$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad/810420f3-5be1-3ee1-8285-8bd4c4e87bd4.roa File: 810420f3-5be1-3ee1-8285-8bd4c4e87bd4.roa (raw, json) Hash identifier: JneriRJ1rUHlybyB9AxSKeasTzqENnXfb/yiha0viCE= Subject key identifier: 67:E8:A6:50:9C:B6:3D:0F:C4:49:10:44:99:29:6E:F7:79:D5:15:C6 Certificate issuer: /CN=39d8f663-851c-4472-929a-e219cbd6abad Certificate serial: 010D0C9F4328584F9A68C55CEE0E6853F919EA00 Authority key identifier: 39:B7:00:75:66:20:CB:2B:71:29:52:51:14:3D:CB:DA:4D:03:7F:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad/810420f3-5be1-3ee1-8285-8bd4c4e87bd4.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 6079 IP address blocks: 104.37.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad/39d8f663-851c-4472-929a-e219cbd6abad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad/39d8f663-851c-4472-929a-e219cbd6abad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:c5:5c:ee:0e:68:53:f9:19:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39d8f663-851c-4472-929a-e219cbd6abad Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=8c0b373c-672b-40ff-a8ed-7b02f2233173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a4:a0:6b:84:c4:cc:dc:8a:15:d8:c1:98:46: 2b:94:dd:f3:b9:d4:67:70:61:d4:7e:c1:10:70:73: 7b:75:6b:7e:5f:a0:96:54:0b:06:da:c0:dd:c9:5a: 1d:43:9a:9c:1d:98:c3:9d:97:14:51:a7:c3:62:73: e6:9c:96:d3:19:71:8d:e3:60:55:5b:28:36:b5:8f: 73:88:24:e5:07:86:5e:82:6e:01:5a:2a:5a:c9:f7: 0f:b4:f8:9b:34:7f:06:21:2c:49:a3:8f:3f:0e:8b: d2:3d:29:74:16:19:d7:54:f5:ad:3d:3c:f2:cc:c1: fc:ae:f8:50:60:a8:91:80:30:55:93:f4:06:c6:88: 46:12:aa:16:ce:b7:e2:78:7c:50:27:dd:20:66:58: b1:e4:a3:d8:d1:29:88:99:34:c0:7c:3c:bd:74:67: 73:69:c1:aa:2d:1a:5e:92:38:3c:61:c4:00:b7:0b: d7:bc:a4:4e:bd:a0:52:d8:09:87:18:1c:5b:e9:34: d0:8d:1a:98:57:23:f3:39:c8:e2:95:3a:cc:e2:eb: 15:95:b6:6e:1c:79:0b:35:44:29:bc:3b:5c:7c:80: 2d:38:eb:a3:41:48:cd:a1:0b:53:e0:22:c1:8b:0d: 47:ae:bb:d0:50:20:16:da:1e:3d:9a:90:e1:55:0a: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E8:A6:50:9C:B6:3D:0F:C4:49:10:44:99:29:6E:F7:79:D5:15:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad/810420f3-5be1-3ee1-8285-8bd4c4e87bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad/39d8f663-851c-4472-929a-e219cbd6abad.crl X509v3 Authority Key Identifier: keyid:39:B7:00:75:66:20:CB:2B:71:29:52:51:14:3D:CB:DA:4D:03:7F:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/39d8f663-851c-4472-929a-e219cbd6abad.cer sbgp-ipAddrBlock: critical IPv4: 104.37.