$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/2d953e08-57aa-39b4-ba96-f6484af1122f.roa File: 2d953e08-57aa-39b4-ba96-f6484af1122f.roa (raw, json) Hash identifier: OVIiTg+pSV31MYooVFNs3NflkZ0TY7NFuGJAghe3hxY= Subject key identifier: 4A:7C:10:BA:76:D9:5B:11:94:7C:E8:00:5F:51:CE:B8:83:35:D7:6B Certificate issuer: /CN=a9d0b6e9-7f03-4eaf-9c0e-e809961366f6 Certificate serial: 010D0C9F4328584F5390E24D886E23779EB4AD40 Authority key identifier: F7:38:59:19:AB:B2:09:46:FA:C8:23:77:C1:A4:B0:FF:71:63:F2:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/2d953e08-57aa-39b4-ba96-f6484af1122f.roa Signing time: Mon 28 Sep 2026 15:59:28 +0000 ROA not before: Mon 28 Sep 2026 15:59:28 +0000 ROA not after: Sun 27 Dec 2026 16:59:28 +0000 asID: 2033 IP address blocks: 204.29.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:90:e2:4d:88:6e:23:77:9e:b4:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d0b6e9-7f03-4eaf-9c0e-e809961366f6 Validity Not Before: Sep 28 15:59:28 2026 GMT Not After : Dec 27 16:59:28 2026 GMT Subject: CN=cf599561-98a4-43d7-9537-35b288645f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:8e:67:6b:5a:fd:65:33:49:41:c3:52:3d: c3:2f:99:1b:59:c0:4e:09:6c:7a:37:a6:c7:9e:33: 04:a0:27:e4:d6:49:ab:d1:cb:29:d9:53:86:1e:95: 01:82:40:ef:51:b0:d6:dc:9b:27:d6:9f:78:16:75: e6:9f:2c:02:1e:37:41:ff:cc:ac:73:dd:12:19:ca: c0:52:8f:23:d8:6d:b9:0d:aa:b4:be:23:2e:92:3e: 18:53:c5:42:2a:d6:25:41:1e:a3:fd:53:6a:49:3e: 74:a2:20:04:70:39:f5:2a:d7:aa:8e:12:de:8e:02: 58:ba:b4:33:62:21:d9:9f:a3:26:61:be:6e:d6:4e: 25:a8:76:11:c2:51:51:f1:b5:7a:bd:1b:8e:df:ed: b4:5a:29:dc:4f:6b:bd:f3:3b:46:ff:29:5e:a1:fa: 49:58:b4:38:42:12:1e:ff:cf:dc:2b:ad:7f:71:a0: 96:8e:c4:a9:6f:61:8b:c8:b0:78:a0:ef:3f:55:be: 71:f4:fb:90:06:07:29:d7:c5:27:1c:35:16:c0:81: c4:ec:b4:23:a4:6d:32:eb:d1:d1:62:61:b0:5f:38: f8:d8:a7:e4:3e:79:fd:9a:b9:89:95:63:bb:93:4d: d9:8f:33:5b:48:f5:cd:d2:dc:2b:f1:c0:66:c1:72: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:10:BA:76:D9:5B:11:94:7C:E8:00:5F:51:CE:B8:83:35:D7:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/2d953e08-57aa-39b4-ba96-f6484af1122f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.crl X509v3 Authority Key Identifier: keyid:F7:38:59:19:AB:B2:09:46:FA:C8:23:77:C1:A4:B0:FF:71:63:F2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a9d0b6e9-7f03-4eaf-9c0e-e809961366f6.cer sbgp-ipAddrBlock: critical IPv4: 204.29.