$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa File: 40be57dc-7156-3f97-b77b-4e30e5469063.roa (raw, json) Hash identifier: Q+lyaXTRmMuatYB/+1gs1J11rgX56UKPrKahEN9wukk= Subject key identifier: E4:A8:D2:D9:ED:F0:EE:D7:7F:26:77:1C:6B:28:D7:B5:80:A3:42:9B Certificate issuer: /CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Certificate serial: 010D0C9F4328584F6292D6CD72890F93BA11E380 Authority key identifier: CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 54911 IP address blocks: 104.171.32.0/20 maxlen: 20 104.171.36.0/22 maxlen: 22 104.171.39.0/24 maxlen: 24 104.171.40.0/22 maxlen: 22 104.171.40.0/24 maxlen: 24 104.171.41.0/24 maxlen: 24 104.171.43.0/24 maxlen: 24 104.171.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d6:cd:72:89:0f:93:ba:11:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e3c0917d-283b-4bd1-8c4d-9751e0e7a913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:8b:65:0b:9e:c3:d4:27:64:39:92:2e:8c: c1:69:c6:d3:46:05:d1:36:8f:fc:be:d2:e6:80:b6: 75:11:fa:35:72:f3:4a:d9:8a:35:cd:ce:e4:f6:16: 74:7c:ca:c1:ad:2f:b6:09:55:35:b3:4b:7e:d7:ad: 4a:29:b2:95:95:4e:91:80:61:38:2e:aa:6c:8c:93: 96:ce:a7:b8:5b:90:b6:32:4b:dc:49:0e:2e:24:59: 44:80:80:2b:e2:26:4d:a4:69:6f:e0:1f:14:b3:95: 36:5e:d6:9c:34:d4:88:51:27:56:30:87:72:cc:24: 96:44:a4:ff:a5:82:53:48:22:d3:08:59:34:9a:28: e1:21:45:e1:f3:ed:fa:3a:49:ec:8d:da:cf:9a:df: cf:ce:04:6a:9c:14:97:7d:69:4b:57:32:26:f5:13: d1:f7:de:a9:cb:bb:f7:61:78:3d:64:04:d0:68:69: bc:5b:1b:a0:ec:05:25:7e:a6:7e:96:42:50:d4:d1: c4:0a:a4:07:b1:93:03:77:b3:ca:e2:cb:7b:25:19: 80:8b:c7:14:07:2a:26:34:12:55:a3:2e:19:f4:96: 35:eb:ad:80:64:55:10:da:db:d2:57:89:b1:4f:22: 0e:d8:05:04:4a:12:a2:05:e4:0c:4e:cf:70:45:58: 0a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A8:D2:D9:ED:F0:EE:D7:7F:26:77:1C:6B:28:D7:B5:80:A3:42:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/40be57dc-7156-3f97-b77b-4e30e5469063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.crl X509v3 Authority Key Identifier: keyid:CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer sbgp-ipAddrBlock: critical IPv4: 104.171.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:be:38:d5:25:9f:7a:33:eb:01:ad:bb:ab:4f:2a:a2:83:2e: 65:64:bf:66:a5:f7:94:eb:72:2a:d9:72:e7:47:f2:73:84:c1: 91:dd:f9:b6:c8:e9:04:30:c1:a5:cd:ab:40:ad:4a:5b:7b:e0: 02:02:77:18:44:30:5d:70:a7:99:59:15:3d:2e:b3:25:d3:81: e4:8f:e8:42:93:01:14:3e:d1:26:00:27:c7:63:ae:69:7e:5b: 8d:13:2b:23:03:f5:e3:f6:4b:68:32:3e:fa:33:39:53:65:c6: ef:7e:bc:9c:66:e4:f7:ae:90:ff:1f:f7:30:3f:5e:a9:25:29: fc:d9:e1:10:e3:53:06:ba:bb:d0:1a:59:d7:71:89:b5:9f:31: ca:99:f5:31:cb:93:f0:de:ab:02:bb:84:ef:33:44:fe:a1:55: 5b:b4:4b:b7:17:5b:4c:7d:09:f4:9a:6f:26:18:9d:6b:b1:33: 6c:30:87:11:a3:2e:60:17:b4:01:37:a5:13:8c:5c:7c:23:05: ad:83:69:aa:d9:04:bf:29:4c:ff:c8:fa:39:86:82:8a:f9:ef: 4c:17:06:70:2e:72:7c:88:3c:03:1a:33:e7:d5:09:47:4d:e7: e5:4e:3f:3c:f7:f5:99:ef:82:d5:d3:ab:df:72:87:d3:82:1e: 07:c6:81:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktbNcokPk7oR44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJiODlmOTEtYTlhMS00ZDg4LWI5ZDAtZjc4ODJlYTEz NGE5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTNjMDkxN2QtMjgzYi00YmQxLThjNGQtOTc1MWUwZTdhOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj46LZQuew9QnZDmSLozBacbTRgXRNo/8vtLm gLZ1Efo1cvNK2Yo1zc7k9hZ0fMrBrS+2CVU1s0t+161KKbKVlU6RgGE4LqpsjJOW zqe4W5C2MkvcSQ4uJFlEgIAr4iZNpGlv4B8Us5U2XtacNNSIUSdWMIdyzCSWRKT/ pYJTSCLTCFk0mijhIUXh8+36OknsjdrPmt/PzgRqnBSXfWlLVzIm9RPR996py7v3 YXg9ZATQaGm8Wxug7AUlfqZ+lkJQ1NHECqQHsZMDd7PK4st7JRmAi8cUByomNBJV oy4Z9JY1662AZFUQ2tvSV4mxTyIO2AUEShKiBeQMTs9wRVgK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSo0tnt8O7XfyZ3HGso17WAo0KbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4 OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVhMTM0YTkvNDBiZTU3ZGMtNzE1Ni0z Zjk3LWI3N2ItNGUzMGU1NDY5MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWJiODlmOTEtYTlhMS00ZDg4LWI5 ZDAtZjc4ODJlYTEzNGE5LzViYjg5ZjkxLWE5YTEtNGQ4OC1iOWQwLWY3ODgyZWEx MzRhOS5jcmwwHwYDVR0jBBgwFoAUzjpqHXvNBHS7s9ZDcs+uIiPUqHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4 MmVhMTM0YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaKsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS+ONUln3oz6wGtu6tPKqKDLmVkv2al95TrcirZcudH8nOEwZHd+bbI 6QQwwaXNq0CtSlt74AICdxhEMF1wp5lZFT0usyXTgeSP6EKTARQ+0SYAJ8djrml+ W40TKyMD9eP2S2gyPvozOVNlxu9+vJxm5PeukP8f9zA/XqklKfzZ4RDjUwa6u9Aa WddxibWfMcqZ9THLk/DeqwK7hO8zRP6hVVu0S7cXW0x9CfSabyYYnWuxM2wwhxGj LmAXtAE3pROMXHwjBa2DaarZBL8pTP/I+jmGgor570wXBnAucnyIPAMaM+fVCUdN 5+VOPzz39ZnvgtXTq99yh9OCHgfGgZw= -----END CERTIFICATE-----Generated at Mon Oct 5 20:49:25 2026 by rpki-client