$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/b7944b83-cae0-338f-9671-ddf915074048.roa File: b7944b83-cae0-338f-9671-ddf915074048.roa (raw, json) Hash identifier: JdOObBXtLbqpqeDn8TE28/2VQjdqaeOeDkyTukp8BzM= Subject key identifier: B2:9B:19:8D:F8:2C:D1:21:EE:7F:4A:C0:E2:C4:49:48:21:C7:7C:87 Certificate issuer: /CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63 Certificate serial: 010D0C9F4328584F03A795B5D1EE74389F5968C0 Authority key identifier: 4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/b7944b83-cae0-338f-9671-ddf915074048.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 14041 IP address blocks: 204.228.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:95:b5:d1:ee:74:38:9f:59:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=a1ebf731-9107-4ba0-ab59-535b4f484dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:09:ea:66:39:87:cf:f8:0e:27:9f:69:70:43: 6d:47:78:07:eb:2c:da:83:49:2b:3e:09:20:9b:9f: 14:cc:c7:e5:99:a1:89:26:ff:68:34:3a:8c:3a:11: 74:d4:e8:10:6a:48:7f:67:ce:49:46:06:66:2f:3d: 48:ac:e2:77:d3:2a:fc:a8:8e:a9:c2:0b:1a:79:84: 86:29:4d:8c:ea:84:4c:18:ba:fe:34:5a:42:ce:83: 5a:bc:06:5a:ef:3a:84:02:7b:61:3b:f1:2a:af:24: 2c:66:b5:19:6d:d3:07:fa:1e:9e:cc:5c:6e:80:9f: 68:f3:10:7f:51:cb:3b:ef:12:24:f0:f6:d9:99:82: 26:ca:34:53:31:76:dd:d6:6d:8b:93:87:6b:e8:32: 56:f3:79:fb:33:e2:91:0c:07:d3:06:64:88:c0:24: 44:6f:a0:27:ee:b4:b1:21:98:23:a1:05:27:09:ae: 15:56:87:c4:93:38:9d:ce:f9:a3:69:d1:ae:9a:e3: 61:32:65:e5:9b:8c:bb:be:40:f2:08:4b:64:cf:6b: ed:c6:6e:eb:15:71:f9:f3:69:9f:e9:c6:c9:96:58: 1d:88:b7:aa:2d:d4:f6:83:24:88:f0:a1:03:ee:fb: 1f:ee:d9:d4:11:94:23:a5:fd:e8:e5:04:39:35:63: 28:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9B:19:8D:F8:2C:D1:21:EE:7F:4A:C0:E2:C4:49:48:21:C7:7C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/b7944b83-cae0-338f-9671-ddf915074048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.crl X509v3 Authority Key Identifier: keyid:4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer sbgp-ipAddrBlock: critical IPv4: 204.228.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e2:c5:00:30:48:f3:87:23:36:28:cf:c3:87:f9:bf:40:fe: 15:ad:a6:4b:f9:92:c6:a7:a6:11:37:38:12:b8:74:09:0d:c0: 48:45:21:da:04:65:76:11:7c:da:78:6c:92:88:7f:50:e3:6f: ca:46:e6:1f:e5:18:4c:de:a5:bc:24:82:df:a6:36:01:d7:93: 52:89:68:11:89:27:91:eb:16:82:e0:b9:1e:bd:0e:a2:e7:51: 71:9d:82:e1:ef:7e:cd:4e:66:88:88:03:48:ee:bf:80:da:f8: b5:5f:73:6d:ae:98:af:80:a0:88:d1:d0:19:82:ec:bd:bd:93: ad:3d:1b:e2:ec:9a:49:f1:2c:93:9f:9b:07:b8:0d:ac:59:bc: 2e:d1:e0:60:e8:25:7b:ed:74:6a:3a:4a:f0:ac:c0:83:8c:27: 29:e6:48:89:ea:a1:d7:9a:45:f5:f2:a5:39:a3:75:1b:26:b4: 7b:4e:01:ca:9c:a0:67:a2:23:2a:11:8a:78:17:c3:fa:b9:44: e9:6b:01:8d:07:3e:f0:89:d9:7b:5a:e3:b1:fc:41:27:6c:57: 51:2e:fb:68:1f:16:db:ba:11:c1:55:cc:36:7e:e5:ed:5a:a0: 38:39:b4:98:f8:d6:c2:6c:38:cc:04:96:b2:24:46:f0:82:9a: 21:a4:07:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5W10e50OJ9ZaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2MmMxYWItYjM5NS00OGVlLThkMmQtZjM0ZDQ3ZTRl ZTYzMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk YTFlYmY3MzEtOTEwNy00YmEwLWFiNTktNTM1YjRmNDg0ZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAnqZjmHz/gOJ59pcENtR3gH6yzag0krPgkg m58UzMflmaGJJv9oNDqMOhF01OgQakh/Z85JRgZmLz1IrOJ30yr8qI6pwgsaeYSG KU2M6oRMGLr+NFpCzoNavAZa7zqEAnthO/EqryQsZrUZbdMH+h6ezFxugJ9o8xB/ Ucs77xIk8PbZmYImyjRTMXbd1m2Lk4dr6DJW83n7M+KRDAfTBmSIwCREb6An7rSx IZgjoQUnCa4VVofEkzidzvmjadGumuNhMmXlm4y7vkDyCEtkz2vtxm7rFXH582mf 6cbJllgdiLeqLdT2gySI8KED7vsf7tnUEZQjpf3o5QQ5NWMocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKbGY34LNEh7n9KwOLESUghx3yHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTYy YzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRkNDdlNGVlNjMvYjc5NDRiODMtY2FlMC0z MzhmLTk2NzEtZGRmOTE1MDc0MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTU2MmMxYWItYjM5NS00OGVlLThk MmQtZjM0ZDQ3ZTRlZTYzLzE1NjJjMWFiLWIzOTUtNDhlZS04ZDJkLWYzNGQ0N2U0 ZWU2My5jcmwwHwYDVR0jBBgwFoAUSiDBeHmIsE8Yj8tAz8GLaQ2Ci7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xNTYyYzFhYi1iMzk1LTQ4ZWUtOGQyZC1mMzRk NDdlNGVlNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLixQAwSPOHIzYoz8OH+b9A/hWtpkv5ksanphE3OBK4dAkNwEhFIdoE ZXYRfNp4bJKIf1Djb8pG5h/lGEzepbwkgt+mNgHXk1KJaBGJJ5HrFoLguR69DqLn UXGdguHvfs1OZoiIA0juv4Da+LVfc22umK+AoIjR0BmC7L29k609G+LsmknxLJOf mwe4DaxZvC7R4GDoJXvtdGo6SvCswIOMJynmSInqodeaRfXypTmjdRsmtHtOAcqc oGeiIyoRingXw/q5ROlrAY0HPvCJ2Xta47H8QSdsV1Eu+2gfFtu6EcFVzDZ+5e1a oDg5tJj41sJsOMwElrIkRvCCmiGkBzE= -----END CERTIFICATE-----Generated at Mon Sep 28 18:54:41 2026 by rpki-client