$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fa9622df-0d4f-304c-86e6-21b5cea8fa31.roa File: fa9622df-0d4f-304c-86e6-21b5cea8fa31.roa (raw, json) Hash identifier: n0jw9eMsu1G8ZpFG7LFXs0H3IIl06WDPtb8YFM21q7w= Subject key identifier: 43:0A:76:0F:76:9B:DD:DA:23:D6:C0:C1:30:86:05:DC:49:E7:42:F7 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F6C6F26DA049BDF93C63DC200 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fa9622df-0d4f-304c-86e6-21b5cea8fa31.roa Signing time: Wed 07 Oct 2026 13:46:43 +0000 ROA not before: Wed 07 Oct 2026 13:46:43 +0000 ROA not after: Tue 05 Jan 2027 14:46:43 +0000 asID: 62904 IP address blocks: 104.140.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:6f:26:da:04:9b:df:93:c6:3d:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Oct 7 13:46:43 2026 GMT Not After : Jan 5 14:46:43 2027 GMT Subject: CN=ae5ae803-10dc-46a2-babc-da4636c94f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:21:09:36:de:05:24:25:0f:a0:13:03:95: 34:c2:ad:25:7c:d1:b3:c6:5f:88:90:c8:08:a1:3b: f9:9f:b2:14:38:5d:53:26:03:8c:24:2c:4c:0d:1e: e8:46:e5:e6:5a:ff:1b:6e:bf:23:20:3a:19:4b:58: b6:7f:66:b5:5c:a6:ee:bc:91:3d:a0:78:1b:2e:d7: db:87:11:06:a3:4a:55:46:c8:8c:39:70:b7:54:27: b3:cf:d5:b1:a9:ad:e1:42:eb:54:d7:06:44:cc:5c: f4:55:ef:6e:76:bd:12:13:03:a5:1b:be:1f:49:b0: e6:44:15:da:d1:09:7c:30:a2:9d:4a:20:b2:42:21: 3b:48:93:19:37:40:47:a3:7e:3a:e7:a2:7c:66:0c: 16:26:9c:47:ed:65:bd:d3:e9:a6:eb:02:95:a9:1a: 35:ba:ac:6e:cf:a7:43:fe:e8:16:7e:d5:9b:8d:2e: 2b:e1:7f:17:46:44:e5:97:bb:c7:b3:2c:97:e3:e0: 1e:33:58:1e:a2:d3:e3:4b:07:d4:7f:78:45:68:68: f0:2b:49:a9:b8:89:32:9c:30:98:31:41:94:05:68: a2:52:bb:dc:20:bc:b2:e6:0d:5e:db:5e:a8:20:0c: 54:0b:e1:2e:6a:3b:0e:b2:14:59:9f:fa:a8:90:28: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0A:76:0F:76:9B:DD:DA:23:D6:C0:C1:30:86:05:DC:49:E7:42:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/fa9622df-0d4f-304c-86e6-21b5cea8fa31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 104.140.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7d:65:89:f8:3b:63:99:08:57:2b:3e:3e:0c:82:2e:f5:42: a4:04:a1:62:ad:a6:32:30:40:e9:96:fc:be:73:7a:36:19:78: a8:d7:b8:ca:3f:56:87:d4:22:05:f1:90:c4:da:69:a3:b1:90: 0a:9b:30:d7:5d:86:ef:e6:24:e2:21:0a:85:c8:f1:92:f1:08: a2:53:c2:14:b8:f3:ae:9d:7e:ee:51:82:7b:ef:35:0e:66:09: 34:e5:89:81:99:5b:0a:33:1b:b3:4c:e3:c8:52:4c:2f:48:ab: 65:c2:40:e8:7f:45:28:0d:65:d1:97:d3:0d:aa:37:2f:69:58: 8e:b1:80:85:79:d1:ff:30:76:d8:25:d6:90:2a:6c:4d:b9:c3: 3a:f0:82:22:da:bc:2e:ac:b7:ea:88:78:f8:1b:dd:93:72:c0: a0:61:19:0a:c8:10:79:3b:4b:5a:1c:a6:b6:7f:45:a1:a5:4e: fc:ce:be:d4:66:18:95:af:9b:f2:32:8f:1b:95:15:95:eb:6a: fb:38:a1:08:6d:e4:65:21:f1:42:19:ec:c5:35:5e:35:7b:e1: 1c:27:9e:f0:f8:53:a3:e6:6b:d9:2f:73:73:ec:0e:83:02:a2: 7a:65:1f:e5:40:76:75:a1:d9:9f:dc:6a:72:b4:b2:e7:74:92: 67:6c:6f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sbybaBJvfk8Y9wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MTAwNzEzNDY0M1oXDTI3MDEwNTE0NDY0M1owLzEtMCsGA1UEAxMk YWU1YWU4MDMtMTBkYy00NmEyLWJhYmMtZGE0NjM2Yzk0ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3chCTbeBSQlD6ATA5U0wq0lfNGzxl+IkMgI oTv5n7IUOF1TJgOMJCxMDR7oRuXmWv8bbr8jIDoZS1i2f2a1XKbuvJE9oHgbLtfb hxEGo0pVRsiMOXC3VCezz9Wxqa3hQutU1wZEzFz0Ve9udr0SEwOlG74fSbDmRBXa 0Ql8MKKdSiCyQiE7SJMZN0BHo34656J8ZgwWJpxH7WW90+mm6wKVqRo1uqxuz6dD /ugWftWbjS4r4X8XRkTll7vHsyyX4+AeM1geotPjSwfUf3hFaGjwK0mpuIkynDCY MUGUBWiiUrvcILyy5g1e216oIAxUC+EuajsOshRZn/qokCgqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMKdg92m93aI9bAwTCGBdxJ50L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZmE5NjIyZGYtMGQ0Zi0z MDRjLTg2ZTYtMjFiNWNlYThmYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC59ZYn4O2OZCFcrPj4Mgi71QqQEoWKtpjIwQOmW/L5zejYZeKjXuMo/ VofUIgXxkMTaaaOxkAqbMNddhu/mJOIhCoXI8ZLxCKJTwhS4866dfu5RgnvvNQ5m CTTliYGZWwozG7NM48hSTC9Iq2XCQOh/RSgNZdGX0w2qNy9pWI6xgIV50f8wdtgl 1pAqbE25wzrwgiLavC6st+qIePgb3ZNywKBhGQrIEHk7S1ocprZ/RaGlTvzOvtRm GJWvm/IyjxuVFZXravs4oQht5GUh8UIZ7MU1XjV74RwnnvD4U6Pma9kvc3PsDoMC onplH+VAdnWh2Z/canK0sud0kmdsbzg= -----END CERTIFICATE-----Generated at Sun Oct 11 22:21:48 2026 by rpki-client