$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/17dcda3a-f0b4-3894-89c8-2411dc0e1e62.roa File: 17dcda3a-f0b4-3894-89c8-2411dc0e1e62.roa (raw, json) Hash identifier: dOK/PkJsf5frBG/QB+OQzgYJ8yZZup9WVc5Y/M5nrZA= Subject key identifier: B0:E8:0E:A1:66:78:CA:D9:53:83:8C:89:8C:B1:27:89:C6:A6:9F:3E Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F6CB78062A56D7275090BA680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/17dcda3a-f0b4-3894-89c8-2411dc0e1e62.roa Signing time: Wed 07 Oct 2026 16:12:29 +0000 ROA not before: Wed 07 Oct 2026 16:12:29 +0000 ROA not after: Tue 05 Jan 2027 17:12:29 +0000 asID: 62904 IP address blocks: 104.140.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:b7:80:62:a5:6d:72:75:09:0b:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 7 16:12:29 2026 GMT Not After : Jan 5 17:12:29 2027 GMT Subject: CN=f24a3ba6-db69-40f9-8a66-3be687f790a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:3f:71:db:38:df:de:d7:cf:62:72:97:bb: 12:d5:10:e4:76:93:f6:29:0f:dc:7f:c4:b1:59:c9: 68:5e:10:98:ad:af:82:24:c6:8a:62:91:07:be:2c: 1a:84:36:c1:10:b7:b3:1b:99:54:f2:21:71:7c:ef: b2:4c:dd:56:7e:f9:fe:57:3d:2c:bf:03:fc:29:f6: d9:56:56:c3:a0:21:3d:29:a9:5b:ba:2a:7b:46:ad: 76:5d:71:25:a3:05:e2:36:52:91:5a:65:91:8d:7a: 9c:04:c0:2d:81:e4:ca:af:9d:13:c7:df:0e:1b:ee: fb:52:6a:05:85:04:80:53:a3:7b:14:22:71:12:de: bb:6b:5a:82:18:aa:f7:3c:ec:85:d3:1b:79:9a:9f: fb:40:31:29:83:d1:04:56:5c:05:39:3c:0b:b8:32: 59:88:c5:25:52:58:5e:8a:66:3d:ac:81:d6:06:df: 2a:b2:c9:97:7d:2e:37:b7:90:09:3b:52:f5:81:76: da:bf:2b:b2:2f:d6:e3:3f:c0:b8:7e:04:df:b6:59: 9c:73:4b:77:be:b0:08:a6:bc:c8:a9:06:98:52:2e: 40:e8:1a:11:b1:ee:ac:09:f5:77:a9:27:32:7d:53: ca:ae:5b:eb:aa:a3:2a:03:2a:55:14:45:b8:01:41: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:0E:A1:66:78:CA:D9:53:83:8C:89:8C:B1:27:89:C6:A6:9F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/17dcda3a-f0b4-3894-89c8-2411dc0e1e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a7:83:ff:c7:89:7f:e3:8a:2e:86:bb:30:91:6b:6c:92:73: 80:71:da:1d:15:50:4f:b0:73:d0:d2:4b:d9:52:e2:14:cf:2e: 99:19:fc:7a:f6:a0:c3:8c:93:df:93:0c:a9:8e:60:d3:5e:fe: 71:2f:ab:55:82:1f:7f:22:30:0a:78:e8:9f:04:58:2d:ed:ad: f9:eb:d6:a5:3e:20:9d:1b:25:eb:e4:cf:30:c3:80:3c:83:61: 78:96:d5:0b:a6:7f:1e:6e:0d:91:6e:4c:5f:a4:3d:19:68:e1: 5b:67:c6:53:6e:e8:42:32:c5:07:1e:86:40:fd:7d:32:ce:97: 4a:90:8c:8f:e3:5f:cc:7e:d3:c8:ec:dd:e8:99:c9:46:b9:eb: f8:a0:1c:bf:3a:f3:9f:9b:04:2f:06:e9:49:a5:62:e0:8e:e4: 54:58:5e:82:6c:93:ee:68:62:c6:15:2a:97:4c:36:d1:88:0e: 71:56:18:92:c6:46:ed:16:11:a6:cd:41:69:1a:8b:a6:fa:87: 27:cf:63:15:f4:35:8f:32:be:16:7f:46:f2:e0:85:c2:7f:38: 7d:b7:ab:68:df:87:d9:75:57:4c:00:07:0f:2d:9e:de:e2:02: 16:c2:f2:ef:05:f1:cd:cb:37:8e:4e:54:77:4f:ee:b5:f6:0e: 85:29:5c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9st4BipW1ydQkLpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MTAwNzE2MTIyOVoXDTI3MDEwNTE3MTIyOVowLzEtMCsGA1UEAxMk ZjI0YTNiYTYtZGI2OS00MGY5LThhNjYtM2JlNjg3Zjc5MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojU/cds4397Xz2Jyl7sS1RDkdpP2KQ/cf8Sx WcloXhCYra+CJMaKYpEHviwahDbBELezG5lU8iFxfO+yTN1Wfvn+Vz0svwP8KfbZ VlbDoCE9Kalbuip7Rq12XXElowXiNlKRWmWRjXqcBMAtgeTKr50Tx98OG+77UmoF hQSAU6N7FCJxEt67a1qCGKr3POyF0xt5mp/7QDEpg9EEVlwFOTwLuDJZiMUlUlhe imY9rIHWBt8qssmXfS43t5AJO1L1gXbavyuyL9bjP8C4fgTftlmcc0t3vrAIprzI qQaYUi5A6BoRse6sCfV3qScyfVPKrlvrqqMqAypVFEW4AUH1uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDoDqFmeMrZU4OMiYyxJ4nGpp8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMTdkY2RhM2EtZjBiNC0z ODk0LTg5YzgtMjQxMWRjMGUxZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCng//HiX/jii6GuzCRa2ySc4Bx2h0VUE+wc9DSS9lS4hTPLpkZ/Hr2 oMOMk9+TDKmOYNNe/nEvq1WCH38iMAp46J8EWC3trfnr1qU+IJ0bJevkzzDDgDyD YXiW1Qumfx5uDZFuTF+kPRlo4VtnxlNu6EIyxQcehkD9fTLOl0qQjI/jX8x+08js 3eiZyUa56/igHL8685+bBC8G6UmlYuCO5FRYXoJsk+5oYsYVKpdMNtGIDnFWGJLG Ru0WEabNQWkai6b6hyfPYxX0NY8yvhZ/RvLghcJ/OH23q2jfh9l1V0wABw8tnt7i AhbC8u8F8c3LN45OVHdP7rX2DoUpXEs= -----END CERTIFICATE-----Generated at Mon Oct 12 14:06:41 2026 by rpki-client