$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/54c663c2-c16d-3587-83bc-216587800674.roa File: 54c663c2-c16d-3587-83bc-216587800674.roa (raw, json) Hash identifier: KZ9+AP9O+vQstQnByxz+tCRIai5CoF1zsN5z8ho0Pq8= Subject key identifier: 04:29:25:33:CD:E4:6E:04:41:A5:6C:00:A2:11:14:58:B0:EA:1F:C1 Certificate issuer: /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Certificate serial: 010D0C9F4328584F7B7548B020AA6A835A324A40 Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/54c663c2-c16d-3587-83bc-216587800674.roa Signing time: Mon 12 Oct 2026 22:56:11 +0000 ROA not before: Mon 12 Oct 2026 22:56:11 +0000 ROA not after: Sun 10 Jan 2027 23:56:11 +0000 asID: 46606 IP address blocks: 100.42.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:75:48:b0:20:aa:6a:83:5a:32:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Validity Not Before: Oct 12 22:56:11 2026 GMT Not After : Jan 10 23:56:11 2027 GMT Subject: CN=e5fb28ed-7f89-4747-846e-490443b817bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fb:d5:c3:d9:df:54:0a:b2:a8:2c:1c:f4:e9: 43:b2:34:e0:dd:61:5e:5e:a6:e9:4e:b2:c5:04:1b: d7:b3:34:49:41:ad:3d:10:51:13:44:d8:2d:ac:b9: a9:47:fe:cc:65:7f:50:58:0d:8e:13:a0:f5:ba:7c: 47:8c:e2:ad:ef:b3:4f:97:d3:13:be:5d:59:f6:5d: 3d:6d:8d:5e:44:46:03:64:ea:1f:51:05:ba:83:00: 47:07:d5:73:8b:55:b0:1b:c4:d6:d4:19:69:0d:f9: db:8d:fe:82:34:bd:1f:74:1d:05:54:0d:df:c4:a1: 8d:39:98:55:ee:43:3f:08:ae:99:eb:19:0b:b1:1a: 1a:24:cd:7c:4c:58:41:b8:ae:a2:2d:4f:a4:df:d5: 3a:1f:1e:0c:ec:f5:48:27:79:2d:7e:1f:bf:43:e8: 32:d2:85:81:57:2d:f2:d3:19:a9:a1:a0:f6:b0:64: 11:d8:f5:6d:33:f4:f5:5d:23:c8:93:60:b7:58:42: de:1b:69:ab:56:08:61:6d:8e:85:3d:5a:e4:34:a3: 81:f7:80:0d:7e:99:23:76:9c:a5:69:a2:45:50:a5: fe:85:90:1d:df:0f:82:29:d5:eb:57:38:81:80:13: d6:20:06:67:b5:07:4c:aa:e1:fb:00:aa:ef:b6:ac: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:29:25:33:CD:E4:6E:04:41:A5:6C:00:A2:11:14:58:B0:EA:1F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/54c663c2-c16d-3587-83bc-216587800674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl X509v3 Authority Key Identifier: keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer sbgp-ipAddrBlock: critical IPv4: 100.42.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:25:0b:e2:9c:2d:9d:f7:96:10:a2:e0:cd:b3:c5:90:84:b2: 8c:c4:f2:2e:a6:04:e9:10:ae:71:41:85:b7:0b:0c:55:76:a9: 60:15:93:27:72:bd:81:39:b5:89:fd:4c:e1:97:a4:55:9d:55: d4:1a:cc:31:f4:20:9d:db:5e:9b:c3:91:62:4a:09:c2:f5:3f: a0:89:96:59:aa:d0:fc:ea:a7:39:95:2a:13:1a:90:2b:b9:0a: 37:87:37:56:bf:f8:9d:06:76:1f:6b:12:16:08:53:87:94:32: a7:20:4b:0b:a7:38:8a:b6:fa:ff:bd:ad:ad:56:a6:ca:bb:ef: 76:c3:f2:38:cf:53:09:c9:62:46:90:50:e7:8f:3d:98:fe:1e: ba:2d:77:88:c0:1b:09:e6:db:49:c1:31:f8:18:f4:c6:62:b6: 6f:9a:ae:aa:04:75:02:4e:ab:50:3b:5a:fe:bd:13:19:e2:41: c4:25:f0:d0:32:5e:9c:a0:c6:6b:c6:49:21:7a:a3:4a:7d:c4: 79:5b:85:1f:58:7f:b6:21:cf:64:35:e5:99:d0:85:fd:55:d6: e2:84:cd:c9:b6:e3:ca:61:28:e7:d7:05:2d:fc:7b:ca:e0:c4: c8:13:38:1a:04:6a:57:68:b7:9d:08:20:ed:4b:57:d4:be:d0: 02:d6:bb:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97dUiwIKpqg1oySkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1 ZGEwMB4XDTI2MTAxMjIyNTYxMVoXDTI3MDExMDIzNTYxMVowLzEtMCsGA1UEAxMk ZTVmYjI4ZWQtN2Y4OS00NzQ3LTg0NmUtNDkwNDQzYjgxN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfvVw9nfVAqyqCwc9OlDsjTg3WFeXqbpTrLF BBvXszRJQa09EFETRNgtrLmpR/7MZX9QWA2OE6D1unxHjOKt77NPl9MTvl1Z9l09 bY1eREYDZOofUQW6gwBHB9Vzi1WwG8TW1BlpDfnbjf6CNL0fdB0FVA3fxKGNOZhV 7kM/CK6Z6xkLsRoaJM18TFhBuK6iLU+k39U6Hx4M7PVIJ3ktfh+/Q+gy0oWBVy3y 0xmpoaD2sGQR2PVtM/T1XSPIk2C3WELeG2mrVghhbY6FPVrkNKOB94ANfpkjdpyl aaJFUKX+hZAd3w+CKdXrVziBgBPWIAZntQdMquH7AKrvtqzz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQpJTPN5G4EQaVsAKIRFFiw6h/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvNTRjNjYzYzItYzE2ZC0z NTg3LTgzYmMtMjE2NTg3ODAwNjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5 MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3 MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEZCowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAlC+KcLZ33lhCi4M2zxZCEsozE8i6mBOkQrnFBhbcLDFV2qWAVkydy vYE5tYn9TOGXpFWdVdQazDH0IJ3bXpvDkWJKCcL1P6CJllmq0PzqpzmVKhMakCu5 CjeHN1a/+J0Gdh9rEhYIU4eUMqcgSwunOIq2+v+9ra1Wpsq773bD8jjPUwnJYkaQ UOePPZj+Hrotd4jAGwnm20nBMfgY9MZitm+arqoEdQJOq1A7Wv69ExniQcQl8NAy XpygxmvGSSF6o0p9xHlbhR9Yf7Yhz2Q15ZnQhf1V1uKEzcm248phKOfXBS38e8rg xMgTOBoEaldot50IIO1LV9S+0ALWu8k= -----END CERTIFICATE-----Generated at Fri Oct 16 04:05:10 2026 by rpki-client