$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa File: ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa (raw, json) Hash identifier: kIiel1mbdValIQtKVLgat2qlUHp1xnt17pFwqPST9p4= Subject key identifier: E4:8A:AE:05:9C:A1:D7:93:75:08:2E:F4:39:80:30:4D:0B:4A:D0:68 Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Certificate serial: 010D0C9F4328584F4973A76E688871327ACC38C0 Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396163 IP address blocks: 204.16.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a7:6e:68:88:71:32:7a:cc:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9f5b4750-1ab7-4140-9029-661ae5f67a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:a0:73:2d:d3:e7:6b:6b:97:cd:83:99:0e: ed:e8:b3:81:72:8a:63:fb:28:a1:f0:61:04:bb:9b: 89:f0:4d:1a:d6:78:c0:8d:f8:4e:fb:ff:d1:fb:ef: eb:c8:48:ac:6b:02:a9:20:08:25:64:3e:9c:b7:9b: 7f:50:bb:7c:d1:c1:23:e8:ec:ef:17:be:51:d1:64: 93:72:dd:e8:54:5b:ec:55:3b:5c:c4:02:9e:6a:43: 2f:3f:49:60:2e:79:fc:91:84:bd:ec:19:eb:5c:b4: 05:95:2f:9f:c6:e6:04:c9:6c:4f:7e:4a:e1:9d:5d: c3:f1:4a:1e:3d:bf:42:6c:06:32:0a:b6:ea:91:cc: 39:33:ab:dd:23:3c:69:0e:41:21:a2:c8:9b:a4:53: d8:25:eb:51:d3:c0:34:22:d3:2f:62:28:ce:f6:e4: eb:23:fd:9d:a7:e6:0f:96:76:23:94:17:51:59:4d: 00:f0:02:78:9c:2d:84:7f:cb:b6:e9:11:b9:ea:f1: ae:df:93:05:17:69:a3:e0:70:c4:1d:4a:01:5d:5d: de:a2:f4:56:88:d7:23:62:9b:dc:cb:f3:bb:9b:ae: ec:54:11:42:3c:f4:4e:70:31:36:a9:93:3f:cc:9e: 9a:07:40:05:5f:aa:ae:8a:07:c6:42:ac:d6:2e:27: 3e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8A:AE:05:9C:A1:D7:93:75:08:2E:F4:39:80:30:4D:0B:4A:D0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl X509v3 Authority Key Identifier: keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer sbgp-ipAddrBlock: critical IPv4: 204.16.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c3:b6:bd:5c:13:56:3d:b6:16:18:81:d4:71:8f:cf:94:6d: e1:b0:0e:5d:0c:0d:e0:fc:4f:40:29:9b:c7:2b:2d:b1:2d:fa: 58:91:65:bd:56:cd:da:eb:2a:bd:de:88:80:23:e6:26:83:76: 37:9d:6a:3d:ca:f8:38:94:57:b3:61:7e:f5:7f:00:38:03:9c: e6:a5:f3:11:2b:78:37:c2:24:6d:ab:56:e5:2c:38:89:2d:91: 42:10:84:36:05:c7:7a:7a:50:bd:67:03:94:f1:ff:52:12:21: 7c:c8:21:93:0d:ea:98:88:d0:b3:53:80:51:a4:50:02:31:4f: 03:9c:80:4a:82:3a:43:9e:0f:b6:c6:d2:56:56:18:d0:0b:bc: 5c:91:a7:78:20:63:13:3e:40:a7:9a:60:c3:3e:ec:2a:07:95: 73:6e:27:2a:23:d5:5c:d7:d0:39:e9:f9:c1:70:98:cd:05:19: cc:90:31:54:ea:53:88:81:e4:e8:f0:d9:40:e1:3c:54:b4:2b: 9d:27:76:a4:8c:43:b4:df:e8:f8:8f:76:5f:fc:62:d6:04:ea: 8d:d7:28:4d:7c:d7:09:8e:20:fb:e6:c5:69:aa:9d:3c:f6:31: c6:d1:db:e7:9f:5d:04:3e:ae:25:d7:8a:2c:5b:40:cb:e6:db: b3:2f:0c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6duaIhxMnrMOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl MWI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWY1YjQ3NTAtMWFiNy00MTQwLTkwMjktNjYxYWU1ZjY3YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl56gcy3T52trl82DmQ7t6LOBcopj+yih8GEE u5uJ8E0a1njAjfhO+//R++/ryEisawKpIAglZD6ct5t/ULt80cEj6OzvF75R0WST ct3oVFvsVTtcxAKeakMvP0lgLnn8kYS97BnrXLQFlS+fxuYEyWxPfkrhnV3D8Uoe Pb9CbAYyCrbqkcw5M6vdIzxpDkEhosibpFPYJetR08A0ItMvYijO9uTrI/2dp+YP lnYjlBdRWU0A8AJ4nC2Ef8u26RG56vGu35MFF2mj4HDEHUoBXV3eovRWiNcjYpvc y/O7m67sVBFCPPROcDE2qZM/zJ6aB0AFX6quigfGQqzWLic+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSKrgWcodeTdQgu9DmAME0LStBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvYWMxYTI4YjgtZTE0MS0z YmU0LTk5NjItM2YxNzM3ZjViYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2 OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1 ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1 MDE5NWUxYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvDtr1cE1Y9thYYgdRxj8+UbeGwDl0MDeD8T0Apm8crLbEt+liRZb1W zdrrKr3eiIAj5iaDdjedaj3K+DiUV7NhfvV/ADgDnOal8xEreDfCJG2rVuUsOIkt kUIQhDYFx3p6UL1nA5Tx/1ISIXzIIZMN6piI0LNTgFGkUAIxTwOcgEqCOkOeD7bG 0lZWGNALvFyRp3ggYxM+QKeaYMM+7CoHlXNuJyoj1VzX0Dnp+cFwmM0FGcyQMVTq U4iB5Ojw2UDhPFS0K50ndqSMQ7Tf6PiPdl/8YtYE6o3XKE181wmOIPvmxWmqnTz2 McbR2+efXQQ+riXXiixbQMvm27MvDDM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:20:49 2026 by rpki-client