$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/f0012a9c-42d0-3e98-932e-4f6f425d256e.roa File: f0012a9c-42d0-3e98-932e-4f6f425d256e.roa (raw, json) Hash identifier: zIIYtQIcoIDzvABZ1zKRRmnv7CuZscQB5C/bNJH7UEI= Subject key identifier: 18:00:9F:51:06:8E:68:AF:E1:DC:35:59:68:4F:65:E6:42:2D:02:55 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584F4987AD0BB4BD86953122F960 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/f0012a9c-42d0-3e98-932e-4f6f425d256e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55039 IP address blocks: 204.57.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:ad:0b:b4:bd:86:95:31:22:f9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ae0125c3-6810-4703-bd64-35a900a26ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:7e:66:3c:53:25:06:47:83:90:23:7f:6f: 33:58:4c:c3:70:24:45:4b:bf:98:03:86:bb:d2:cf: c0:18:62:40:c7:10:c3:ed:9a:92:ef:63:fd:33:2f: b7:1a:0f:a1:c3:eb:3f:55:80:33:17:24:b6:f7:b7: 7c:3a:ab:d5:e2:c2:ef:06:1f:b3:ec:30:5a:af:dc: 9e:68:37:20:68:cc:0b:27:12:5e:cb:7b:64:67:c7: 12:f0:c4:24:d3:c0:2b:e8:7d:d1:65:3a:52:45:d2: 01:20:13:3b:81:30:1d:20:81:12:be:a5:05:8c:13: f1:ac:4d:af:51:91:84:33:a1:04:f8:6d:99:c6:c6: 04:03:ce:df:6f:a9:71:ee:be:b0:84:f8:10:5b:ea: 0f:d7:76:8d:a6:b8:99:b1:90:e3:a3:21:91:8f:c7: 5d:a0:b8:d2:ec:05:ae:ba:df:84:f3:df:4c:f6:39: 32:b4:47:27:49:00:ea:66:76:30:20:37:2f:e6:be: cf:f2:68:38:7a:bc:09:4a:e8:19:7a:83:73:9d:98: a9:5f:a4:53:89:70:8a:ee:b0:44:1f:12:74:93:6d: c7:9f:7e:1b:8b:1a:a1:ff:14:43:31:5e:c6:dd:da: 5e:55:f4:75:8e:aa:d4:f9:e7:58:ae:aa:91:5b:c0: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:00:9F:51:06:8E:68:AF:E1:DC:35:59:68:4F:65:E6:42:2D:02:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/f0012a9c-42d0-3e98-932e-4f6f425d256e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 204.57.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:80:d5:bc:70:a0:74:dc:4e:38:bd:38:bd:69:c6:f1:9d:f4: 2a:59:99:14:bd:15:3d:7a:6f:e9:7c:a1:cf:68:a4:20:dd:05: dc:0d:66:ac:80:26:a3:f2:af:39:9f:c4:27:61:1d:61:8c:0e: c8:61:3f:7a:78:a3:fe:8d:92:cc:23:0a:47:20:10:07:aa:06: 0e:69:a3:ee:f9:41:5f:8e:ff:e2:6e:eb:d0:18:4a:76:45:0b: 8a:16:23:fe:19:e2:67:d2:ee:a6:8b:41:5a:5f:99:e7:c5:2a: 38:ff:49:65:f7:39:9a:54:66:68:f5:2c:56:79:ff:93:fc:91: fd:78:db:36:a3:c2:c7:87:7a:96:3d:6a:63:16:5b:a9:6c:b7: 2e:56:8b:00:28:58:a4:7f:44:e8:98:65:25:e1:06:75:78:dc: 78:e9:8d:7a:89:22:bd:71:5a:f5:11:f1:a2:20:8a:b5:0f:a9: 8e:b8:b6:47:cb:68:5d:3e:00:32:15:47:48:15:c8:e6:4a:b6: 16:ab:d3:f2:2f:e5:ee:17:8e:a1:b3:e9:70:09:e9:7a:0b:b4: 71:b2:5a:3b:56:10:7c:37:b8:9d:b9:a2:15:ee:62:f1:f5:27: ca:10:fa:91:2f:7f:00:0d:fa:84:6a:f0:4e:a1:7d:36:85:f2: 68:d9:0a:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh60LtL2GlTEi+WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWUwMTI1YzMtNjgxMC00NzAzLWJkNjQtMzVhOTAwYTI2ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutV+ZjxTJQZHg5Ajf28zWEzDcCRFS7+YA4a7 0s/AGGJAxxDD7ZqS72P9My+3Gg+hw+s/VYAzFyS297d8OqvV4sLvBh+z7DBar9ye aDcgaMwLJxJey3tkZ8cS8MQk08Ar6H3RZTpSRdIBIBM7gTAdIIESvqUFjBPxrE2v UZGEM6EE+G2ZxsYEA87fb6lx7r6whPgQW+oP13aNpriZsZDjoyGRj8ddoLjS7AWu ut+E899M9jkytEcnSQDqZnYwIDcv5r7P8mg4erwJSugZeoNznZipX6RTiXCK7rBE HxJ0k23Hn34bixqh/xRDMV7G3dpeVfR1jqrU+edYrqqRW8D4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgAn1EGjmiv4dw1WWhPZeZCLQJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvZjAwMTJhOWMtNDJkMC0z ZTk4LTkzMmUtNGY2ZjQyNWQyNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzDn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGA1bxwoHTcTji9OL1pxvGd9CpZmRS9FT16b+l8oc9opCDdBdwNZqyA JqPyrzmfxCdhHWGMDshhP3p4o/6NkswjCkcgEAeqBg5po+75QV+O/+Ju69AYSnZF C4oWI/4Z4mfS7qaLQVpfmefFKjj/SWX3OZpUZmj1LFZ5/5P8kf142zajwseHepY9 amMWW6lsty5WiwAoWKR/ROiYZSXhBnV43HjpjXqJIr1xWvUR8aIgirUPqY64tkfL aF0+ADIVR0gVyOZKthar0/Iv5e4XjqGz6XAJ6XoLtHGyWjtWEHw3uJ25ohXuYvH1 J8oQ+pEvfwAN+oRq8E6hfTaF8mjZCs0= -----END CERTIFICATE-----Generated at Sun Oct 11 08:13:47 2026 by rpki-client