$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa File: 86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa (raw, json) Hash identifier: T78j7/0ww2rSPliyhDlgsiRB89o2Up2O9WwYeInEn18= Subject key identifier: 57:14:9D:42:92:87:F0:67:43:89:1B:E1:3E:BE:81:B6:C3:11:07:9D Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Certificate serial: 010D0C9F4328584E5D14AA98E500C065E31F1C80 Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 23158 IP address blocks: 104.255.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:aa:98:e5:00:c0:65:e3:1f:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=6cd70197-bb36-4f5a-8913-aa5ddb8e642c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:3a:41:4e:8b:4f:96:e6:b6:83:8d:e5:34: 5d:48:7f:30:2f:6e:55:2f:41:f1:ab:85:ee:d5:98: e7:db:c1:a3:26:05:49:8c:fa:47:c3:25:47:0c:78: bb:92:ab:74:b6:2d:a2:c9:a5:29:d3:04:ff:5f:37: 91:29:d6:8b:c5:46:21:f1:e7:47:e7:b9:2a:c4:50: 86:9f:52:13:d1:83:79:02:7b:32:b6:b8:b9:03:1a: df:62:a5:d2:49:e9:d5:e2:4e:a8:6c:e0:bf:19:da: b4:83:b6:13:16:90:45:d0:e1:34:7c:c6:bf:6a:23: f6:3b:4e:15:44:d1:a7:74:10:e0:ea:b4:76:15:52: 0d:d8:37:10:c6:b6:10:dc:9a:89:35:47:1e:31:e7: 61:bf:fd:f3:44:fc:7d:eb:61:0e:46:40:ff:ef:6c: 75:45:b3:6d:0b:57:c8:5d:be:2b:bf:5e:61:d4:63: ff:e9:02:e3:0e:75:cd:5f:1c:3e:ce:93:46:3b:07: 20:65:c6:49:f2:5d:90:8f:87:85:b7:47:69:fd:32: d6:17:b3:f9:01:04:69:04:3f:82:91:ae:79:c5:4b: 2f:d8:32:e0:1b:48:85:7c:4b:1f:27:cd:0a:2d:78: 75:cf:3d:f0:28:3f:28:fb:cf:ef:c7:af:e5:36:25: 91:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:14:9D:42:92:87:F0:67:43:89:1B:E1:3E:BE:81:B6:C3:11:07:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/86846a09-bc7b-3f2e-830c-d2a8779f3d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl X509v3 Authority Key Identifier: keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer sbgp-ipAddrBlock: critical IPv4: 104.255.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f9:91:c3:6f:5c:b1:05:73:04:ff:1e:c3:82:e2:a2:73:84: 93:27:cf:7e:9d:18:e9:7b:b6:a1:97:57:5a:fc:0c:78:fa:0e: cc:11:07:c1:04:3f:91:5d:81:db:5b:2c:ca:37:cd:99:57:56: 07:e5:35:47:24:ea:ce:66:1c:c0:32:31:68:9b:b4:d0:2d:cb: 89:2e:e4:a8:ca:14:e0:80:53:8d:92:75:1b:f6:ae:7f:64:8f: 32:d2:36:4c:6a:d7:2e:34:6a:f3:0a:96:27:92:b0:0e:6f:a2: c4:57:76:21:d3:72:49:27:2d:cb:12:eb:bb:c6:0a:6d:da:0f: a5:45:37:e6:4c:8a:0e:55:d9:a0:ff:24:7b:fb:c5:8e:bd:2e: 0e:81:40:dc:f8:25:98:14:9b:41:8b:8d:fc:86:8b:b7:2f:81: d6:75:b4:44:e8:77:e5:b9:3f:4a:d3:a9:f3:0f:9b:97:c8:97: 0b:82:3c:ee:a2:7b:e8:6a:01:de:70:98:f1:9b:ce:db:83:84: 50:65:b4:2c:4a:61:e6:d5:0a:e8:84:e5:76:eb:e0:10:35:b2: a4:18:48:1f:f9:49:42:05:f2:69:d0:24:01:ac:79:79:9d:ef: 08:26:82:2b:a5:06:db:5f:ba:3a:6c:43:f6:77:22:fe:11:d1: 27:9e:e2:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKqY5QDAZeMfHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy ZDUyMB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk NmNkNzAxOTctYmIzNi00ZjVhLTg5MTMtYWE1ZGRiOGU2NDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCU6QU6LT5bmtoON5TRdSH8wL25VL0Hxq4Xu 1Zjn28GjJgVJjPpHwyVHDHi7kqt0ti2iyaUp0wT/XzeRKdaLxUYh8edH57kqxFCG n1IT0YN5Ansytri5AxrfYqXSSenV4k6obOC/Gdq0g7YTFpBF0OE0fMa/aiP2O04V RNGndBDg6rR2FVIN2DcQxrYQ3JqJNUceMedhv/3zRPx962EORkD/72x1RbNtC1fI Xb4rv15h1GP/6QLjDnXNXxw+zpNGOwcgZcZJ8l2Qj4eFt0dp/TLWF7P5AQRpBD+C ka55xUsv2DLgG0iFfEsfJ80KLXh1zz3wKD8o+8/vx6/lNiWRHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcUnUKSh/BnQ4kb4T6+gbbDEQedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvODY4NDZhMDktYmM3Yi0z ZjJlLTgzMGMtZDJhODc3OWYzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0 MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX5kcNvXLEFcwT/HsOC4qJzhJMnz36dGOl7tqGXV1r8DHj6DswRB8EE P5FdgdtbLMo3zZlXVgflNUck6s5mHMAyMWibtNAty4ku5KjKFOCAU42SdRv2rn9k jzLSNkxq1y40avMKlieSsA5vosRXdiHTckknLcsS67vGCm3aD6VFN+ZMig5V2aD/ JHv7xY69Lg6BQNz4JZgUm0GLjfyGi7cvgdZ1tETod+W5P0rTqfMPm5fIlwuCPO6i e+hqAd5wmPGbztuDhFBltCxKYebVCuiE5Xbr4BA1sqQYSB/5SUIF8mnQJAGseXmd 7wgmgiulBttfujpsQ/Z3Iv4R0See4tk= -----END CERTIFICATE-----Generated at Fri Jul 24 13:51:57 2026 by rpki-client