$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224/ceb3608e-b997-3c40-8f60-bd9b65d6f3b7.roa File: ceb3608e-b997-3c40-8f60-bd9b65d6f3b7.roa (raw, json) Hash identifier: uHAbKhDVFb3ltPu/7fn3gj6uK7zfvrNKWfYZ2r7NtEM= Subject key identifier: 77:3B:69:8D:D0:22:86:F1:CE:FC:17:F1:83:53:8A:8D:DE:77:90:AD Certificate issuer: /CN=e13860a5-352b-4882-9059-f59c76004224 Certificate serial: 010D0C9F4328584F6D181CA2289C9CF30C66D4D4 Authority key identifier: 81:8A:F0:C6:6A:1D:30:58:CB:21:3C:FC:E7:2D:9A:22:81:13:6E:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224/ceb3608e-b997-3c40-8f60-bd9b65d6f3b7.roa Signing time: Wed 07 Oct 2026 19:27:09 +0000 ROA not before: Wed 07 Oct 2026 19:27:09 +0000 ROA not after: Tue 05 Jan 2027 20:27:09 +0000 asID: 402240 IP address blocks: 204.58.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224/e13860a5-352b-4882-9059-f59c76004224.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224/e13860a5-352b-4882-9059-f59c76004224.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:18:1c:a2:28:9c:9c:f3:0c:66:d4:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13860a5-352b-4882-9059-f59c76004224 Validity Not Before: Oct 7 19:27:09 2026 GMT Not After : Jan 5 20:27:09 2027 GMT Subject: CN=6b7541e0-58d7-4d39-854d-1fb0e91f8d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:dc:de:5c:4b:a3:f6:5c:e0:49:4d:b8:c2: ab:de:ea:36:e4:65:0e:20:1b:36:46:20:c9:c2:1c: 48:60:b4:1e:d6:15:bd:4f:19:e9:78:55:33:ba:5a: 0a:54:d2:7e:69:24:e2:26:8e:de:a5:96:bc:b8:ef: 8f:dd:b3:3f:3d:96:5a:4f:74:25:64:c7:2a:a6:b1: 6f:e1:98:88:e3:3e:14:58:a1:02:b1:2f:73:18:06: 94:8d:60:52:f8:05:2b:6c:67:b4:21:46:05:36:85: 43:33:ed:0a:08:48:de:ba:ed:16:b4:ef:49:54:7a: cd:dd:72:ba:d5:76:57:03:6b:ab:5b:1f:84:1a:4f: 4c:e9:05:45:2a:6a:f9:0d:03:0e:21:be:3e:cc:c9: 5f:76:97:8f:c6:99:f0:98:42:d2:53:42:c7:fd:32: d3:92:d5:fa:be:db:05:d8:b1:62:74:fd:f8:0f:32: bc:af:f9:68:e1:98:b7:96:4f:9f:5c:54:7e:cb:aa: cd:08:5f:a8:3a:24:6a:8c:7a:1d:f4:f7:8b:37:db: ce:4b:e1:eb:33:26:b6:fb:44:4c:aa:1a:e8:26:5a: 8a:8d:43:fd:2a:b5:96:1a:3b:b7:58:ab:5a:df:1e: cf:f5:29:e9:ce:f7:4b:9a:14:f2:c6:55:e3:c3:88: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3B:69:8D:D0:22:86:F1:CE:FC:17:F1:83:53:8A:8D:DE:77:90:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224/ceb3608e-b997-3c40-8f60-bd9b65d6f3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224/e13860a5-352b-4882-9059-f59c76004224.crl X509v3 Authority Key Identifier: keyid:81:8A:F0:C6:6A:1D:30:58:CB:21:3C:FC:E7:2D:9A:22:81:13:6E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13860a5-352b-4882-9059-f59c76004224.cer sbgp-ipAddrBlock: critical IPv4: 204.58.