$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40cbcf0c-295c-3056-a484-825c09d6e930.roa File: 40cbcf0c-295c-3056-a484-825c09d6e930.roa (raw, json) Hash identifier: pRE9t5IxDWEk3vVzUGsIPEPZS6xetWjHUx+v5Kfz5K8= Subject key identifier: CE:70:FC:AB:43:24:E5:57:7D:4B:E0:4D:02:DB:F4:94:5A:0E:AE:9D Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584F6C585345E69D08BB74150780 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40cbcf0c-295c-3056-a484-825c09d6e930.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 213607 IP address blocks: 104.241.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:53:45:e6:9d:08:bb:74:15:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=85bf4ad3-504f-42c7-8847-ee89e8dc1611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:80:f8:b6:b7:64:6c:7d:51:37:c1:48:12: 79:68:43:f9:c5:83:58:61:41:4e:ba:3c:67:e8:28: 3a:0a:ec:66:27:2c:99:9e:df:a9:29:1e:53:fa:1b: 63:4e:f0:98:50:db:1f:3b:88:11:60:52:ff:bd:70: 3e:34:d5:f9:d8:85:23:1c:4e:20:35:00:e7:5f:9b: 92:da:d1:23:11:f8:74:39:d0:d2:a1:a1:de:28:bb: dc:04:d0:00:3f:e2:23:3e:24:f6:20:ef:12:08:55: c5:4b:b4:f3:74:f6:d8:36:13:03:f0:75:2f:f2:f5: 35:91:86:79:ed:fb:0a:f6:98:15:f9:96:b3:b8:f2: 75:d0:67:ae:48:f0:66:4a:bb:73:16:8a:c6:34:9c: 1c:81:a2:ab:fb:52:ff:70:db:d3:f6:74:b7:d3:04: 6b:26:fd:1a:45:d3:03:46:af:68:30:d4:43:21:66: ca:1e:68:6a:25:74:71:fe:25:aa:68:f1:21:e9:b0: e9:56:a3:25:cd:df:f2:3a:18:26:5e:cc:ea:24:bb: 11:c4:66:a7:4c:43:f3:ab:e8:3b:39:fb:8f:de:ee: 04:b1:2c:43:7d:78:92:82:97:96:6b:12:9e:cd:da: b7:03:43:19:24:ad:65:76:4e:7a:af:aa:29:cf:3f: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:70:FC:AB:43:24:E5:57:7D:4B:E0:4D:02:DB:F4:94:5A:0E:AE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/40cbcf0c-295c-3056-a484-825c09d6e930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 104.241.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c5:a2:de:1c:5c:12:40:c8:3d:6b:3d:3f:c5:ab:2f:f6:8e: 7e:c2:a7:1c:ae:80:68:1e:1f:c8:b9:2b:d0:8b:77:a8:4a:41: 9e:37:ae:82:7c:da:fd:f6:f1:50:2e:e9:fe:17:9b:16:21:3d: 7b:15:89:9d:37:5b:7a:07:e4:ad:c7:8b:98:4f:27:ca:ec:df: b6:10:cf:1a:bb:d8:9c:be:7a:74:33:c9:ad:c3:97:7d:fb:5a: f0:c1:42:d2:0a:d2:0b:04:5e:9e:3e:4c:e5:9b:45:26:c2:df: 18:d6:31:ea:71:9b:b7:8a:3a:90:19:e9:39:35:a9:7a:e4:8b: b8:f4:f0:62:0b:c7:19:72:36:66:f9:57:c2:45:3b:f1:6d:fb: a2:29:aa:81:94:73:de:83:03:82:f6:7a:95:2b:2c:db:28:f2: ce:a5:8c:51:4a:30:57:fc:75:1a:f4:00:ed:d0:16:ca:62:df: a0:c7:cd:2c:16:d3:0e:1a:01:00:a0:c6:35:ed:d9:25:2d:e9: 9e:93:08:f1:53:6b:a4:0c:82:9b:5d:e9:a0:a7:b6:7f:2c:10: e1:54:54:dd:a5:09:b4:77:58:08:5f:86:21:fa:53:87:1e:70: 69:e7:1a:cc:94:9b:fd:23:4a:81:ba:3f:8e:33:c3:4e:80:ad: 16:e7:89:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFNF5p0Iu3QVB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ODViZjRhZDMtNTA0Zi00MmM3LTg4NDctZWU4OWU4ZGMxNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9GA+La3ZGx9UTfBSBJ5aEP5xYNYYUFOujxn 6Cg6CuxmJyyZnt+pKR5T+htjTvCYUNsfO4gRYFL/vXA+NNX52IUjHE4gNQDnX5uS 2tEjEfh0OdDSoaHeKLvcBNAAP+IjPiT2IO8SCFXFS7TzdPbYNhMD8HUv8vU1kYZ5 7fsK9pgV+ZazuPJ10GeuSPBmSrtzForGNJwcgaKr+1L/cNvT9nS30wRrJv0aRdMD Rq9oMNRDIWbKHmhqJXRx/iWqaPEh6bDpVqMlzd/yOhgmXszqJLsRxGanTEPzq+g7 OfuP3u4EsSxDfXiSgpeWaxKezdq3A0MZJK1ldk56r6opzz+FsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5w/KtDJOVXfUvgTQLb9JRaDq6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvNDBjYmNmMGMtMjk1Yy0z MDU2LWE0ODQtODI1YzA5ZDZlOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDFot4cXBJAyD1rPT/Fqy/2jn7CpxyugGgeH8i5K9CLd6hKQZ43roJ8 2v328VAu6f4XmxYhPXsViZ03W3oH5K3Hi5hPJ8rs37YQzxq72Jy+enQzya3Dl337 WvDBQtIK0gsEXp4+TOWbRSbC3xjWMepxm7eKOpAZ6Tk1qXrki7j08GILxxlyNmb5 V8JFO/Ft+6IpqoGUc96DA4L2epUrLNso8s6ljFFKMFf8dRr0AO3QFspi36DHzSwW 0w4aAQCgxjXt2SUt6Z6TCPFTa6QMgptd6aCntn8sEOFUVN2lCbR3WAhfhiH6U4ce cGnnGsyUm/0jSoG6P44zw06ArRbniS8= -----END CERTIFICATE-----Generated at Sun Oct 25 14:33:45 2026 by rpki-client