$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa File: 4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa (raw, json) Hash identifier: bAHimwNjE5HhvTTBAeBwNxGGSKBwQ2J2MEKjJ5YwJNg= Subject key identifier: AA:80:E6:22:4B:9A:39:61:BD:2F:F4:73:D5:87:AE:43:64:56:47:96 Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Certificate serial: 010D0C9F4328584FB2410CFE73534E720403B280 Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa Signing time: Sun 01 Nov 2026 14:00:13 +0000 ROA not before: Sun 01 Nov 2026 14:00:13 +0000 ROA not after: Sat 30 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 204.57.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:41:0c:fe:73:53:4e:72:04:03:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Validity Not Before: Nov 1 14:00:13 2026 GMT Not After : Jan 30 14:00:13 2027 GMT Subject: CN=4ba38dda-2d93-4523-a2d7-f75ad9ddd870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:12:b4:52:98:0c:ed:b5:34:99:cd:0f:42: 88:c0:e6:38:7a:9a:c7:3a:7d:d9:45:53:da:b5:e8: ad:28:c6:9c:27:20:a5:70:06:68:b1:b0:50:32:e1: 03:ae:f1:65:64:8a:ab:92:94:84:ce:a2:4a:86:ef: eb:41:30:32:41:a3:0a:ba:c5:19:e2:05:53:4b:3b: 02:5a:58:3d:54:f9:45:0b:5b:a7:05:de:ef:bc:04: 19:ba:7b:db:52:69:7d:c7:b1:4c:27:43:45:89:4a: 7f:68:f5:3d:94:17:9d:28:a1:46:e1:78:26:58:6f: 9f:9b:7c:29:56:a3:e6:4c:23:67:36:7c:c8:70:0e: 29:aa:77:70:f4:5d:0b:00:5d:05:2b:f5:f6:2b:b6: f7:84:2b:b7:e8:13:2c:86:56:24:14:78:8d:3d:86: ad:e6:c4:5b:2b:83:47:7c:e8:55:f7:35:32:60:59: 23:7b:38:58:71:23:eb:c2:dd:b4:45:3d:e1:a8:de: 66:99:af:b0:8b:22:7e:20:ef:70:9c:bc:d1:5f:f4: a6:3b:75:05:65:4b:98:ac:8e:d2:cd:73:8c:fa:c0: 42:28:82:d3:f8:78:f2:1b:8f:96:9e:9f:88:f0:a0: 12:a2:fd:69:7c:cb:10:95:c6:bf:68:e3:06:75:a8: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:80:E6:22:4B:9A:39:61:BD:2F:F4:73:D5:87:AE:43:64:56:47:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl X509v3 Authority Key Identifier: keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer sbgp-ipAddrBlock: critical IPv4: 204.57.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:db:23:a6:3b:34:69:72:48:26:50:85:3d:2d:15:94:e8:09: fc:19:26:a0:44:de:ee:66:c2:41:e2:50:14:50:05:e7:6d:4b: b2:98:8a:f8:3b:19:0f:97:34:27:6d:5b:62:40:27:0d:ef:39: fd:88:34:f5:9a:28:d0:90:d7:52:71:f4:9f:c3:84:fd:ad:ee: a5:e1:21:16:af:fd:9b:9c:9b:d2:2b:b6:39:bb:d8:85:2d:89: 85:25:59:65:c7:9a:9a:86:8b:98:dd:32:a1:22:a7:b2:ef:33: d3:e8:4f:82:4e:35:44:7a:6f:06:75:34:57:cb:da:e9:9f:e7: 5c:bd:cb:f3:4f:43:94:8d:0a:50:55:e4:4a:73:10:d0:92:b0: dd:06:2e:69:bb:06:72:95:4a:28:92:b0:f7:b6:35:6f:cc:39: 14:64:cc:ec:cd:26:4b:2b:f7:f5:43:e9:45:16:67:09:22:6d: bd:d4:ea:cc:1c:eb:67:62:2b:c0:99:6b:c1:b8:47:e3:74:be: 3f:d9:44:64:07:90:3e:16:5a:72:e3:c5:96:d2:43:f2:79:70: df:67:24:df:e7:6d:ec:e9:a6:e0:a3:b1:8d:4e:85:c3:b9:2c: ee:53:79:80:7f:e1:0e:af:af:60:e7:63:fe:34:3d:13:1c:37: d7:77:50:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+yQQz+c1NOcgQDsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz MzljMB4XDTI2MTEwMTE0MDAxM1oXDTI3MDEzMDE0MDAxM1owLzEtMCsGA1UEAxMk NGJhMzhkZGEtMmQ5My00NTIzLWEyZDctZjc1YWQ5ZGRkODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTYStFKYDO21NJnND0KIwOY4eprHOn3ZRVPa teitKMacJyClcAZosbBQMuEDrvFlZIqrkpSEzqJKhu/rQTAyQaMKusUZ4gVTSzsC Wlg9VPlFC1unBd7vvAQZunvbUml9x7FMJ0NFiUp/aPU9lBedKKFG4XgmWG+fm3wp VqPmTCNnNnzIcA4pqndw9F0LAF0FK/X2K7b3hCu36BMshlYkFHiNPYat5sRbK4NH fOhV9zUyYFkjezhYcSPrwt20RT3hqN5mma+wiyJ+IO9wnLzRX/SmO3UFZUuYrI7S zXOM+sBCKILT+HjyG4+Wnp+I8KASov1pfMsQlca/aOMGdag0XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqA5iJLmjlhvS/0c9WHrkNkVkeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvNGYyNjhkODUtODI5YS0z NWZlLThlYzAtY2I4NWQ0N2MxMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4 NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh M2YzZTMzOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzDnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPbI6Y7NGlySCZQhT0tFZToCfwZJqBE3u5mwkHiUBRQBedtS7KYivg7 GQ+XNCdtW2JAJw3vOf2INPWaKNCQ11Jx9J/DhP2t7qXhIRav/Zucm9Irtjm72IUt iYUlWWXHmpqGi5jdMqEip7LvM9PoT4JONUR6bwZ1NFfL2umf51y9y/NPQ5SNClBV 5EpzENCSsN0GLmm7BnKVSiiSsPe2NW/MORRkzOzNJksr9/VD6UUWZwkibb3U6swc 62diK8CZa8G4R+N0vj/ZRGQHkD4WWnLjxZbSQ/J5cN9nJN/nbezppuCjsY1OhcO5 LO5TeYB/4Q6vr2DnY/40PRMcN9d3UEs= -----END CERTIFICATE-----Generated at Sun Nov 15 08:37:41 2026 by rpki-client