$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/d8104967-21f9-32b2-a512-8ca018985eec.roa File: d8104967-21f9-32b2-a512-8ca018985eec.roa (raw, json) Hash identifier: Z+PW36wS73gUBER9CawlqJELvdZ5mxKOQAehCQ+zPV8= Subject key identifier: 5A:6D:41:0D:25:F8:EA:E1:38:E1:C3:FA:FA:DB:61:F4:2B:FD:62:4C Certificate issuer: /CN=dca0883a-8938-4c49-ac77-e43c73ab94d0 Certificate serial: 010D0C9F4328584F0ED22B123E3D2FB0E51C1220 Authority key identifier: 5B:88:F9:64:DE:A3:65:5E:01:C1:A2:EB:D7:1E:85:9D:2E:20:4A:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/d8104967-21f9-32b2-a512-8ca018985eec.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 402704 IP address blocks: 199.164.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/dca0883a-8938-4c49-ac77-e43c73ab94d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/dca0883a-8938-4c49-ac77-e43c73ab94d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2b:12:3e:3d:2f:b0:e5:1c:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca0883a-8938-4c49-ac77-e43c73ab94d0 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=958e6c34-cb34-4346-8007-2255d15e5df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:df:48:c0:15:a7:52:a7:06:9e:ba:eb:23:d0: 2e:f1:a3:2e:9c:6b:f2:e5:6e:57:53:7d:cc:bc:31: 4d:18:e4:7f:74:0a:60:24:0b:59:06:67:49:57:0d: 9a:38:1f:0a:f5:57:d7:f7:3a:aa:5f:86:d5:1c:f1: c3:8c:58:77:00:a8:6e:c9:50:f2:69:68:34:98:29: 70:96:86:14:39:52:bb:32:ce:e2:c0:ec:c7:53:6b: ed:cc:a1:ac:7e:5e:27:ea:59:07:8e:8d:56:b7:e1: 1c:a0:72:41:7c:19:86:30:1d:3e:72:96:b8:1e:fe: 16:e6:1a:d0:86:9c:9c:c7:dc:8d:06:b4:cd:18:cc: 9f:0f:5f:68:0b:90:17:62:5d:88:8c:05:f4:b0:93: 37:bf:69:94:5a:05:b7:85:7f:7a:6c:32:c0:e8:61: 53:1b:21:d4:ed:ae:d6:ee:b8:08:4a:44:fa:ea:b9: b9:22:05:ee:9e:51:7e:60:e1:e9:e5:9b:98:36:91: 02:98:dc:6c:f1:e7:be:56:7e:f6:cf:25:9e:87:b3: fc:4b:06:4f:e5:a5:1f:bd:f1:0c:df:11:8e:a3:34: 5f:f1:1a:03:09:98:4f:e5:34:af:69:f0:ad:d7:6e: 26:cf:23:78:6e:53:ab:57:27:be:30:a6:6b:2c:0e: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6D:41:0D:25:F8:EA:E1:38:E1:C3:FA:FA:DB:61:F4:2B:FD:62:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/d8104967-21f9-32b2-a512-8ca018985eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0/dca0883a-8938-4c49-ac77-e43c73ab94d0.crl X509v3 Authority Key Identifier: keyid:5B:88:F9:64:DE:A3:65:5E:01:C1:A2:EB:D7:1E:85:9D:2E:20:4A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dca0883a-8938-4c49-ac77-e43c73ab94d0.cer sbgp-ipAddrBlock: critical IPv4: 199.164.