$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/f8432144-b345-348d-bd60-bbcafeefe8d8.roa File: f8432144-b345-348d-bd60-bbcafeefe8d8.roa (raw, json) Hash identifier: g8jWQQWoVHYQspDoa1J3nq4NirvA0I/U5+27C6YggY8= Subject key identifier: 52:10:6D:B0:A1:4E:BA:AF:88:11:4C:3A:A8:E4:3A:B0:E3:85:DC:5F Certificate issuer: /CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f Certificate serial: 010D0C9F4328584F497353EF5BC9A930E5CC4E40 Authority key identifier: E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/f8432144-b345-348d-bd60-bbcafeefe8d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397170 IP address blocks: 204.124.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:53:ef:5b:c9:a9:30:e5:cc:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fa61bcd-b5c8-449b-8075-79ae5d24ee0f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d79aa977-eb62-42a0-913d-02a606fab189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:74:4d:a7:b2:db:74:cb:56:63:3d:7a:42: f4:a8:d4:5e:c6:a3:a8:02:69:ba:3f:e8:b8:b5:25: 96:5a:97:98:92:93:83:08:65:67:bd:44:1b:97:71: 1d:27:98:b4:b8:88:2b:09:85:41:25:7e:c5:76:c6: ef:43:31:ea:dd:0a:57:3b:f7:f5:6a:84:c7:9c:27: ab:7f:49:91:d6:3c:b9:82:ae:4a:7a:8b:41:c2:87: 9c:6e:6e:bc:a6:5e:aa:86:24:bb:8b:27:d2:20:17: f9:e4:cb:c2:24:cb:39:b1:6e:4c:e6:ce:17:91:05: be:e1:30:b9:83:ce:83:a0:9e:47:4a:7f:8a:de:99: 8d:f0:42:5d:98:d6:cd:e5:35:f8:aa:12:9e:0f:7f: a7:1b:71:9a:d2:5d:9a:5c:12:ad:89:dc:2a:d9:7c: 95:9f:5a:d4:b7:e8:14:c8:33:ce:68:f8:23:0f:dd: 0c:60:77:57:e3:3b:cd:21:da:e6:70:e4:ba:1d:74: 9a:bf:d6:2d:88:44:5f:79:68:db:73:cc:f2:03:2c: db:eb:82:8c:28:5b:1f:46:d7:83:9d:0c:e5:5a:35: 52:5d:94:8e:19:b7:79:b8:9d:87:ad:36:fa:70:b0: ab:4d:5d:45:8a:fc:b9:f7:d1:67:42:8e:3f:e4:06: 5f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:6D:B0:A1:4E:BA:AF:88:11:4C:3A:A8:E4:3A:B0:E3:85:DC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/f8432144-b345-348d-bd60-bbcafeefe8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.crl X509v3 Authority Key Identifier: keyid:E3:7F:6F:FD:4F:C7:58:66:98:61:4B:A3:AB:2D:71:9D:3D:A0:D5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7fa61bcd-b5c8-449b-8075-79ae5d24ee0f.cer sbgp-ipAddrBlock: critical IPv4: 204.124.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f7:f4:08:8f:3b:03:6f:33:5d:75:fe:d0:9c:fe:5d:f6:a0: 7e:9f:37:15:35:5a:9e:21:c8:c0:6b:e3:47:c1:9a:99:7b:b1: 5d:5c:82:19:1b:85:22:e0:64:8e:a1:72:a8:05:82:81:8d:60: 4b:b6:30:29:77:ea:96:2b:a7:f7:ef:97:95:93:d7:d7:be:72: 85:d4:9d:c5:57:43:32:90:2f:b6:32:76:19:dd:38:67:00:e5: cc:f2:da:dd:93:77:d9:48:c2:bf:5c:9d:3d:b3:f7:f4:5f:86: 87:80:7c:43:49:e3:32:67:12:39:39:f5:fd:be:1b:9b:34:52: 21:63:56:97:31:f7:7b:cc:fe:ee:ed:c2:65:31:fc:2e:5e:ff: 65:ec:a2:86:42:7a:d7:15:e7:9d:73:7b:48:70:74:c5:5e:1e: 3d:17:14:d7:fb:f4:bf:57:bc:60:4c:5f:75:bb:c1:32:25:8a: f6:d0:7e:0c:51:e5:6d:02:1a:0c:e1:98:d3:52:d4:d6:37:bf: 7c:db:b7:8e:02:a4:a2:14:2a:64:23:98:be:3c:be:47:35:3b: db:a1:4f:ed:de:2f:0b:07:b3:bb:64:29:bb:f2:e9:29:78:32: 9f:b8:b2:aa:e1:e8:36:f9:c9:e3:b7:55:34:ca:d0:8f:0c:b7: 09:97:46:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1PvW8mpMOXMTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ZhNjFiY2QtYjVjOC00NDliLTgwNzUtNzlhZTVkMjRl ZTBmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc5YWE5NzctZWI2Mi00MmEwLTkxM2QtMDJhNjA2ZmFiMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMF0Taey23TLVmM9ekL0qNRexqOoAmm6P+i4 tSWWWpeYkpODCGVnvUQbl3EdJ5i0uIgrCYVBJX7FdsbvQzHq3QpXO/f1aoTHnCer f0mR1jy5gq5KeotBwoecbm68pl6qhiS7iyfSIBf55MvCJMs5sW5M5s4XkQW+4TC5 g86DoJ5HSn+K3pmN8EJdmNbN5TX4qhKeD3+nG3Ga0l2aXBKtidwq2XyVn1rUt+gU yDPOaPgjD90MYHdX4zvNIdrmcOS6HXSav9YtiERfeWjbc8zyAyzb64KMKFsfRteD nQzlWjVSXZSOGbd5uJ2HrTb6cLCrTV1Fivy599FnQo4/5AZf+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIQbbChTrqviBFMOqjkOrDjhdxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83ZmE2 MWJjZC1iNWM4LTQ0OWItODA3NS03OWFlNWQyNGVlMGYvZjg0MzIxNDQtYjM0NS0z NDhkLWJkNjAtYmJjYWZlZWZlOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvN2ZhNjFiY2QtYjVjOC00NDliLTgw NzUtNzlhZTVkMjRlZTBmLzdmYTYxYmNkLWI1YzgtNDQ5Yi04MDc1LTc5YWU1ZDI0 ZWUwZi5jcmwwHwYDVR0jBBgwFoAU439v/U/HWGaYYUujqy1xnT2g1SkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83ZmE2MWJjZC1iNWM4LTQ0OWItODA3NS03OWFl NWQyNGVlMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHxXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb39AiPOwNvM111/tCc/l32oH6fNxU1Wp4hyMBr40fBmpl7sV1cghkb hSLgZI6hcqgFgoGNYEu2MCl36pYrp/fvl5WT19e+coXUncVXQzKQL7YydhndOGcA 5czy2t2Td9lIwr9cnT2z9/RfhoeAfENJ4zJnEjk59f2+G5s0UiFjVpcx93vM/u7t wmUx/C5e/2XsooZCetcV551ze0hwdMVeHj0XFNf79L9XvGBMX3W7wTIlivbQfgxR 5W0CGgzhmNNS1NY3v3zbt44CpKIUKmQjmL48vkc1O9uhT+3eLwsHs7tkKbvy6Sl4 Mp+4sqrh6Db5yeO3VTTK0I8MtwmXRm8= -----END CERTIFICATE-----Generated at Wed Oct 21 01:52:57 2026 by rpki-client