$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/b3e95321-3610-3e01-8849-37595bbfccf0.roa File: b3e95321-3610-3e01-8849-37595bbfccf0.roa (raw, json) Hash identifier: 3Nku8hI78fweKKeg6nh8Q86qLcfuiZXehUv3Q6NZi/E= Subject key identifier: C8:56:A8:A7:F5:2D:BF:59:23:54:FE:53:1B:12:06:24:CD:37:74:A4 Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584F89A847700DE8CE0345C6DC40 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/b3e95321-3610-3e01-8849-37595bbfccf0.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 400304 IP address blocks: 104.204.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:47:70:0d:e8:ce:03:45:c6:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=ef758389-3f15-496b-b456-631d244fe4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:13:34:70:7a:38:0f:03:c2:c4:56:9e:86: b2:ff:6f:32:5c:db:95:41:1d:cd:37:9f:f2:57:2c: 0c:4d:2e:8d:a0:0e:14:ae:ac:90:fb:29:9f:02:da: 94:86:d7:ac:5b:a9:91:e0:2b:c6:28:aa:f0:24:e3: 9b:45:1c:72:dc:60:c6:3f:6e:6b:5b:04:84:94:4c: e6:19:36:84:0f:46:2a:02:ff:05:0a:ff:73:7a:88: 21:de:82:18:d7:63:2d:96:42:5c:b8:31:4d:ed:87: 24:2b:35:38:e6:0c:82:8b:6c:b3:8a:f7:46:3a:df: d5:ed:bb:b3:b1:bd:f5:4e:b1:06:a6:60:a2:1c:66: 4a:86:15:71:fc:7b:25:0d:1b:29:37:1c:99:a6:20: 25:e0:e3:9e:8e:9e:00:c7:fd:89:6e:64:c9:10:72: 62:87:eb:53:62:c2:2b:13:37:cd:4a:87:4b:8d:cd: a3:63:38:0d:6c:fb:58:40:08:de:db:a8:5f:7b:2b: a6:03:ad:00:dc:be:4a:7f:36:17:0d:37:90:c6:f0: dd:40:91:10:fc:5c:24:7f:54:d9:f5:c8:86:1c:16: 34:e0:17:93:6c:09:45:33:c3:95:0d:b9:d5:dd:92: 7d:9b:ca:29:dc:e1:89:72:41:50:b3:86:65:d8:b5: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:56:A8:A7:F5:2D:BF:59:23:54:FE:53:1B:12:06:24:CD:37:74:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/b3e95321-3610-3e01-8849-37595bbfccf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 104.204.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d4:9e:43:f5:fb:4d:ab:72:93:ee:b0:46:a8:fc:f7:90:6d: 2f:27:42:58:1c:25:20:16:4d:bc:fc:4c:d8:5a:bc:47:2a:9e: ad:4f:06:68:37:7c:55:8c:30:98:c0:f5:be:c9:fa:3a:81:11: 58:39:2b:31:82:a7:25:c4:8d:22:a4:88:73:a8:26:9a:bd:93: ac:40:64:31:d7:ad:4e:e2:25:04:06:50:73:20:56:1f:53:8a: 2c:3b:93:07:58:5c:df:62:a0:b1:62:2e:0d:b3:2a:28:bc:1b: 2e:ae:28:f5:17:99:b0:e9:a4:0d:5c:e4:18:2a:61:9e:39:ff: 4f:d1:b8:69:a4:46:fb:49:57:2a:1a:dc:a0:10:58:7f:c5:0b: 71:6c:1b:2b:67:de:22:06:63:c7:26:b3:28:56:45:dd:bb:e8: 83:4f:61:6a:b3:6e:3d:6b:83:84:e5:5a:fb:80:3b:d5:c9:c7: be:37:b7:1e:93:0b:46:5f:5f:42:69:b1:c2:09:e6:00:47:87: 8e:21:95:50:9d:c5:08:ed:75:b1:aa:d6:0f:35:47:2e:af:4a: 25:22:67:ff:04:69:a8:bb:0f:8c:ed:3b:3e:9c:c2:39:4a:8c: d1:e7:8a:74:f7:54:4d:5d:79:d9:54:4b:5b:ec:50:18:de:9b: f3:da:81:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqEdwDejOA0XG3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ZWY3NTgzODktM2YxNS00OTZiLWI0NTYtNjMxZDI0NGZlNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX8TNHB6OA8DwsRWnoay/28yXNuVQR3NN5/y VywMTS6NoA4UrqyQ+ymfAtqUhtesW6mR4CvGKKrwJOObRRxy3GDGP25rWwSElEzm GTaED0YqAv8FCv9zeogh3oIY12MtlkJcuDFN7YckKzU45gyCi2yzivdGOt/V7buz sb31TrEGpmCiHGZKhhVx/HslDRspNxyZpiAl4OOejp4Ax/2JbmTJEHJih+tTYsIr EzfNSodLjc2jYzgNbPtYQAje26hfeyumA60A3L5KfzYXDTeQxvDdQJEQ/Fwkf1TZ 9ciGHBY04BeTbAlFM8OVDbnV3ZJ9m8op3OGJckFQs4Zl2LUE+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhWqKf1Lb9ZI1T+UxsSBiTNN3SkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvYjNlOTUzMjEtMzYxMC0z ZTAxLTg4NDktMzc1OTViYmZjY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzUnkP1+02rcpPusEao/PeQbS8nQlgcJSAWTbz8TNhavEcqnq1PBmg3 fFWMMJjA9b7J+jqBEVg5KzGCpyXEjSKkiHOoJpq9k6xAZDHXrU7iJQQGUHMgVh9T iiw7kwdYXN9ioLFiLg2zKii8Gy6uKPUXmbDppA1c5BgqYZ45/0/RuGmkRvtJVyoa 3KAQWH/FC3FsGytn3iIGY8cmsyhWRd276INPYWqzbj1rg4TlWvuAO9XJx743tx6T C0ZfX0JpscIJ5gBHh44hlVCdxQjtdbGq1g81Ry6vSiUiZ/8Eaai7D4ztOz6cwjlK jNHninT3VE1dedlUS1vsUBjem/PagTM= -----END CERTIFICATE-----Generated at Mon Oct 26 21:05:07 2026 by rpki-client