$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa File: 4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa (raw, json) Hash identifier: 9rZ1lEntKa/u/YbyODv7+TtvZ/9d4OP1AAt7ImYOQwY= Subject key identifier: 40:8A:8E:52:C0:2A:45:A9:5B:52:1E:5C:92:48:BA:CC:90:D1:C9:15 Certificate issuer: /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Certificate serial: 010D0C9F4328584F9E987FBDD0EBE0A4E8BE9E00 Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 46960 IP address blocks: 104.255.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:7f:bd:d0:eb:e0:a4:e8:be:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=8e84c404-18fc-4870-b188-fd6fc0aebdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:be:b0:07:bf:ef:b5:96:69:14:b2:84:55: dc:d4:98:2c:57:cf:63:be:02:2d:c9:7d:96:e8:ee: e1:a1:93:ca:ab:75:30:22:58:7f:62:8a:57:54:36: 27:5e:eb:ea:ad:4c:40:3b:b7:68:0c:e3:11:c9:28: 08:2a:6e:97:2f:69:0e:aa:19:10:81:b4:0d:99:04: 61:f4:ba:36:ee:44:f6:62:b4:e2:5b:39:9b:88:e5: 91:69:54:ce:17:d4:52:0f:e9:f7:f5:18:a3:c7:bd: ce:29:a5:69:7b:d0:a5:0b:59:0a:6e:73:62:0e:21: 4f:3a:f0:97:cb:5e:b7:c0:d4:6b:fe:3e:2a:99:c9: f7:ab:0c:5d:29:5d:04:5f:84:c2:87:53:fb:1c:7a: 72:2c:e4:55:f9:06:2d:f8:9c:0c:f0:e1:93:8e:c4: 04:0c:d0:ea:28:39:a6:5e:14:ba:96:6c:32:79:dc: e5:ab:08:23:f5:b1:e7:bc:66:a9:4e:39:d4:50:58: 17:1e:67:c2:4a:f3:ad:5d:79:f6:0a:85:c9:36:04: 8a:d3:ac:8d:d7:15:23:99:12:8e:9d:82:05:ee:ab: 17:74:d6:35:45:dc:b2:82:96:32:4d:b6:37:a3:40: 6e:67:55:71:cd:0f:74:aa:ce:37:b7:55:08:53:d0: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:8E:52:C0:2A:45:A9:5B:52:1E:5C:92:48:BA:CC:90:D1:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/4fd2deb2-4eb7-31d5-941b-417d5bef3ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl X509v3 Authority Key Identifier: keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer sbgp-ipAddrBlock: critical IPv4: 104.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:26:32:4b:9b:a9:42:a0:a7:8e:e3:fb:32:23:fa:83:2f:7c: 13:2b:94:75:84:95:1c:b6:3b:b8:15:15:f6:5a:b4:37:d2:48: 5d:48:c0:5c:ce:7d:2f:8d:23:6a:a2:67:54:d4:a8:4f:28:c5: e4:4e:55:22:b0:8e:ba:24:2b:ef:22:99:0d:13:2b:88:02:ec: e2:eb:fb:45:fe:a4:dd:b8:e7:7d:98:b5:62:0b:cf:06:f1:a5: 4d:65:ed:a6:7f:aa:9e:26:6b:e9:f8:0d:07:41:24:de:91:87: 43:4e:18:82:76:21:07:a5:f0:f9:51:c7:9c:e1:97:4e:ac:3a: e7:de:90:c8:2a:6f:0c:50:b8:9b:10:ae:02:9a:6f:22:6b:8f: 58:6a:b2:08:6c:b5:7b:41:c9:19:b6:78:44:bf:1f:89:61:8a: 78:33:63:dd:62:ba:d6:26:4d:df:31:68:7d:f8:b5:9b:7f:6f: 47:6f:b0:af:52:a4:61:c3:ac:a2:72:7a:27:c3:51:ea:06:03: dc:44:78:50:d1:93:ea:c0:0e:cf:9a:0d:ad:66:e4:f4:48:89: 47:72:d9:4c:c9:b8:0e:d5:da:0f:82:64:a6:c8:a8:72:67:c4: 3b:7c:10:42:01:6e:7b:32:16:af:e3:e5:d4:f9:dd:ae:b6:fb: 00:10:a2:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emH+90OvgpOi+ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlk N2FhMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk OGU4NGM0MDQtMThmYy00ODcwLWIxODgtZmQ2ZmMwYWViZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZu+sAe/77WWaRSyhFXc1JgsV89jvgItyX2W 6O7hoZPKq3UwIlh/YopXVDYnXuvqrUxAO7doDOMRySgIKm6XL2kOqhkQgbQNmQRh 9Lo27kT2YrTiWzmbiOWRaVTOF9RSD+n39Rijx73OKaVpe9ClC1kKbnNiDiFPOvCX y163wNRr/j4qmcn3qwxdKV0EX4TCh1P7HHpyLORV+QYt+JwM8OGTjsQEDNDqKDmm XhS6lmwyedzlqwgj9bHnvGapTjnUUFgXHmfCSvOtXXn2CoXJNgSK06yN1xUjmRKO nYIF7qsXdNY1RdyygpYyTbY3o0BuZ1VxzQ90qs43t1UIU9BzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECKjlLAKkWpW1IeXJJIusyQ0ckVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTNi ZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvNGZkMmRlYjItNGViNy0z MWQ1LTk0MWItNDE3ZDViZWYzY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEzYmRkNjctNzRiNS00MjY4LTk2 ZTctYjNjYmIwNDlkN2FhLzYxM2JkZDY3LTc0YjUtNDI2OC05NmU3LWIzY2JiMDQ5 ZDdhYS5jcmwwHwYDVR0jBBgwFoAUQE7XvfQ+9gx92AydL/8Ip/RiZXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2Ni YjA0OWQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYmMkubqUKgp47j+zIj+oMvfBMrlHWElRy2O7gVFfZatDfSSF1IwFzO fS+NI2qiZ1TUqE8oxeROVSKwjrokK+8imQ0TK4gC7OLr+0X+pN24532YtWILzwbx pU1l7aZ/qp4ma+n4DQdBJN6Rh0NOGIJ2IQel8PlRx5zhl06sOufekMgqbwxQuJsQ rgKabyJrj1hqsghstXtByRm2eES/H4lhingzY91iutYmTd8xaH34tZt/b0dvsK9S pGHDrKJyeifDUeoGA9xEeFDRk+rADs+aDa1m5PRIiUdy2UzJuA7V2g+CZKbIqHJn xDt8EEIBbnsyFq/j5dT53a62+wAQooY= -----END CERTIFICATE-----Generated at Sun Oct 25 23:08:46 2026 by rpki-client