$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/681503d4-c1a1-332b-bba8-4ccf393e5813.roa File: 681503d4-c1a1-332b-bba8-4ccf393e5813.roa (raw, json) Hash identifier: bZRRzAzU5CaURftecV0iQJa85zdHjmoMXyiGKbUUQPw= Subject key identifier: C5:B1:6B:CF:BC:DC:A2:24:42:B3:1B:C0:2D:A7:0A:26:75:2B:F5:CD Certificate issuer: /CN=3ee846dd-02ea-4d61-870d-fcc258b39cf8 Certificate serial: 010D0C9F4328584F7FECB2D33CCF962F5910C880 Authority key identifier: 75:82:52:27:DB:3E:E9:32:1C:D6:C6:F1:2F:10:8C:BA:F2:11:C7:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/681503d4-c1a1-332b-bba8-4ccf393e5813.roa Signing time: Wed 14 Oct 2026 13:20:02 +0000 ROA not before: Wed 14 Oct 2026 13:20:02 +0000 ROA not after: Tue 12 Jan 2027 14:20:02 +0000 asID: 33390 IP address blocks: 204.238.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/3ee846dd-02ea-4d61-870d-fcc258b39cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/3ee846dd-02ea-4d61-870d-fcc258b39cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:ec:b2:d3:3c:cf:96:2f:59:10:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee846dd-02ea-4d61-870d-fcc258b39cf8 Validity Not Before: Oct 14 13:20:02 2026 GMT Not After : Jan 12 14:20:02 2027 GMT Subject: CN=d987fbaf-bb5a-4dbb-9b6e-2e8d8968014f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:56:7a:c5:a4:b7:80:64:42:4a:2c:a0:f7: 0e:89:44:7d:bc:ae:28:6a:c8:44:2f:aa:41:6b:c8: d7:70:6d:5e:27:12:b4:25:9a:c6:45:b2:b1:09:46: 82:3b:f7:15:41:e0:c1:14:8d:0b:fc:a2:79:e6:f2: 7a:2f:0e:a4:ca:d7:aa:df:7c:9a:ac:eb:2a:7c:ba: 5a:80:87:2f:e4:50:2c:b2:c9:5a:00:04:f9:68:f4: 6e:3d:cb:ea:35:56:4c:34:b1:e1:1a:c0:e9:ba:9b: ca:91:6e:ae:f5:a0:78:f9:d6:ab:24:e0:40:5c:68: 95:27:73:5f:0b:a3:21:3a:4d:f4:06:81:e7:9e:da: d0:bc:e4:44:c8:31:9f:a9:f0:2b:5a:0c:17:bd:fe: 31:1b:62:ef:7a:27:15:76:bb:0c:00:6c:0e:03:6a: 5b:df:84:71:d6:4c:20:d9:e2:c6:78:e9:94:d2:9f: 22:0d:f6:13:d6:82:75:a2:e5:f5:ba:d6:3c:8c:5b: 00:f8:fe:af:0a:12:fc:52:8b:ad:04:8c:93:1d:61: d2:af:5e:c0:86:48:d3:93:0c:dc:76:76:6e:37:d7: 7c:a2:b1:c5:30:7f:27:e8:f1:d5:96:ef:3e:be:b9: ea:56:4c:95:ce:fd:e6:d0:77:1e:25:e1:10:84:b8: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:6B:CF:BC:DC:A2:24:42:B3:1B:C0:2D:A7:0A:26:75:2B:F5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/681503d4-c1a1-332b-bba8-4ccf393e5813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8/3ee846dd-02ea-4d61-870d-fcc258b39cf8.crl X509v3 Authority Key Identifier: keyid:75:82:52:27:DB:3E:E9:32:1C:D6:C6:F1:2F:10:8C:BA:F2:11:C7:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ee846dd-02ea-4d61-870d-fcc258b39cf8.cer sbgp-ipAddrBlock: critical IPv4: 204.238.