$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/dbde3c6e-061f-366d-91e4-f40c665408ff.roa File: dbde3c6e-061f-366d-91e4-f40c665408ff.roa (raw, json) Hash identifier: 8krZlitpyxWMt+ABwH8r5Y5gBwmnHSDxtrPqI2Q4fqY= Subject key identifier: 7E:89:DF:20:A0:9F:93:1A:4A:33:D7:51:87:5C:7A:4A:AC:26:36:63 Certificate issuer: /CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Certificate serial: 010D0C9F4328584F7D21B99BA5A77B029223ED80 Authority key identifier: E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/dbde3c6e-061f-366d-91e4-f40c665408ff.roa Signing time: Tue 13 Oct 2026 13:19:27 +0000 ROA not before: Tue 13 Oct 2026 13:19:27 +0000 ROA not after: Mon 11 Jan 2027 14:19:27 +0000 asID: 46606 IP address blocks: 104.171.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:21:b9:9b:a5:a7:7b:02:92:23:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d9dc039-b411-4feb-8901-e0f700ab5da0 Validity Not Before: Oct 13 13:19:27 2026 GMT Not After : Jan 11 14:19:27 2027 GMT Subject: CN=557e3e45-6bef-4b90-9441-dddabac8eff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:72:42:46:e9:19:0c:2e:1e:d9:cc:2c:27: 86:be:3c:e3:a1:de:08:03:4b:cb:e1:df:c4:ea:99: 1c:43:0b:cd:1c:f4:f2:7f:2e:de:6b:2a:8b:b6:bc: 00:bb:ba:3e:72:c9:79:ae:3a:0d:ad:dc:21:96:38: e1:23:ce:bb:35:66:85:78:b7:6c:65:d5:a7:43:94: 90:2b:cd:3a:2d:c2:3d:72:49:06:73:2d:1c:8c:00: 44:5b:67:ce:52:ee:0f:56:c2:99:56:c6:d7:87:04: c9:8f:b7:a2:46:42:94:b8:ed:01:84:3d:02:79:89: 59:b5:2b:24:fd:36:f2:cf:a0:65:b6:d6:88:d8:1f: d6:6e:62:d5:b3:15:3b:c3:6c:2e:ce:09:de:07:dd: 3b:40:8f:2e:46:31:a6:9a:dc:45:84:b9:b8:7f:e3: c5:b4:58:80:26:5c:5c:87:dc:e1:61:e1:28:41:1e: 35:9b:a3:27:f6:74:34:a4:d9:88:33:c7:a4:90:5f: 6a:b6:00:ab:3a:ea:ff:a0:ee:50:bc:1c:0c:58:33: 9a:08:b0:e6:31:cf:c9:d0:c6:f2:2e:89:02:ca:31: f5:92:00:78:c4:57:ca:a6:34:4c:15:88:83:de:6f: f8:ff:9a:d1:40:90:66:ba:45:e5:0a:d1:8c:97:21: c8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:DF:20:A0:9F:93:1A:4A:33:D7:51:87:5C:7A:4A:AC:26:36:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/dbde3c6e-061f-366d-91e4-f40c665408ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0/4d9dc039-b411-4feb-8901-e0f700ab5da0.crl X509v3 Authority Key Identifier: keyid:E3:93:DD:9B:30:F2:2F:D3:25:AD:FA:6A:82:BD:E0:91:40:33:7A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4d9dc039-b411-4feb-8901-e0f700ab5da0.cer sbgp-ipAddrBlock: critical IPv4: 104.171.