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:31:00:9a:8c:f0:b3:45:15:06:40:e8:9b:66:0e:53:ef:a0: 13:03:79:ed:8d:fb:a5:ef:65:2e:fe:87:64:5c:72:11:4c:64: 4c:7c:bd:45:54:d4:15:aa:e3:32:1b:6b:34:95:a9:5b:2f:1e: ec:0a:f9:5a:b4:c9:45:e1:c7:c9:0f:5c:72:9b:b5:c7:ec:8a: f3:b4:7b:32:80:18:4e:78:4e:f4:7a:f0:14:14:06:cc:28:66: 18:4f:08:1d:20:9e:54:bf:4e:0e:a9:fd:8d:e5:ba:6a:85:fc: 4e:0f:90:de:cc:a1:96:03:57:e0:e7:11:e9:09:97:bb:23:ce: a1:6a:53:07:97:8b:52:1f:4f:6f:ee:98:80:20:09:98:c7:9c: ad:4d:f6:b7:34:90:ce:6d:bb:d0:59:1d:58:76:48:f1:c4:76: a4:79:71:65:81:6a:55:47:8f:6a:37:66:8a:17:9d:8d:b8:f7: 1a:23:04:f3:51:6c:ca:83:95:98:34:f5:82:0a:db:26:9b:31: 0e:db:9e:cb:32:c7:8c:ff:e9:64:98:e6:7f:c6:63:c6:f6:81: be:d2:16:bd:74:3e:3a:1c:d1:74:c4:ef:f3:ca:e8:f2:b0:e6: 38:e1:3b:ed:1b:b9:08:43:d0:de:01:33:7b:4d:71:5f:62:2f: 36:d1:e4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tGByiKJyc8wxm1NQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTEzODYwYTUtMzUyYi00ODgyLTkwNTktZjU5Yzc2MDA0 MjI0MB4XDTI2MTAwNzE5MjcwOVoXDTI3MDEwNTIwMjcwOVowLzEtMCsGA1UEAxMk NmI3NTQxZTAtNThkNy00ZDM5LTg1NGQtMWZiMGU5MWY4ZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvTc3lxLo/Zc4ElNuMKr3uo25GUOIBs2RiDJ whxIYLQe1hW9TxnpeFUzuloKVNJ+aSTiJo7epZa8uO+P3bM/PZZaT3QlZMcqprFv 4ZiI4z4UWKECsS9zGAaUjWBS+AUrbGe0IUYFNoVDM+0KCEjeuu0WtO9JVHrN3XK6 1XZXA2urWx+EGk9M6QVFKmr5DQMOIb4+zMlfdpePxpnwmELSU0LH/TLTktX6vtsF 2LFidP34DzK8r/lo4Zi3lk+fXFR+y6rNCF+oOiRqjHod9PeLN9vOS+HrMya2+0RM qhroJlqKjUP9KrWWGju3WKta3x7P9SnpzvdLmhTyxlXjw4gcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc7aY3QIobxzvwX8YNTio3ed5CtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMTM4 NjBhNS0zNTJiLTQ4ODItOTA1OS1mNTljNzYwMDQyMjQvY2ViMzYwOGUtYjk5Ny0z YzQwLThmNjAtYmQ5YjY1ZDZmM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTEzODYwYTUtMzUyYi00ODgyLTkw NTktZjU5Yzc2MDA0MjI0L2UxMzg2MGE1LTM1MmItNDg4Mi05MDU5LWY1OWM3NjAw NDIyNC5jcmwwHwYDVR0jBBgwFoAUgYrwxmodMFjLITz85y2aIoETbtUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMTM4NjBhNS0zNTJiLTQ4ODItOTA1OS1mNTlj NzYwMDQyMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwxAJqM8LNFFQZA6JtmDlPvoBMDee2N+6XvZS7+h2RcchFMZEx8vUVU 1BWq4zIbazSVqVsvHuwK+Vq0yUXhx8kPXHKbtcfsivO0ezKAGE54TvR68BQUBswo ZhhPCB0gnlS/Tg6p/Y3lumqF/E4PkN7MoZYDV+DnEekJl7sjzqFqUweXi1IfT2/u mIAgCZjHnK1N9rc0kM5tu9BZHVh2SPHEdqR5cWWBalVHj2o3ZooXnY249xojBPNR bMqDlZg09YIK2yabMQ7bnssyx4z/6WSY5n/GY8b2gb7SFr10Pjoc0XTE7/PK6PKw 5jjhO+0buQhD0N4BM3tNcV9iLzbR5NI= -----END CERTIFICATE-----Generated at Tue Oct 13 18:53:06 2026 by rpki-client