$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa File: dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa (raw, json) Hash identifier: 3DFw3PYjnfUx3Ec8RD/raIF6Jy+DRWVnVtDQNvso0wI= Subject key identifier: FA:D0:B9:07:83:DD:5B:ED:EF:32:B2:09:5C:2F:62:4A:19:86:6D:50 Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Certificate serial: 010D0C9F4328584F49767672A54D05401E15777C Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40545 IP address blocks: 104.255.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:76:72:a5:4d:05:40:1e:15:77:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9ce0fdd9-4add-440f-a82c-c37f43257a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:a4:ff:25:3b:7b:30:5a:e4:13:9c:27:24: 12:d0:20:25:6d:25:45:4c:2d:c5:32:ed:ab:a0:89: 35:94:78:10:2e:3f:79:4b:dc:60:2d:bd:51:20:92: 55:99:91:6b:05:92:5c:6a:e1:3f:b8:da:56:60:ad: 6b:53:de:88:4d:73:45:19:83:c0:66:9d:e9:90:d5: f0:8e:bf:a4:57:44:a4:75:ff:b7:e9:0a:f3:a6:4a: 46:24:ad:11:74:58:15:fa:54:ad:35:f7:5e:2c:8c: 0e:7c:76:be:46:37:8b:f5:26:fb:be:c5:4b:4f:ea: 97:8f:61:e6:8c:93:a3:aa:3b:49:01:3a:f4:95:ad: 8d:36:77:26:1a:02:ec:0f:3f:b3:a1:7b:d4:90:b5: e9:ea:b3:5c:9e:65:53:1a:8a:35:3c:57:d9:5c:8a: d7:f9:6d:8c:e0:2f:e2:ce:8e:21:ff:57:c6:00:5c: 79:55:38:8d:73:1e:e6:45:4c:50:70:a3:eb:86:8f: 68:99:72:74:4c:d4:0d:50:fd:f6:b9:b3:11:b3:70: 31:d5:84:e6:7a:ab:f0:22:a5:75:7b:0a:91:ce:26: be:ff:28:95:17:7a:4d:1d:da:c4:e8:97:9a:52:d2: 3e:6c:11:d2:5b:09:05:e9:aa:54:dc:0a:26:83:80: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D0:B9:07:83:DD:5B:ED:EF:32:B2:09:5C:2F:62:4A:19:86:6D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl X509v3 Authority Key Identifier: keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer sbgp-ipAddrBlock: critical IPv4: 104.255.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d0:59:58:48:d5:c2:0d:29:2d:02:d9:61:b7:e5:92:bc:0c: b7:da:af:08:52:a8:32:ee:d4:ad:f3:78:de:ef:21:2d:a7:fd: fc:39:6f:7e:da:9c:2f:fc:50:df:65:98:02:7f:16:82:f2:53: 6a:33:c7:b7:4f:fa:5f:dd:fb:dc:84:1d:e0:40:28:73:e7:44: d9:eb:50:f9:61:e5:29:fc:fa:ec:7e:ce:91:04:28:34:ba:57: 32:ec:76:e1:7a:de:c4:95:db:aa:33:1f:21:cf:a2:1f:ef:67: e8:99:70:f5:4b:56:14:1a:a7:d6:ba:d1:b8:c4:50:58:38:00: a5:a2:a7:2d:da:0d:9d:25:1b:4b:f0:11:db:c6:aa:a8:b0:15: 98:b1:55:86:c7:d3:c5:e9:8f:d3:01:aa:20:e7:d1:fe:8c:68: b0:47:05:b4:39:63:b5:9d:91:83:f2:fa:98:77:26:3a:9a:c6: 71:85:5b:3a:92:c6:72:a1:61:2c:dc:77:9f:d7:28:0e:ef:0c: 38:2b:6f:08:a4:84:07:02:72:90:46:69:3f:e7:2b:2d:ee:38: 81:ef:13:79:a1:f4:5e:ef:25:9c:25:ab:d6:10:44:d1:3c:94: 28:c8:74:98:67:df:01:32:75:3a:00:d1:90:cb:5d:08:60:a4: b8:fa:8e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdnZypU0FQB4Vd3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkMzdiZjYtNjk1NS00ZWQ1LTgzNDctMjg5Njc2N2Fm YWIwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWNlMGZkZDktNGFkZC00NDBmLWE4MmMtYzM3ZjQzMjU3YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMGk/yU7ezBa5BOcJyQS0CAlbSVFTC3FMu2r oIk1lHgQLj95S9xgLb1RIJJVmZFrBZJcauE/uNpWYK1rU96ITXNFGYPAZp3pkNXw jr+kV0Skdf+36QrzpkpGJK0RdFgV+lStNfdeLIwOfHa+RjeL9Sb7vsVLT+qXj2Hm jJOjqjtJATr0la2NNncmGgLsDz+zoXvUkLXp6rNcnmVTGoo1PFfZXIrX+W2M4C/i zo4h/1fGAFx5VTiNcx7mRUxQcKPrho9omXJ0TNQNUP32ubMRs3Ax1YTmeqvwIqV1 ewqRzia+/yiVF3pNHdrE6JeaUtI+bBHSWwkF6apU3Aomg4DgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrQuQeD3Vvt7zKyCVwvYkoZhm1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQz N2JmNi02OTU1LTRlZDUtODM0Ny0yODk2NzY3YWZhYjAvZGFiYjViNWEtZTFjMS0z MDZmLTg0NjUtZjdmMGE4MDBmZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2ZkMzdiZjYtNjk1NS00ZWQ1LTgz NDctMjg5Njc2N2FmYWIwLzNmZDM3YmY2LTY5NTUtNGVkNS04MzQ3LTI4OTY3Njdh ZmFiMC5jcmwwHwYDVR0jBBgwFoAULNrtwbJ3wcnBT6n58z0s7qVZ2y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZmQzN2JmNi02OTU1LTRlZDUtODM0Ny0yODk2 NzY3YWZhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbQWVhI1cINKS0C2WG35ZK8DLfarwhSqDLu1K3zeN7vIS2n/fw5b37a nC/8UN9lmAJ/FoLyU2ozx7dP+l/d+9yEHeBAKHPnRNnrUPlh5Sn8+ux+zpEEKDS6 VzLsduF63sSV26ozHyHPoh/vZ+iZcPVLVhQap9a60bjEUFg4AKWipy3aDZ0lG0vw EdvGqqiwFZixVYbH08Xpj9MBqiDn0f6MaLBHBbQ5Y7WdkYPy+ph3JjqaxnGFWzqS xnKhYSzcd5/XKA7vDDgrbwikhAcCcpBGaT/nKy3uOIHvE3mh9F7vJZwlq9YQRNE8 lCjIdJhn3wEydToA0ZDLXQhgpLj6jms= -----END CERTIFICATE-----Generated at Wed Oct 14 22:27:58 2026 by rpki-client