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:03:c1:4d:31:71:64:fb:f4:87:b6:73:69:43:8b:6e:06:78: 78:81:03:7d:68:b2:70:5f:96:a8:95:fb:28:24:ee:f8:48:33: 51:92:31:a8:ca:fa:75:5e:5d:84:73:e9:a2:f5:98:34:3f:09: 3c:17:bb:7e:75:32:68:71:b1:02:9a:d9:eb:1f:e2:f8:ad:3c: 96:0c:89:b1:d1:54:c9:43:a8:16:0d:46:a2:ea:2a:30:e1:de: 08:55:2f:ca:2a:91:15:dc:06:91:78:d5:0a:3d:29:45:9f:08: 56:4d:61:05:39:97:92:d7:65:ee:4e:50:65:0e:0f:80:94:0c: c7:18:f7:34:73:2c:42:2f:91:5a:e8:b0:a3:6c:2b:c4:b0:12: 6d:8d:de:65:07:d8:47:ff:bf:e3:ec:54:03:b4:1d:61:61:b5: 5d:4b:62:86:74:9e:dd:5e:65:90:9d:b9:c0:8e:14:15:4a:09: cd:34:73:6d:c2:1f:d6:6c:61:92:88:36:02:c4:63:4f:4b:33: bd:78:93:a5:d4:39:6f:73:b8:bb:28:97:a2:4e:64:17:8c:5f: 42:d8:3e:ae:be:73:e7:56:29:b7:74:c0:56:f6:28:b7:3e:97: 52:44:0b:9f:57:12:d0:9a:f4:f0:e4:fc:e7:07:a1:13:84:6e: 33:2f:5d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99Ibmbpad7ApIj7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ5ZGMwMzktYjQxMS00ZmViLTg5MDEtZTBmNzAwYWI1 ZGEwMB4XDTI2MTAxMzEzMTkyN1oXDTI3MDExMTE0MTkyN1owLzEtMCsGA1UEAxMk NTU3ZTNlNDUtNmJlZi00YjkwLTk0NDEtZGRkYWJhYzhlZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveVyQkbpGQwuHtnMLCeGvjzjod4IA0vL4d/E 6pkcQwvNHPTyfy7eayqLtrwAu7o+csl5rjoNrdwhljjhI867NWaFeLdsZdWnQ5SQ K806LcI9ckkGcy0cjABEW2fOUu4PVsKZVsbXhwTJj7eiRkKUuO0BhD0CeYlZtSsk /Tbyz6BlttaI2B/WbmLVsxU7w2wuzgneB907QI8uRjGmmtxFhLm4f+PFtFiAJlxc h9zhYeEoQR41m6Mn9nQ0pNmIM8ekkF9qtgCrOur/oO5QvBwMWDOaCLDmMc/J0Mby LokCyjH1kgB4xFfKpjRMFYiD3m/4/5rRQJBmukXlCtGMlyHI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6J3yCgn5MaSjPXUYdcekqsJjZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlk YzAzOS1iNDExLTRmZWItODkwMS1lMGY3MDBhYjVkYTAvZGJkZTNjNmUtMDYxZi0z NjZkLTkxZTQtZjQwYzY2NTQwOGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGQ5ZGMwMzktYjQxMS00ZmViLTg5 MDEtZTBmNzAwYWI1ZGEwLzRkOWRjMDM5LWI0MTEtNGZlYi04OTAxLWUwZjcwMGFi NWRhMC5jcmwwHwYDVR0jBBgwFoAU45PdmzDyL9Mlrfpqgr3gkUAzesIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80ZDlkYzAzOS1iNDExLTRmZWItODkwMS1lMGY3 MDBhYjVkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsDwU0xcWT79Ie2c2lDi24GeHiBA31osnBflqiV+ygk7vhIM1GSMajK +nVeXYRz6aL1mDQ/CTwXu351MmhxsQKa2esf4vitPJYMibHRVMlDqBYNRqLqKjDh 3ghVL8oqkRXcBpF41Qo9KUWfCFZNYQU5l5LXZe5OUGUOD4CUDMcY9zRzLEIvkVro sKNsK8SwEm2N3mUH2Ef/v+PsVAO0HWFhtV1LYoZ0nt1eZZCducCOFBVKCc00c23C H9ZsYZKINgLEY09LM714k6XUOW9zuLsol6JOZBeMX0LYPq6+c+dWKbd0wFb2KLc+ l1JEC59XEtCa9PDk/OcHoROEbjMvXVc= -----END CERTIFICATE-----Generated at Sat Oct 17 04:24:33 2026 by rpki-client