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d7:0b:be:0c:80:c8:6f:5f:d7:95:9f:17:6e:fa:60:6c:12: 49:2a:4e:4b:85:da:1e:4d:ef:72:99:ff:20:06:99:aa:62:e9: 68:fe:be:4c:c2:48:aa:96:a3:6a:94:2c:a4:95:e1:1a:48:98: 33:54:8c:02:3a:20:75:bd:ff:4e:a0:12:df:3d:4a:9d:3a:18: 8d:4f:b7:a0:30:0e:6d:7e:cb:0e:8e:06:13:95:f0:7b:69:ce: 97:6e:8e:69:3f:c0:73:8a:9b:b9:13:ac:fb:97:6b:18:e3:37: 4c:30:c1:c2:8d:7c:29:d0:fe:2a:a1:f4:29:b9:98:68:6d:1e: af:66:2d:92:a7:b8:50:65:52:60:e0:93:dd:6e:2e:32:9d:22: e7:13:67:d5:5d:2a:af:62:a4:23:ab:a1:ee:73:7b:ad:86:8d: 35:bb:f9:ca:79:a6:01:93:ec:68:1f:99:31:f6:95:f9:14:35: 1b:dd:52:c0:2a:bd:e8:f2:c5:47:9c:f3:37:17:3d:58:1a:d9: 14:e2:b3:47:03:1c:a4:4d:6a:d6:5a:e3:f2:02:ce:c5:3b:50: d5:3f:a6:0c:a7:eb:c2:c1:64:4e:80:3e:89:44:76:3b:0d:93: 51:b8:e3:50:54:10:81:8f:8a:a3:aa:db:23:fc:b0:bd:be:b1: d8:a4:68:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TkOJNiG4jd560rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkMGI2ZTktN2YwMy00ZWFmLTljMGUtZTgwOTk2MTM2 NmY2MB4XDTI2MDkyODE1NTkyOFoXDTI2MTIyNzE2NTkyOFowLzEtMCsGA1UEAxMk Y2Y1OTk1NjEtOThhNC00M2Q3LTk1MzctMzViMjg4NjQ1ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI2OZ2ta/WUzSUHDUj3DL5kbWcBOCWx6N6bH njMEoCfk1kmr0csp2VOGHpUBgkDvUbDW3Jsn1p94FnXmnywCHjdB/8ysc90SGcrA Uo8j2G25Daq0viMukj4YU8VCKtYlQR6j/VNqST50oiAEcDn1KteqjhLejgJYurQz YiHZn6MmYb5u1k4lqHYRwlFR8bV6vRuO3+20WincT2u98ztG/yleofpJWLQ4QhIe /8/cK61/caCWjsSpb2GLyLB4oO8/Vb5x9PuQBgcp18UnHDUWwIHE7LQjpG0y69HR YmGwXzj42KfkPnn9mrmJlWO7k03ZjzNbSPXN0twr8cBmwXInDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp8ELp22VsRlHzoAF9RzriDNddrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hOWQw YjZlOS03ZjAzLTRlYWYtOWMwZS1lODA5OTYxMzY2ZjYvMmQ5NTNlMDgtNTdhYS0z OWI0LWJhOTYtZjY0ODRhZjExMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYTlkMGI2ZTktN2YwMy00ZWFmLTlj MGUtZTgwOTk2MTM2NmY2L2E5ZDBiNmU5LTdmMDMtNGVhZi05YzBlLWU4MDk5NjEz NjZmNi5jcmwwHwYDVR0jBBgwFoAU9zhZGauyCUb6yCN3waSw/3Fj8p0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hOWQwYjZlOS03ZjAzLTRlYWYtOWMwZS1lODA5 OTYxMzY2ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzB2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLXC74MgMhvX9eVnxdu+mBsEkkqTkuF2h5N73KZ/yAGmapi6Wj+vkzC SKqWo2qULKSV4RpImDNUjAI6IHW9/06gEt89Sp06GI1Pt6AwDm1+yw6OBhOV8Htp zpdujmk/wHOKm7kTrPuXaxjjN0wwwcKNfCnQ/iqh9Cm5mGhtHq9mLZKnuFBlUmDg k91uLjKdIucTZ9VdKq9ipCOroe5ze62GjTW7+cp5pgGT7GgfmTH2lfkUNRvdUsAq vejyxUec8zcXPVga2RTis0cDHKRNatZa4/ICzsU7UNU/pgyn68LBZE6APolEdjsN k1G441BUEIGPiqOq2yP8sL2+sdikaP8= -----END CERTIFICATE-----Generated at Sun Oct 4 19:49:06 2026 by rpki-client