$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/5c949195-063b-3de7-8373-cbc2afe5edb3.roa File: 5c949195-063b-3de7-8373-cbc2afe5edb3.roa (raw, json) Hash identifier: Gn3UpQPs0Kib0MwT983oXYttaw5DY2+lJ+HO/TghJO8= Subject key identifier: D2:B5:B8:A0:62:E1:3A:B2:04:F0:0D:15:26:F1:95:7A:61:3B:5D:26 Certificate issuer: /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Certificate serial: 010D0C9F4328584F7D227810BA9A9EF2658F8780 Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/5c949195-063b-3de7-8373-cbc2afe5edb3.roa Signing time: Tue 13 Oct 2026 13:20:57 +0000 ROA not before: Tue 13 Oct 2026 13:20:57 +0000 ROA not after: Mon 11 Jan 2027 14:20:57 +0000 asID: 26337 IP address blocks: 104.171.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:22:78:10:ba:9a:9e:f2:65:8f:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Validity Not Before: Oct 13 13:20:57 2026 GMT Not After : Jan 11 14:20:57 2027 GMT Subject: CN=ad3e502f-f097-492c-8aec-166dc4c443cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e6:90:39:66:75:e5:ee:64:d8:bc:4a:a4:9e: b0:ae:65:c6:98:0c:53:eb:1f:f5:81:49:7b:83:08: 1f:21:ec:a2:69:f8:49:c1:89:87:ba:cf:e0:16:53: 19:2e:b2:5d:54:a2:49:2d:83:0d:51:55:e4:88:cd: 48:61:13:8d:0f:86:d8:cc:25:f7:c8:dc:20:3e:e0: 35:a4:98:b4:aa:68:18:2c:f6:d0:b9:40:77:6e:1e: 5d:be:55:fe:5f:6a:bd:3b:ff:e6:f0:0e:0c:8f:5c: d6:b4:cb:1b:c8:4c:af:28:2d:c2:be:ce:f3:5b:d0: 0b:8b:19:01:60:ad:79:2b:c8:cc:af:db:55:be:ac: 4b:73:e8:f8:d2:df:62:6b:72:7c:34:8b:4b:97:55: 09:f6:f0:50:e0:89:2c:52:e9:aa:9d:5d:da:55:8d: a9:b0:46:2c:47:2c:91:32:92:9c:96:4f:95:5d:9a: 7b:5f:bc:cd:f1:46:e3:d6:0a:be:30:95:1f:aa:78: 1d:f5:7f:75:9a:a2:da:49:85:cd:7e:62:4c:d2:13: 53:91:30:c7:02:ef:6d:18:2e:86:af:1e:fa:69:cf: 4b:1c:d1:1a:b3:a3:67:dc:7e:b1:72:79:0a:00:78: 59:1b:7a:10:2c:23:69:76:fb:1d:f6:1e:75:1c:b9: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B5:B8:A0:62:E1:3A:B2:04:F0:0D:15:26:F1:95:7A:61:3B:5D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/5c949195-063b-3de7-8373-cbc2afe5edb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl X509v3 Authority Key Identifier: keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer sbgp-ipAddrBlock: critical IPv4: 104.171.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:46:38:d4:62:9d:30:c4:21:15:3b:52:ac:26:e2:f2:47:02: a6:83:7f:50:19:46:0b:3b:ea:92:5c:2f:bf:35:ee:87:0b:de: 8c:a1:32:db:46:9a:2d:41:5f:a9:d3:21:b0:28:92:cd:38:af: 4e:cb:62:19:53:71:91:ac:56:9c:3f:9d:19:e7:61:46:fa:54: b3:49:2f:c6:a9:cc:2b:df:d6:83:50:02:1d:23:13:63:0b:ea: 2b:bd:f9:01:4d:a8:f3:68:28:a9:7d:a1:17:78:98:0f:3d:41: 95:e3:46:72:1f:98:13:7a:5e:e8:f4:3f:9e:8e:42:e8:53:96: 01:b7:01:02:ed:e4:f4:13:81:21:f1:2b:6e:a5:ea:97:c1:4b: 28:d9:7f:86:21:57:2e:f4:15:6b:fa:b1:77:47:63:00:f3:2f: a7:97:4e:bc:af:f1:73:d6:75:12:a8:ef:64:51:9e:b4:1d:f0: 0e:7e:9b:10:ab:93:f9:1c:d3:2d:c5:ef:ef:89:8a:a1:c0:39: 34:82:e7:cb:5b:20:74:54:f1:f2:57:c9:8e:fc:ad:a6:83:b7: 18:ad:16:22:56:97:81:a2:c0:f8:bf:20:e6:2f:63:e4:5f:f3: 09:b7:21:07:f0:cd:67:7d:21:2d:a5:c5:3b:7b:a6:cb:b4:41: 11:cf:3f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99IngQupqe8mWPh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1 ZGEwMB4XDTI2MTAxMzEzMjA1N1oXDTI3MDExMTE0MjA1N1owLzEtMCsGA1UEAxMk YWQzZTUwMmYtZjA5Ny00OTJjLThhZWMtMTY2ZGM0YzQ0M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+aQOWZ15e5k2LxKpJ6wrmXGmAxT6x/1gUl7 gwgfIeyiafhJwYmHus/gFlMZLrJdVKJJLYMNUVXkiM1IYROND4bYzCX3yNwgPuA1 pJi0qmgYLPbQuUB3bh5dvlX+X2q9O//m8A4Mj1zWtMsbyEyvKC3Cvs7zW9ALixkB YK15K8jMr9tVvqxLc+j40t9ia3J8NItLl1UJ9vBQ4IksUumqnV3aVY2psEYsRyyR MpKclk+VXZp7X7zN8Ubj1gq+MJUfqngd9X91mqLaSYXNfmJM0hNTkTDHAu9tGC6G rx76ac9LHNEas6Nn3H6xcnkKAHhZG3oQLCNpdvsd9h51HLncDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK1uKBi4TqyBPANFSbxlXphO10mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvNWM5NDkxOTUtMDYzYi0z ZGU3LTgzNzMtY2JjMmFmZTVlZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5 MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3 MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtGONRinTDEIRU7Uqwm4vJHAqaDf1AZRgs76pJcL7817ocL3oyhMttG mi1BX6nTIbAoks04r07LYhlTcZGsVpw/nRnnYUb6VLNJL8apzCvf1oNQAh0jE2ML 6iu9+QFNqPNoKKl9oRd4mA89QZXjRnIfmBN6Xuj0P56OQuhTlgG3AQLt5PQTgSHx K26l6pfBSyjZf4YhVy70FWv6sXdHYwDzL6eXTryv8XPWdRKo72RRnrQd8A5+mxCr k/kc0y3F7++JiqHAOTSC58tbIHRU8fJXyY78raaDtxitFiJWl4GiwPi/IOYvY+Rf 8wm3IQfwzWd9IS2lxTt7psu0QRHPPyg= -----END CERTIFICATE-----Generated at Tue Oct 20 23:40:03 2026 by rpki-client