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:39:d9:61:b5:2c:ef:ca:6f:fe:ff:33:77:a0:de:9a:73:d0: ff:70:30:4f:f7:e2:0e:9f:2f:6e:6c:68:a8:f4:0d:d8:3c:2c: 55:71:84:f6:e9:13:f8:64:8f:4a:a3:fe:32:bf:a5:bb:0b:dd: f3:81:77:0b:9d:e1:01:6d:b8:63:98:88:fb:11:7e:85:ee:47: 1d:82:29:77:35:9e:53:6e:9b:ed:2b:a3:11:cc:b7:d5:55:a6: c4:3e:39:46:5f:e9:bd:48:60:71:29:7e:ae:e6:21:32:18:bf: 4e:fb:63:46:7a:93:27:06:7e:94:b3:11:04:6c:4c:d8:d7:6e: f5:e7:93:5f:ae:08:30:13:7a:85:11:f9:0d:84:50:ba:b4:fb: ed:c0:06:4b:81:d6:52:98:be:65:6b:25:2e:bd:5d:64:13:c9: c3:4a:2f:36:8e:6d:da:75:16:13:a9:fc:1a:83:62:0b:97:b1: 3b:3a:44:00:96:cc:8e:90:44:95:d1:79:06:97:fc:d9:68:c5: c4:af:a1:a0:0c:86:06:e0:ce:7d:5b:09:49:17:a6:01:5d:23: 39:8a:a3:98:33:dc:ad:71:ef:01:c5:45:31:e7:d3:73:b2:2a: 77:92:40:37:08:10:2e:4a:0e:a4:35:67:d2:ab:13:5d:ad:95: 23:db:09:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaMVc7g5oU/kZ6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzlkOGY2NjMtODUxYy00NDcyLTkyOWEtZTIxOWNiZDZh YmFkMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OGMwYjM3M2MtNjcyYi00MGZmLWE4ZWQtN2IwMmYyMjMzMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6Sga4TEzNyKFdjBmEYrlN3zudRncGHUfsEQ cHN7dWt+X6CWVAsG2sDdyVodQ5qcHZjDnZcUUafDYnPmnJbTGXGN42BVWyg2tY9z iCTlB4Zegm4BWipayfcPtPibNH8GISxJo48/DovSPSl0FhnXVPWtPTzyzMH8rvhQ YKiRgDBVk/QGxohGEqoWzrfieHxQJ90gZlix5KPY0SmImTTAfDy9dGdzacGqLRpe kjg8YcQAtwvXvKROvaBS2AmHGBxb6TTQjRqYVyPzOcjilTrM4usVlbZuHHkLNUQp vDtcfIAtOOujQUjNoQtT4CLBiw1HrrvQUCAW2h49mpDhVQr60wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfoplCctj0PxEkQRJkpbvd51RXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zOWQ4 ZjY2My04NTFjLTQ0NzItOTI5YS1lMjE5Y2JkNmFiYWQvODEwNDIwZjMtNWJlMS0z ZWUxLTgyODUtOGJkNGM0ZTg3YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzlkOGY2NjMtODUxYy00NDcyLTky OWEtZTIxOWNiZDZhYmFkLzM5ZDhmNjYzLTg1MWMtNDQ3Mi05MjlhLWUyMTljYmQ2 YWJhZC5jcmwwHwYDVR0jBBgwFoAUObcAdWYgyytxKVJRFD3L2k0Df9AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zOWQ4ZjY2My04NTFjLTQ0NzItOTI5YS1lMjE5 Y2JkNmFiYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaCXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo52WG1LO/Kb/7/M3eg3ppz0P9wME/34g6fL25saKj0Ddg8LFVxhPbp E/hkj0qj/jK/pbsL3fOBdwud4QFtuGOYiPsRfoXuRx2CKXc1nlNum+0roxHMt9VV psQ+OUZf6b1IYHEpfq7mITIYv077Y0Z6kycGfpSzEQRsTNjXbvXnk1+uCDATeoUR +Q2EULq0++3ABkuB1lKYvmVrJS69XWQTycNKLzaObdp1FhOp/BqDYguXsTs6RACW zI6QRJXReQaX/NloxcSvoaAMhgbgzn1bCUkXpgFdIzmKo5gz3K1x7wHFRTHn03Oy KneSQDcIEC5KDqQ1Z9KrE12tlSPbCU8= -----END CERTIFICATE-----Generated at Tue Oct 27 20:32:25 2026 by rpki-client