$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa File: d4441743-1181-3c78-aca1-bfe3d5680510.roa (raw, json) Hash identifier: DgLolBp46gdvB0ImBRO6qkGVR/JGS/NAFD+zEXC73y0= Subject key identifier: 69:F9:09:7B:B8:25:40:D4:C4:BE:F3:D1:B3:AC:13:10:2A:B2:B4:61 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F90A300ED2A9ACACF486D3240 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 19437 IP address blocks: 104.254.237.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:00:ed:2a:9a:ca:cf:48:6d:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=0873244d-42f2-438b-8ec7-c3a003bea376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:ec:4e:cb:7f:98:2a:65:0d:6d:97:99:17: 82:01:9a:8c:d9:5f:86:65:02:51:da:cd:37:d0:68: 43:14:17:f0:68:11:cc:11:ed:24:d2:0c:26:6f:f8: e6:c9:43:04:97:4c:8c:2a:b7:52:68:a4:46:26:bf: 37:aa:19:fc:5f:5d:af:e5:e8:c2:8e:6e:ba:5e:f5: d7:8a:f6:94:89:59:75:99:39:60:6a:45:a3:7f:63: d5:9a:f0:97:b0:85:42:8c:0f:d9:2e:b9:84:b1:dd: 56:35:94:ea:cc:25:9c:be:d1:17:65:be:20:93:97: 6a:c6:26:c7:5b:0d:17:e8:02:57:34:c7:e7:22:0e: b4:63:21:11:5e:7f:da:41:36:d1:04:a2:e8:89:12: 8d:3a:b4:06:9e:2b:e7:35:1a:c3:c9:16:e4:8a:5d: 2d:75:b9:17:28:37:f1:0f:ab:da:bf:18:57:c6:54: dd:c5:32:22:e2:fa:07:a5:60:a9:7d:9c:0a:6e:24: 24:7c:b5:db:c3:e4:fe:04:71:76:c3:39:36:b7:84: f9:d0:79:3d:a5:bc:b8:c6:b0:b7:9d:8b:55:54:e3: ac:d8:6e:8f:bf:58:98:36:84:36:52:59:0b:f1:3a: 15:3e:de:5d:41:3c:71:65:e9:60:b6:f3:99:9b:42: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:09:7B:B8:25:40:D4:C4:BE:F3:D1:B3:AC:13:10:2A:B2:B4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d4441743-1181-3c78-aca1-bfe3d5680510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 104.254.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e8:e1:4c:7b:3b:38:3a:1e:b5:ab:aa:9d:e6:16:ef:4b:2e: e6:04:e9:49:a8:71:47:bc:14:4f:3f:53:4a:76:fe:23:9d:32: ae:ad:d3:49:3a:77:b4:9d:07:68:a4:32:b1:3a:07:ae:9b:36: 5e:6f:46:92:bf:d4:51:d0:02:1d:14:73:59:ec:41:48:4e:cf: d7:4f:d1:99:8e:c4:3f:34:9a:26:81:53:17:0f:29:b0:06:e8: 3b:72:33:96:4a:82:e4:5d:bb:eb:bb:a5:3e:1b:03:db:1d:d8: c6:df:03:49:2e:37:e6:7a:03:01:f0:df:3d:d4:95:2b:ab:e6: a7:db:97:00:2e:1c:40:2a:0c:a6:90:1a:1c:3e:1a:81:1c:cf: 7f:6c:ee:53:72:30:ee:c3:d3:83:61:06:55:d1:ab:dc:8b:c2: af:63:8c:35:bd:65:28:cb:cb:0c:14:79:80:80:b7:8a:c1:fd: cb:50:fd:a6:96:30:8e:8c:d8:41:b0:9c:92:dd:60:ce:05:17: 58:fa:a8:9e:43:b4:7a:ee:ee:a9:30:2c:44:b9:20:3a:ca:37: 36:0f:9a:14:8c:ba:cf:76:9c:86:51:eb:36:34:62:73:04:a7: b4:12:4f:55:32:30:c5:d4:d1:36:7b:02:c6:90:15:17:a4:79: d5:48:79:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowDtKprKz0htMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk MDg3MzI0NGQtNDJmMi00MzhiLThlYzctYzNhMDAzYmVhMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkebsTst/mCplDW2XmReCAZqM2V+GZQJR2s03 0GhDFBfwaBHMEe0k0gwmb/jmyUMEl0yMKrdSaKRGJr83qhn8X12v5ejCjm66XvXX ivaUiVl1mTlgakWjf2PVmvCXsIVCjA/ZLrmEsd1WNZTqzCWcvtEXZb4gk5dqxibH Ww0X6AJXNMfnIg60YyERXn/aQTbRBKLoiRKNOrQGnivnNRrDyRbkil0tdbkXKDfx D6vavxhXxlTdxTIi4voHpWCpfZwKbiQkfLXbw+T+BHF2wzk2t4T50Hk9pby4xrC3 nYtVVOOs2G6Pv1iYNoQ2UlkL8ToVPt5dQTxxZelgtvOZm0J4KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn5CXu4JUDUxL7z0bOsExAqsrRhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDQ0NDE3NDMtMTE4MS0z Yzc4LWFjYTEtYmZlM2Q1NjgwNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFro4Ux7Ozg6HrWrqp3mFu9LLuYE6UmocUe8FE8/U0p2/iOdMq6t00k6 d7SdB2ikMrE6B66bNl5vRpK/1FHQAh0Uc1nsQUhOz9dP0ZmOxD80miaBUxcPKbAG 6DtyM5ZKguRdu+u7pT4bA9sd2MbfA0kuN+Z6AwHw3z3UlSur5qfblwAuHEAqDKaQ Ghw+GoEcz39s7lNyMO7D04NhBlXRq9yLwq9jjDW9ZSjLywwUeYCAt4rB/ctQ/aaW MI6M2EGwnJLdYM4FF1j6qJ5DtHru7qkwLES5IDrKNzYPmhSMus92nIZR6zY0YnME p7QST1UyMMXU0TZ7AsaQFRekedVIeRw= -----END CERTIFICATE-----Generated at Mon Oct 26 20:31:54 2026 by rpki-client