$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/e03f971c-cc5d-35d9-9f63-54554387e9e5.roa File: e03f971c-cc5d-35d9-9f63-54554387e9e5.roa (raw, json) Hash identifier: fbIneYfnXUMOr5dYGeZ2p/dwpyzabFp+HVddbSCCJ7w= Subject key identifier: 87:42:4B:48:97:4B:5F:C8:E2:4E:14:C9:D5:EE:40:16:27:7A:53:92 Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1 Certificate serial: 010D0C9F4328584F71ED9CA9ADC6B20D0F892F80 Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/e03f971c-cc5d-35d9-9f63-54554387e9e5.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 399989 IP address blocks: 104.171.22.0/24 maxlen: 24 104.171.23.0/24 maxlen: 24 104.171.24.0/21 maxlen: 21 104.171.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9c:a9:ad:c6:b2:0d:0f:89:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=7a40ce8a-5024-49c4-9025-675b0f60db16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:c6:b7:4e:d2:ec:5c:00:de:2b:d3:97:50: df:a3:bc:e5:55:03:31:3d:87:b4:79:40:65:f7:26: 73:40:3c:99:5f:55:c0:ac:1e:3e:07:e7:58:50:bf: 4e:f6:59:83:9d:c7:d0:5a:75:24:3d:8d:0e:6a:21: 27:b9:b8:f9:3c:92:7b:54:aa:0e:1e:d0:f4:14:7e: df:b6:f7:6a:16:98:6e:bf:c9:d4:d0:20:5b:ed:da: fb:2e:81:e0:d9:9d:5e:c7:1c:a6:5d:94:ad:97:98: 63:6d:c4:53:bc:38:39:67:20:46:fc:87:95:70:0c: a8:fa:b8:80:2b:98:6a:20:a6:81:58:ae:97:dd:4c: df:1e:d2:82:ec:c8:b3:e6:57:e3:f0:99:5f:5a:e1: 3a:77:23:96:19:29:94:09:6c:54:94:a1:1c:28:65: bc:2a:6a:a5:10:35:56:e6:ef:c4:17:e6:34:a3:6c: d3:80:fe:30:a0:98:b4:b6:31:e7:02:de:43:8f:89: e9:38:0e:c0:eb:65:e2:0b:13:57:ee:bb:8b:64:93: b7:89:8d:3c:9a:d0:30:27:57:0a:d8:ac:fc:70:19: a0:24:c1:7d:21:da:e9:23:c3:63:77:f0:68:76:63: 4e:a6:2e:96:14:0b:b8:3a:af:f1:6d:b7:73:66:2a: 9a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:4B:48:97:4B:5F:C8:E2:4E:14:C9:D5:EE:40:16:27:7A:53:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/e03f971c-cc5d-35d9-9f63-54554387e9e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl X509v3 Authority Key Identifier: keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer sbgp-ipAddrBlock: critical IPv4: 104.171.22.0-104.171.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1a:37:2f:f7:06:e3:15:c3:d0:be:4f:d8:72:3d:b2:6e:e0: a8:5d:1e:05:6c:ec:5c:f4:ed:8e:c4:0b:53:c7:90:4b:88:aa: 46:4d:e5:9f:38:80:e4:97:1f:40:66:8f:22:96:6f:c7:2f:93: 72:ef:85:2f:a8:fc:f3:0f:73:96:4b:4a:97:5d:0d:88:0c:19: fe:a4:a1:89:ce:a1:54:72:ef:9c:d4:be:1c:a4:64:94:7c:0f: 08:61:cb:85:4e:42:ab:64:c6:c0:c8:90:64:8a:41:b0:2a:b5: ea:ad:27:42:76:a2:5b:c2:6e:38:3d:14:1b:ac:b4:f2:a1:5c: 32:f8:8b:cd:6d:6d:e1:d2:c6:97:c8:f9:ea:98:57:51:bd:ba: c2:79:4b:26:4e:21:d6:af:15:8b:65:62:12:94:a8:40:49:4b: 78:b9:28:ab:2d:9e:4e:14:6e:cb:cb:8f:30:8f:8c:1a:39:91: 18:bf:1d:eb:f8:24:b2:a1:10:ce:06:7e:d1:c2:e3:a1:dc:50: c5:1d:ca:6e:e4:ba:69:d1:1f:f8:d7:18:8f:24:f2:d4:7d:45: 30:37:61:57:ce:bf:82:5e:49:84:b0:4a:0a:07:81:c4:07:a9: b8:62:de:68:51:e4:57:96:cc:ef:e0:fd:bc:de:39:ca:be:4d: 0b:71:cc:04 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9x7ZyprcayDQ+JL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZj ZGIxMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk N2E0MGNlOGEtNTAyNC00OWM0LTkwMjUtNjc1YjBmNjBkYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKvGt07S7FwA3ivTl1Dfo7zlVQMxPYe0eUBl 9yZzQDyZX1XArB4+B+dYUL9O9lmDncfQWnUkPY0OaiEnubj5PJJ7VKoOHtD0FH7f tvdqFphuv8nU0CBb7dr7LoHg2Z1exxymXZStl5hjbcRTvDg5ZyBG/IeVcAyo+riA K5hqIKaBWK6X3UzfHtKC7Miz5lfj8JlfWuE6dyOWGSmUCWxUlKEcKGW8KmqlEDVW 5u/EF+Y0o2zTgP4woJi0tjHnAt5Dj4npOA7A62XiCxNX7ruLZJO3iY08mtAwJ1cK 2Kz8cBmgJMF9IdrpI8Njd/BodmNOpi6WFAu4Oq/xbbdzZiqaeQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIdCS0iXS1/I4k4UydXuQBYnelOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNjVi MDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvZTAzZjk3MWMtY2M1ZC0z NWQ5LTlmNjMtNTQ1NTQzODdlOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjY1YjA2NDEtMDQ3ZC00Nzg3LWEx MmQtMTU5MzcwYmZjZGIxLzI2NWIwNjQxLTA0N2QtNDc4Ny1hMTJkLTE1OTM3MGJm Y2RiMS5jcmwwHwYDVR0jBBgwFoAUJmxHOadzqCMYoLfPmvtjcpFUCyUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkz NzBiZmNkYjEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFoqxYD BAVoqwAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAaBo3L/cG4xXD0L5P2HI9sm7gqF0eBWzsXPTtjsQLU8eQ S4iqRk3lnziA5JcfQGaPIpZvxy+Tcu+FL6j88w9zlktKl10NiAwZ/qShic6hVHLv nNS+HKRklHwPCGHLhU5Cq2TGwMiQZIpBsCq16q0nQnaiW8JuOD0UG6y08qFcMviL zW1t4dLGl8j56phXUb26wnlLJk4h1q8Vi2ViEpSoQElLeLkoqy2eThRuy8uPMI+M GjmRGL8d6/gksqEQzgZ+0cLjodxQxR3KbuS6adEf+NcYjyTy1H1FMDdhV86/gl5J hLBKCgeBxAepuGLeaFHkV5bM7+D9vN45yr5NC3HMBA== -----END CERTIFICATE-----Generated at Sun Oct 25 06:57:47 2026 by rpki-client