$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ebd11cb6-4f5e-3a52-94fb-0a2486a25bc8.roa File: ebd11cb6-4f5e-3a52-94fb-0a2486a25bc8.roa (raw, json) Hash identifier: 5Vd7gCzhdaEhrBznm5aga09g22Bz1mEBrgBve/4TIO4= Subject key identifier: B4:E4:EF:55:3D:FA:41:20:FC:CC:EB:F8:82:4A:D0:24:38:F5:A9:0F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6292BB2A7DB8E99236C7F480 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ebd11cb6-4f5e-3a52-94fb-0a2486a25bc8.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 395954 IP address blocks: 108.177.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bb:2a:7d:b8:e9:92:36:c7:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ed14dc4c-bc32-46b9-968c-59bea0c719ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fa:0c:31:48:2e:1a:9d:13:6c:72:03:be:be: 3a:d4:56:7d:de:8c:42:47:53:8a:d5:1c:99:82:5b: 68:e7:0d:90:ad:da:5d:af:28:79:46:79:66:20:7e: 77:8f:89:26:42:23:89:11:6d:e5:e4:f2:70:4a:e7: 20:9c:3f:d5:d9:f1:10:3a:c1:b4:fc:dd:05:84:1c: 32:b5:d1:ab:bd:4e:b8:0a:ad:67:12:a0:b8:d7:5d: 43:b5:ff:44:2e:66:11:2a:b9:3f:b2:81:d8:36:7a: 63:5f:7c:c6:c2:58:e3:02:8c:b3:72:25:7d:54:a5: 53:82:da:c6:91:b4:88:2c:7a:1b:a2:56:83:a4:12: 88:ee:20:a4:62:8a:99:ba:ac:eb:46:14:27:ab:4b: c2:51:c5:7e:c8:5c:0f:17:14:27:62:f6:38:a9:9d: ff:59:56:90:90:91:de:6d:4d:be:0f:09:3e:e3:41: 65:7b:ed:f9:ab:bb:71:82:64:d6:dd:a7:75:ec:7a: 1a:ae:9a:15:3d:3a:6a:54:f1:ea:ce:71:26:6e:f7: 20:6f:db:1a:fa:9f:3e:8d:3c:ca:5e:4b:67:a5:17: 9e:29:6e:c8:4e:de:c3:54:34:1c:2b:cf:81:26:14: db:5c:0a:a4:2c:40:61:7f:93:61:6c:4d:09:48:a5: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E4:EF:55:3D:FA:41:20:FC:CC:EB:F8:82:4A:D0:24:38:F5:A9:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ebd11cb6-4f5e-3a52-94fb-0a2486a25bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 108.177.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:09:8a:ab:11:ac:7c:73:80:3d:10:ed:53:49:94:b4:47:0e: 59:df:6d:74:f4:50:28:90:97:23:d7:17:45:62:7c:87:1e:ec: fd:21:57:40:5b:27:9c:92:ce:b8:18:38:34:76:20:59:39:f7: 1e:af:09:ad:2a:2a:bd:b8:8e:76:90:bb:8d:c6:3d:98:64:e0: d8:92:ab:b3:20:1d:00:4b:3e:40:4f:7c:46:c6:de:2e:0d:76: 3a:95:90:e6:75:eb:d0:ef:e6:35:d1:73:d1:a9:cb:9a:a7:99: b5:79:a2:32:13:05:79:be:88:24:cc:0e:fa:62:59:ff:40:c5: ff:5a:9e:af:d8:17:01:92:a7:05:76:76:20:66:f8:c6:be:a0: f8:2e:24:02:99:c5:7b:41:b2:6b:d7:bb:fc:86:52:89:94:d9: b3:54:ce:3d:5f:ee:80:c4:44:5c:2f:c2:f6:80:6e:50:7d:bf: cd:e0:52:a9:37:8f:a1:cf:4c:f0:ec:2f:36:c1:c5:1a:da:35: 22:af:fa:10:2b:c6:7f:d2:5e:4c:5e:8f:1d:f8:79:f6:83:8a: b5:ec:97:8e:48:87:05:cb:84:bc:6e:45:ce:81:83:b8:b8:c0: a9:fb:50:f8:e0:c8:45:4f:a9:26:35:02:e3:9f:d6:82:c9:98: c8:e3:96:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikrsqfbjpkjbH9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWQxNGRjNGMtYmMzMi00NmI5LTk2OGMtNTliZWEwYzcxOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfoMMUguGp0TbHIDvr461FZ93oxCR1OK1RyZ glto5w2Qrdpdryh5RnlmIH53j4kmQiOJEW3l5PJwSucgnD/V2fEQOsG0/N0FhBwy tdGrvU64Cq1nEqC4111Dtf9ELmYRKrk/soHYNnpjX3zGwljjAoyzciV9VKVTgtrG kbSILHobolaDpBKI7iCkYoqZuqzrRhQnq0vCUcV+yFwPFxQnYvY4qZ3/WVaQkJHe bU2+Dwk+40Fle+35q7txgmTW3ad17HoarpoVPTpqVPHqznEmbvcgb9sa+p8+jTzK XktnpReeKW7ITt7DVDQcK8+BJhTbXAqkLEBhf5NhbE0JSKXNmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTk71U9+kEg/Mzr+IJK0CQ49akPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZWJkMTFjYjYtNGY1ZS0z YTUyLTk0ZmItMGEyNDg2YTI1YmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgJiqsRrHxzgD0Q7VNJlLRHDlnfbXT0UCiQlyPXF0VifIce7P0hV0Bb J5ySzrgYODR2IFk59x6vCa0qKr24jnaQu43GPZhk4NiSq7MgHQBLPkBPfEbG3i4N djqVkOZ169Dv5jXRc9Gpy5qnmbV5ojITBXm+iCTMDvpiWf9Axf9anq/YFwGSpwV2 diBm+Ma+oPguJAKZxXtBsmvXu/yGUomU2bNUzj1f7oDERFwvwvaAblB9v83gUqk3 j6HPTPDsLzbBxRraNSKv+hArxn/SXkxejx34efaDirXsl45IhwXLhLxuRc6Bg7i4 wKn7UPjgyEVPqSY1AuOf1oLJmMjjlqU= -----END CERTIFICATE-----Generated at Thu Oct 15 15:29:46 2026 by rpki-client