$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a33f3850-b642-37b9-9bf5-956f5f8c1302.roa File: a33f3850-b642-37b9-9bf5-956f5f8c1302.roa (raw, json) Hash identifier: fZRsrcFo7uHljzoSIVhKnfs7KFI2Qyg1jQd9z5bnTiU= Subject key identifier: AD:6E:10:A4:F1:76:BA:28:00:A4:48:FC:EB:62:65:E8:73:A3:4B:56 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F6CC5110D9F6985DC83F56880 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a33f3850-b642-37b9-9bf5-956f5f8c1302.roa Signing time: Wed 07 Oct 2026 16:39:49 +0000 ROA not before: Wed 07 Oct 2026 16:39:49 +0000 ROA not after: Tue 05 Jan 2027 17:39:49 +0000 asID: 62904 IP address blocks: 104.140.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:c5:11:0d:9f:69:85:dc:83:f5:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 7 16:39:49 2026 GMT Not After : Jan 5 17:39:49 2027 GMT Subject: CN=a3a1be9f-c137-42bf-89eb-e161246b6a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:4f:69:ab:4b:58:0f:b6:9f:bd:b2:00:77: 68:bc:b4:95:5c:4c:02:a2:fa:f9:d9:fd:f8:82:ce: f0:8e:d0:9c:32:4d:f5:63:d0:09:88:bd:6e:65:2b: 25:c7:74:7a:9c:df:bf:96:21:2a:74:f3:22:91:6e: 3f:69:a5:93:75:c4:1f:e1:59:41:5d:2e:35:c4:9c: c7:2f:27:cb:76:d3:eb:f2:ed:31:ad:1e:d1:24:4c: c3:49:96:6b:a2:f6:dd:70:fc:45:b8:71:47:56:44: 5e:24:07:ee:40:5e:79:50:c3:b2:46:40:be:7c:4b: 7a:85:11:e7:1e:ce:82:29:ed:55:9c:27:8f:47:bd: 71:2d:42:9f:ce:51:e6:17:19:52:46:89:8c:cc:20: be:02:34:aa:7b:50:29:ff:54:35:1a:59:69:c0:64: 20:b0:ef:d3:97:5f:45:48:10:2e:9b:88:d1:a1:e0: 14:d3:18:cb:4f:3d:54:ba:88:b2:fd:89:cb:5d:ad: 47:66:ea:38:d7:06:4a:18:b5:c4:e7:fd:93:23:1a: 12:41:35:ed:84:bf:d4:44:e3:94:fa:e4:dd:f7:dc: a9:a7:8e:9c:f2:ea:34:18:0e:1d:4a:c0:56:5a:e7: c0:a0:93:fb:2b:39:fe:29:5f:c1:50:bb:9b:c0:eb: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:10:A4:F1:76:BA:28:00:A4:48:FC:EB:62:65:E8:73:A3:4B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/a33f3850-b642-37b9-9bf5-956f5f8c1302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:71:bd:e8:61:36:88:9b:81:48:69:fd:d3:4c:59:84:29:03: 82:c2:4e:b3:df:f5:ce:64:01:5b:9e:39:35:92:51:b0:06:e8: 4c:21:fc:16:c1:cb:a4:4d:8a:2d:7c:5d:17:4a:4e:14:7d:3b: a1:58:c1:c9:4d:a7:2f:af:7d:8b:1d:8c:4a:1a:52:68:74:e5: 2b:c4:47:29:58:f9:e3:dd:ac:28:f9:7f:b3:17:b6:57:d2:0a: 67:7c:27:ea:ad:cd:56:f4:0d:69:99:7e:f9:44:58:67:91:ed: 42:da:be:47:a8:da:2c:8d:b3:6c:51:db:f2:7a:cd:b9:3c:ce: 54:2d:b5:a5:2d:31:7a:5d:48:c4:2f:91:3a:43:ab:75:8d:b8: 1e:b0:ef:a8:a5:f5:ac:60:fc:49:b7:d1:b5:5e:94:66:ca:c8: e5:ab:2b:09:62:cd:e9:f7:69:63:3d:cb:76:30:be:61:2b:15: d7:32:71:cf:0a:19:85:6e:7c:8a:43:34:b0:d9:ee:22:b3:2e: 17:f0:fa:21:ac:2a:ee:0d:a6:e4:f9:4a:50:d7:73:52:cc:f6: d7:f1:e4:5e:58:1c:4e:e5:3c:1f:cb:53:e9:f2:52:4c:d8:13: 59:e9:d1:f8:18:5a:7b:1a:9f:73:f9:cd:38:b4:72:26:0c:97: 75:3e:58:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sxRENn2mF3IP1aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MTAwNzE2Mzk0OVoXDTI3MDEwNTE3Mzk0OVowLzEtMCsGA1UEAxMk YTNhMWJlOWYtYzEzNy00MmJmLTg5ZWItZTE2MTI0NmI2YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ5PaatLWA+2n72yAHdovLSVXEwCovr52f34 gs7wjtCcMk31Y9AJiL1uZSslx3R6nN+/liEqdPMikW4/aaWTdcQf4VlBXS41xJzH LyfLdtPr8u0xrR7RJEzDSZZrovbdcPxFuHFHVkReJAfuQF55UMOyRkC+fEt6hRHn Hs6CKe1VnCePR71xLUKfzlHmFxlSRomMzCC+AjSqe1Ap/1Q1GllpwGQgsO/Tl19F SBAum4jRoeAU0xjLTz1Uuoiy/YnLXa1HZuo41wZKGLXE5/2TIxoSQTXthL/UROOU +uTd99ypp46c8uo0GA4dSsBWWufAoJP7Kzn+KV/BULubwOuN9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1uEKTxdrooAKRI/OtiZehzo0tWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYTMzZjM4NTAtYjY0Mi0z N2I5LTliZjUtOTU2ZjVmOGMxMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRxvehhNoibgUhp/dNMWYQpA4LCTrPf9c5kAVueOTWSUbAG6Ewh/BbB y6RNii18XRdKThR9O6FYwclNpy+vfYsdjEoaUmh05SvERylY+ePdrCj5f7MXtlfS Cmd8J+qtzVb0DWmZfvlEWGeR7ULavkeo2iyNs2xR2/J6zbk8zlQttaUtMXpdSMQv kTpDq3WNuB6w76il9axg/Em30bVelGbKyOWrKwlizen3aWM9y3YwvmErFdcycc8K GYVufIpDNLDZ7iKzLhfw+iGsKu4NpuT5SlDXc1LM9tfx5F5YHE7lPB/LU+nyUkzY E1np0fgYWnsan3P5zTi0ciYMl3U+WOA= -----END CERTIFICATE-----Generated at Mon Oct 12 18:22:42 2026 by rpki-client