X0Xi 3Gs69QTgMaDekUhMOFkHlH6Y8CgU0cDxGZFbJDtqfYBwOkS28SgF+KcH9kySFbvE 6FhQSyAhHo9QStBdYRIGVIMNWxUzxuOO6xUaRDQKQvfCDsoVZDb+aYP7pDu5+Nq7 mQD2U1uYLBpE+dt8o24eW5pZbL6U+xPSTrgSkD2k68dV3Wk3XI3kw3DD5rou4ZeS yeuWIAlaFIP2EIJ/7NowvN6q9GI3NLJXsLiCPz7f6z8wrylD11zim1rHZm7xrzMj EWuAzONiBOfAaIUFrTJJ0DktewckPSj8K2TsdjO3gatYHlr6OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlWRNDQ+rECDoyQBpTQ5F+o1yzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZTNj NGJiMS02Njc5LTRkNjEtYTcyYy04OWU1OGQ0NDc5ZTMvYjZmMzFiZDAtMTcyYi0z MjNhLWFhMTItZTkxZGM5ZDdjOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWUzYzRiYjEtNjY3OS00ZDYxLWE3 MmMtODllNThkNDQ3OWUzLzVlM2M0YmIxLTY2NzktNGQ2MS1hNzJjLTg5ZTU4ZDQ0 NzllMy5jcmwwHwYDVR0jBBgwFoAUSDO3M4nIHPvAWhBZonXddq9649IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZTNjNGJiMS02Njc5LTRkNjEtYTcyYy04OWU1 OGQ0NDc5ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnIZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWdMJN90VDc2BjlCeoOX6yb47yoxl7ZOvtUxHDW0Lbyj51Z2UpqBU2U 61bGKfGaMbynw/tY0DtwLARebIIWg3JpCz7MmrNb+WGYRkwZZAm0zlGLfRf0vDp7 qMFE8TzIW0i1suJKEg1Wzp8sLvYa2ZxG883bb+pmVST2+rgAdZKO6792du7RVp8J X8Nj7v8a13UecvNCbDjdCqcM0xBC0026evrivUVROqDx66gLTaS0skwJJQfZswMR qfEfrtF1XPeXdsY1m7OSiRd5We3ku6kLYWgDHFQ2mUfNTWzpo8Rfp1kXNwD+IN1F yim6lYZMdk82MwaAczf50f/yF4PapVc= -----END CERTIFICATE-----Generated at Wed Oct 28 07:24:10 2026 by rpki-client