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:25:36:fb:73:e5:67:7b:ab:9c:40:b0:f3:7f:4b:25:72:54: ae:c7:16:74:9a:ee:2b:34:02:00:9f:e2:7c:38:a8:29:87:86: a7:04:e2:73:b0:b7:44:d9:65:61:d8:6e:b6:6f:58:5e:7c:4b: 31:c6:9d:c2:b2:3b:2c:ae:41:ed:89:05:fa:80:74:2f:64:d0: a8:2b:8e:7c:bc:d0:08:69:31:ed:97:4f:e4:05:83:7d:dc:89: 1b:1b:32:9e:5a:88:f6:0c:56:1b:90:e5:1f:5b:3d:9c:80:6f: 20:de:47:2e:9c:41:d8:9f:a8:74:f1:36:b7:73:10:fe:8a:57: a3:21:db:57:30:e0:15:bf:6c:86:5f:c9:79:31:e5:1f:7d:d7: 1d:62:8f:87:ba:64:c1:0c:17:62:07:1b:48:8d:c2:09:4c:ba: 4a:86:f0:fc:c3:21:84:2a:70:1f:e6:a9:be:39:e6:ba:c7:21: 3b:b6:80:0c:9d:65:8b:35:1f:52:0f:a7:64:6a:28:e3:09:2c: 2e:be:45:35:3f:3b:15:53:77:3f:7d:a1:24:61:e0:21:5f:6f: a2:f5:19:0c:cb:69:91:d8:07:81:f8:a7:76:72:17:61:9d:50: a9:c0:38:f1:3e:bc:40:80:5d:ff:ab:b2:c2:fd:9d:95:d7:8d: da:2d:17:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0isSPj0vsOUcEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNhMDg4M2EtODkzOC00YzQ5LWFjNzctZTQzYzczYWI5 NGQwMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk OTU4ZTZjMzQtY2IzNC00MzQ2LTgwMDctMjI1NWQxNWU1ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N9IwBWnUqcGnrrrI9Au8aMunGvy5W5XU33M vDFNGOR/dApgJAtZBmdJVw2aOB8K9VfX9zqqX4bVHPHDjFh3AKhuyVDyaWg0mClw loYUOVK7Ms7iwOzHU2vtzKGsfl4n6lkHjo1Wt+EcoHJBfBmGMB0+cpa4Hv4W5hrQ hpycx9yNBrTNGMyfD19oC5AXYl2IjAX0sJM3v2mUWgW3hX96bDLA6GFTGyHU7a7W 7rgISkT66rm5IgXunlF+YOHp5ZuYNpECmNxs8ee+Vn72zyWeh7P8SwZP5aUfvfEM 3xGOozRf8RoDCZhP5TSvafCt124mzyN4blOrVye+MKZrLA5ZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFptQQ0l+OrhOOHD+vrbYfQr/WJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kY2Ew ODgzYS04OTM4LTRjNDktYWM3Ny1lNDNjNzNhYjk0ZDAvZDgxMDQ5NjctMjFmOS0z MmIyLWE1MTItOGNhMDE4OTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGNhMDg4M2EtODkzOC00YzQ5LWFj NzctZTQzYzczYWI5NGQwL2RjYTA4ODNhLTg5MzgtNGM0OS1hYzc3LWU0M2M3M2Fi OTRkMC5jcmwwHwYDVR0jBBgwFoAUW4j5ZN6jZV4BwaLr1x6FnS4gSngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kY2EwODgzYS04OTM4LTRjNDktYWM3Ny1lNDNj NzNhYjk0ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6TMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIglNvtz5Wd7q5xAsPN/SyVyVK7HFnSa7is0AgCf4nw4qCmHhqcE4nOw t0TZZWHYbrZvWF58SzHGncKyOyyuQe2JBfqAdC9k0Kgrjny80AhpMe2XT+QFg33c iRsbMp5aiPYMVhuQ5R9bPZyAbyDeRy6cQdifqHTxNrdzEP6KV6Mh21cw4BW/bIZf yXkx5R991x1ij4e6ZMEMF2IHG0iNwglMukqG8PzDIYQqcB/mqb455rrHITu2gAyd ZYs1H1IPp2RqKOMJLC6+RTU/OxVTdz99oSRh4CFfb6L1GQzLaZHYB4H4p3ZyF2Gd UKnAOPE+vECAXf+rssL9nZXXjdotF5E= -----END CERTIFICATE-----Generated at Sat Sep 5 04:56:11 2026 by rpki-client