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6c:48:68:f4:aa:1e:4c:a2:70:4d:00:33:c8:1d:6a:da:d2: b3:e1:49:1c:4a:9d:a0:1b:00:db:37:af:19:e5:de:46:fb:b0: 73:e1:81:f2:cd:f5:27:78:23:9d:d7:0b:89:bc:b7:2e:10:6a: 6a:de:67:76:76:29:fb:69:88:2c:af:96:9a:37:0b:0a:48:4c: dc:25:ce:ba:8c:9e:90:04:92:1d:e2:4d:f0:c8:fd:90:45:9e: 67:b8:58:20:b9:55:a9:1b:80:65:85:dc:c8:db:a6:cf:6b:66: 07:ce:22:75:4d:a9:95:86:33:ce:e1:99:26:68:bd:4c:b4:96: ee:89:4c:bc:6b:1c:4e:3a:a0:a2:a5:c5:42:94:d6:9b:5d:c1: f3:f6:69:df:d7:72:42:86:d7:f3:a4:29:ec:5b:71:dc:10:4f: 7f:a5:71:d6:3b:88:fd:29:ec:8c:3b:ed:ea:df:0b:b1:c7:75: ed:9e:61:1f:18:32:f0:ba:b0:a7:86:5d:b5:13:9c:31:19:3d: ad:e7:d0:32:46:05:cf:8b:b5:09:6a:b5:a4:17:de:25:5a:d1: ab:de:80:94:17:a5:51:10:4d:89:73:85:e6:fd:0f:60:ef:9d: 0e:ae:fa:6c:a5:a9:69:96:94:16:b8:e1:82:94:71:3a:93:2a: 5b:60:01:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/7LLTPM+WL1kQyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlODQ2ZGQtMDJlYS00ZDYxLTg3MGQtZmNjMjU4YjM5 Y2Y4MB4XDTI2MTAxNDEzMjAwMloXDTI3MDExMjE0MjAwMlowLzEtMCsGA1UEAxMk ZDk4N2ZiYWYtYmI1YS00ZGJiLTliNmUtMmU4ZDg5NjgwMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdtWesWkt4BkQkosoPcOiUR9vK4oashEL6pB a8jXcG1eJxK0JZrGRbKxCUaCO/cVQeDBFI0L/KJ55vJ6Lw6kyteq33yarOsqfLpa gIcv5FAssslaAAT5aPRuPcvqNVZMNLHhGsDpupvKkW6u9aB4+darJOBAXGiVJ3Nf C6MhOk30BoHnntrQvOREyDGfqfArWgwXvf4xG2LveicVdrsMAGwOA2pb34Rx1kwg 2eLGeOmU0p8iDfYT1oJ1ouX1utY8jFsA+P6vChL8UoutBIyTHWHSr17AhkjTkwzc dnZuN9d8orHFMH8n6PHVlu8+vrnqVkyVzv3m0HceJeEQhLhVDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWxa8+83KIkQrMbwC2nCiZ1K/XNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zZWU4 NDZkZC0wMmVhLTRkNjEtODcwZC1mY2MyNThiMzljZjgvNjgxNTAzZDQtYzFhMS0z MzJiLWJiYTgtNGNjZjM5M2U1ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvM2VlODQ2ZGQtMDJlYS00ZDYxLTg3 MGQtZmNjMjU4YjM5Y2Y4LzNlZTg0NmRkLTAyZWEtNGQ2MS04NzBkLWZjYzI1OGIz OWNmOC5jcmwwHwYDVR0jBBgwFoAUdYJSJ9s+6TIc1sbxLxCMuvIRx+AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zZWU4NDZkZC0wMmVhLTRkNjEtODcwZC1mY2My NThiMzljZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO7+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFsSGj0qh5MonBNADPIHWra0rPhSRxKnaAbANs3rxnl3kb7sHPhgfLN 9Sd4I53XC4m8ty4QamreZ3Z2KftpiCyvlpo3CwpITNwlzrqMnpAEkh3iTfDI/ZBF nme4WCC5VakbgGWF3Mjbps9rZgfOInVNqZWGM87hmSZovUy0lu6JTLxrHE46oKKl xUKU1ptdwfP2ad/XckKG1/OkKexbcdwQT3+lcdY7iP0p7Iw77erfC7HHde2eYR8Y MvC6sKeGXbUTnDEZPa3n0DJGBc+LtQlqtaQX3iVa0avegJQXpVEQTYlzheb9D2Dv nQ6u+mylqWmWlBa44YKUcTqTKltgAcA= -----END CERTIFICATE-----Generated at Sun Nov 1 19:34:24 2026 by rpki-client