$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa File: 7d236149-de2f-3afa-a239-d8caf0a03337.roa (raw, json) Hash identifier: cbHkpYQA6qHXZtETcUEB1FsX0dNmRdUYSBfmqfKkPtc= Subject key identifier: 0C:C9:EA:4F:56:9C:1C:CB:2D:A4:3E:30:44:89:04:5A:0B:A4:69:29 Certificate issuer: /CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Certificate serial: 010D0C9F4328584F9E987FB0456BD5052D8EB800 Authority key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 16801 IP address blocks: 104.255.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:7f:b0:45:6b:d5:05:2d:8e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=28a15943-c258-47fc-ab2b-2923a636f393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:6f:45:c3:2c:74:8e:5d:90:3b:6d:18:87: 58:54:7e:93:3d:66:da:c5:2d:cc:16:92:6e:19:bb: ce:18:2e:2a:75:9e:09:51:e9:ee:1e:8b:e5:0d:af: 8f:55:d4:4a:2c:be:2f:3f:b8:10:3b:1a:98:52:00: 92:08:28:88:82:2e:50:e3:96:a1:d7:ca:97:c6:aa: 55:4a:c7:25:13:f9:c6:b5:cf:43:8d:91:56:3d:b7: 59:42:be:21:e0:4b:a6:31:01:11:b8:3f:5f:b7:e1: fa:39:14:cb:44:b7:9b:e0:2d:d0:e7:7d:dd:a1:e5: 8f:80:e0:d0:c0:4c:a9:fc:d1:eb:8b:df:aa:5c:5e: c8:1d:20:2f:30:07:93:23:e4:4c:8e:0b:05:cb:cb: 33:94:a7:03:29:d2:80:7f:43:4a:fe:d0:2c:32:31: 40:1e:e3:5f:ab:e2:11:4e:4b:64:25:37:d9:bc:82: 73:fd:59:13:c3:3d:25:52:4e:ff:35:ec:5a:f3:77: de:ef:60:41:aa:06:4c:93:78:9f:85:f3:8a:80:32: 9f:3d:f0:a6:37:19:82:85:56:59:3e:ad:57:fd:0b: 7d:d5:0d:f6:85:be:be:61:54:a8:47:e7:f6:84:48: cc:37:89:de:b5:90:9e:2c:fe:ae:ea:be:28:71:9c: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C9:EA:4F:56:9C:1C:CB:2D:A4:3E:30:44:89:04:5A:0B:A4:69:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/7d236149-de2f-3afa-a239-d8caf0a03337.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.crl X509v3 Authority Key Identifier: keyid:40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer sbgp-ipAddrBlock: critical IPv4: 104.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f7:ad:16:8d:59:fe:88:42:4f:1b:4d:e5:14:85:cc:2c:7c: df:42:f4:13:14:17:b7:f2:2f:ee:06:6f:3a:0e:01:5d:bd:fc: 15:7a:2b:3c:9f:48:82:9a:f2:e2:3d:3f:23:79:5f:fa:ee:cd: b5:dd:1a:65:2b:ba:34:1a:b9:6f:cc:b0:9a:81:47:0e:50:75: 3b:b8:f7:34:71:86:22:23:4a:f5:90:8b:55:6a:2a:4a:c2:09: f8:19:35:63:ef:c2:46:52:d1:29:c6:05:1c:bc:04:9d:db:95: 09:bc:15:f3:64:50:f5:ef:92:ff:fb:0d:74:2c:3d:a3:d1:a6: 45:53:19:5d:18:83:40:c8:d1:cc:1d:8a:89:38:09:1c:86:98: 35:e8:90:0d:d5:77:a8:dd:b0:eb:62:81:bf:85:9a:7b:ff:1a: 18:99:3d:44:d9:db:f4:b6:1e:c0:b4:e1:d3:dd:04:86:84:25: 6f:25:20:bb:4e:74:d1:91:1a:c8:ac:62:56:c0:c2:5f:cc:34: 59:70:0b:5b:29:45:5a:95:bd:68:0d:c1:be:6d:83:41:64:90: c3:3d:8e:ed:ca:e0:e5:bc:12:66:77:50:ce:d9:a0:e3:9b:e0: f1:df:bd:94:0e:b5:22:55:e9:3f:7d:50:9b:68:88:18:4e:93: 00:4c:a3:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emH+wRWvVBS2OuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlk N2FhMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk MjhhMTU5NDMtYzI1OC00N2ZjLWFiMmItMjkyM2E2MzZmMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u9vRcMsdI5dkDttGIdYVH6TPWbaxS3MFpJu GbvOGC4qdZ4JUenuHovlDa+PVdRKLL4vP7gQOxqYUgCSCCiIgi5Q45ah18qXxqpV SsclE/nGtc9DjZFWPbdZQr4h4EumMQERuD9ft+H6ORTLRLeb4C3Q533doeWPgODQ wEyp/NHri9+qXF7IHSAvMAeTI+RMjgsFy8szlKcDKdKAf0NK/tAsMjFAHuNfq+IR TktkJTfZvIJz/VkTwz0lUk7/Nexa83fe72BBqgZMk3ifhfOKgDKfPfCmNxmChVZZ Pq1X/Qt91Q32hb6+YVSoR+f2hEjMN4netZCeLP6u6r4ocZxDHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzJ6k9WnBzLLaQ+MESJBFoLpGkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTNi ZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvN2QyMzYxNDktZGUyZi0z YWZhLWEyMzktZDhjYWYwYTAzMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEzYmRkNjctNzRiNS00MjY4LTk2 ZTctYjNjYmIwNDlkN2FhLzYxM2JkZDY3LTc0YjUtNDI2OC05NmU3LWIzY2JiMDQ5 ZDdhYS5jcmwwHwYDVR0jBBgwFoAUQE7XvfQ+9gx92AydL/8Ip/RiZXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2Ni YjA0OWQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX3rRaNWf6IQk8bTeUUhcwsfN9C9BMUF7fyL+4GbzoOAV29/BV6Kzyf SIKa8uI9PyN5X/ruzbXdGmUrujQauW/MsJqBRw5QdTu49zRxhiIjSvWQi1VqKkrC CfgZNWPvwkZS0SnGBRy8BJ3blQm8FfNkUPXvkv/7DXQsPaPRpkVTGV0Yg0DI0cwd iok4CRyGmDXokA3Vd6jdsOtigb+Fmnv/GhiZPUTZ2/S2HsC04dPdBIaEJW8lILtO dNGRGsisYlbAwl/MNFlwC1spRVqVvWgNwb5tg0FkkMM9ju3K4OW8EmZ3UM7ZoOOb 4PHfvZQOtSJV6T99UJtoiBhOkwBMo2Q= -----END CERTIFICATE-----Generated at Sun Oct 25 23:25:39 2026 by rpki-client