$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/a9f06a35-61d1-33c3-898d-46aa7bcabc21.roa File: a9f06a35-61d1-33c3-898d-46aa7bcabc21.roa (raw, json) Hash identifier: X9HgzaQI0DQvNQvfrgE0E2rlu7L+HBmrsHfZGSKn17c= Subject key identifier: 8F:E8:9E:CC:7D:90:FE:44:8B:9D:17:57:5A:05:54:2C:0B:C4:4E:46 Certificate issuer: /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Certificate serial: 010D0C9F4328584F7D21FEF9C94E5A77706DF700 Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/a9f06a35-61d1-33c3-898d-46aa7bcabc21.roa Signing time: Tue 13 Oct 2026 13:19:59 +0000 ROA not before: Tue 13 Oct 2026 13:19:59 +0000 ROA not after: Mon 11 Jan 2027 14:19:59 +0000 asID: 31898 IP address blocks: 104.171.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:21:fe:f9:c9:4e:5a:77:70:6d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Validity Not Before: Oct 13 13:19:59 2026 GMT Not After : Jan 11 14:19:59 2027 GMT Subject: CN=7c9366fa-424c-48cb-9fc0-2d10b81840a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:5a:9d:82:d9:5c:85:de:de:a6:a6:57:d8: af:62:2a:c5:89:d2:c1:da:40:1c:76:6c:23:8e:aa: 05:a0:a4:d6:16:09:b6:46:95:8b:a0:af:82:96:1d: fc:ee:08:9c:0e:b8:93:f2:55:fa:18:33:26:43:a6: 16:60:8a:9c:67:64:44:01:c3:0e:08:cd:db:b0:46: eb:e9:35:eb:a9:6f:7d:d3:08:66:3c:9d:f8:43:8d: ac:1e:da:9d:a6:2f:4b:2d:37:28:2b:a1:1d:74:a3: 02:4d:b0:4d:1e:d3:94:3e:d9:d3:ea:b3:80:16:59: f3:9d:6c:f3:de:42:15:a9:34:2a:d0:a0:5a:2f:74: fd:13:0f:bc:44:ca:f5:13:16:c2:59:89:43:83:72: 6c:49:58:31:cc:08:fd:1c:0f:e5:a9:d9:80:53:fc: 37:b7:55:65:ab:58:c5:6b:72:6f:ed:8c:74:9c:33: b2:9a:12:d6:fe:90:03:6b:3c:c5:ec:e5:28:a0:c5: 61:a4:a0:24:61:23:3a:5e:ac:ba:32:08:41:a9:c4: 02:39:77:0d:25:98:c7:ce:87:51:b7:c0:13:19:cf: 27:d6:83:67:a2:f3:73:63:da:23:ad:5d:a0:bd:19: c9:df:0e:b4:e7:69:84:e1:25:8e:c3:e5:2e:e3:fa: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E8:9E:CC:7D:90:FE:44:8B:9D:17:57:5A:05:54:2C:0B:C4:4E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/a9f06a35-61d1-33c3-898d-46aa7bcabc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl X509v3 Authority Key Identifier: keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer sbgp-ipAddrBlock: critical IPv4: 104.171.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c3:03:a8:e6:8e:71:63:fc:71:d0:78:19:d5:7d:13:42:71: 1e:63:e1:13:5d:8e:6e:71:54:80:79:2f:96:f0:b3:16:27:86: 11:00:3c:9d:aa:f7:62:0d:f7:10:a9:bd:35:c4:1e:09:25:a6: aa:7f:ba:b7:1f:de:1a:7b:f0:5d:cd:0a:49:07:40:56:e2:38: d6:f7:fc:73:d3:f0:68:2a:2e:29:e6:77:e7:8e:da:5f:6a:61: 44:15:88:86:02:74:cb:fb:d9:5d:66:92:6d:dd:88:e7:a2:23: 89:4c:93:93:63:c1:81:80:ca:8d:94:15:e9:01:2d:40:c1:a3: 51:37:76:bf:87:8c:8e:47:91:63:af:53:12:15:a2:8a:8a:26: 3a:ae:a9:c1:22:60:58:87:c8:34:01:a3:6a:0d:79:0e:4a:3f: 31:2d:a6:86:03:e3:7a:2e:51:05:fd:02:f2:4b:51:69:f2:cc: ef:1e:08:39:be:6b:23:80:be:74:75:64:ad:22:6d:76:aa:f6: 8c:07:83:bd:98:b2:56:ba:3a:38:35:5f:6d:5b:3e:d1:2f:cf: ef:04:a7:7d:8a:e1:17:62:2d:5a:ca:44:dd:c3:f0:fc:39:40: 5f:3b:2c:e2:e1:78:13:79:c0:d5:1c:39:8a:77:85:22:c4:2c: 6e:d3:43:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99If75yU5ad3Bt9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1 ZGEwMB4XDTI2MTAxMzEzMTk1OVoXDTI3MDExMTE0MTk1OVowLzEtMCsGA1UEAxMk N2M5MzY2ZmEtNDI0Yy00OGNiLTlmYzAtMmQxMGI4MTg0MGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcFanYLZXIXe3qamV9ivYirFidLB2kAcdmwj jqoFoKTWFgm2RpWLoK+Clh387gicDriT8lX6GDMmQ6YWYIqcZ2REAcMOCM3bsEbr 6TXrqW990whmPJ34Q42sHtqdpi9LLTcoK6EddKMCTbBNHtOUPtnT6rOAFlnznWzz 3kIVqTQq0KBaL3T9Ew+8RMr1ExbCWYlDg3JsSVgxzAj9HA/lqdmAU/w3t1Vlq1jF a3Jv7Yx0nDOymhLW/pADazzF7OUooMVhpKAkYSM6Xqy6MghBqcQCOXcNJZjHzodR t8ATGc8n1oNnovNzY9ojrV2gvRnJ3w6052mE4SWOw+Uu4/oxfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/onsx9kP5Ei50XV1oFVCwLxE5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvYTlmMDZhMzUtNjFkMS0z M2MzLTg5OGQtNDZhYTdiY2FiYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5 MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3 MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHDA6jmjnFj/HHQeBnVfRNCcR5j4RNdjm5xVIB5L5bwsxYnhhEAPJ2q 92IN9xCpvTXEHgklpqp/urcf3hp78F3NCkkHQFbiONb3/HPT8GgqLinmd+eO2l9q YUQViIYCdMv72V1mkm3diOeiI4lMk5NjwYGAyo2UFekBLUDBo1E3dr+HjI5HkWOv UxIVooqKJjquqcEiYFiHyDQBo2oNeQ5KPzEtpoYD43ouUQX9AvJLUWnyzO8eCDm+ ayOAvnR1ZK0ibXaq9owHg72Ysla6Ojg1X21bPtEvz+8Ep32K4RdiLVrKRN3D8Pw5 QF87LOLheBN5wNUcOYp3hSLELG7TQ3U= -----END CERTIFICATE-----Generated at Mon Oct 19 20:57:56 2026 by rpki-client