$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa File: af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa (raw, json) Hash identifier: ixS1aoF7+U6ErpzIsVBauCU2ojUNSMxrDwV9RBl19Z8= Subject key identifier: 08:39:53:25:24:7D:F6:2F:A8:3D:44:B1:07:A1:65:E6:82:F0:54:D1 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584DD8F083F12788258568F7E2C0 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 395088 IP address blocks: 204.10.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:83:f1:27:88:25:85:68:f7:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=5446bc7f-9895-4881-a7ec-f283bdb71da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:60:a6:d4:0a:00:fd:e5:11:f8:5b:50:31: 3b:5d:38:eb:7e:ff:d1:a3:d0:24:fd:6e:38:43:af: ff:21:6f:59:23:9e:14:4c:37:8a:cb:77:e0:84:e4: 5b:5e:0c:9e:74:fc:58:ad:99:4a:7c:4a:34:2f:34: bd:6b:95:dd:c8:9a:dc:68:50:bb:1b:d1:a7:02:63: 8b:5c:05:2b:46:f1:b5:20:40:a0:da:4f:c3:0e:ba: 19:8e:78:c4:02:e3:19:52:7b:8e:02:94:dd:48:7a: 77:07:7e:84:b7:28:a8:13:ea:fa:4d:60:94:15:80: 6a:7b:19:a1:6e:58:5a:94:a1:ec:68:ea:50:40:a3: 96:d1:d5:67:5a:ad:af:00:ac:1a:e5:53:37:a2:2e: 0e:37:20:34:3e:0f:4e:77:c3:be:d0:f0:72:24:81: a5:70:9d:a1:8a:e6:ef:99:a6:e0:78:58:77:ee:09: 94:3b:0b:a8:94:1e:1d:17:a0:18:03:a5:03:6b:d3: 0f:6b:92:f7:35:77:55:4d:48:bf:4f:ce:48:d9:d7: d3:78:59:34:31:94:03:6b:ae:d1:c4:e8:b4:14:93: fb:d8:86:0d:38:ba:3a:3e:66:ea:c0:2e:5f:64:5e: 95:dc:05:d8:d1:5e:b5:b9:84:7a:fe:a5:90:7c:cc: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:53:25:24:7D:F6:2F:A8:3D:44:B1:07:A1:65:E6:82:F0:54:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 204.10.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7d:e9:04:4f:e5:b5:c6:ba:69:a6:3a:cb:38:2f:76:8b:03: 7f:31:1d:c6:a9:31:47:ef:94:4f:1f:a1:fc:30:66:14:90:d2: 63:79:5b:53:dc:de:cf:62:83:72:b2:19:8e:c8:5e:5d:8b:4b: a7:a0:22:16:e7:2f:6a:f1:27:0e:27:d1:ca:6b:8d:c9:1a:f7: df:65:c2:59:9d:3f:33:db:29:5f:3e:de:17:ba:6b:2b:b3:bc: ec:be:81:a0:5c:28:6a:f1:0b:b8:a7:fe:ee:9a:28:04:35:d4: 96:db:b7:53:1b:1a:40:ac:a0:32:c1:57:1a:b7:dd:18:a4:a4: 2b:a0:d1:0a:c7:1a:b8:1b:df:fc:da:03:de:34:74:47:c1:37: d9:3c:02:45:13:90:3b:6c:97:dd:50:18:2f:eb:cc:cb:2b:97: ba:51:33:33:df:02:32:40:4d:68:c2:0d:b5:36:b2:55:1f:9f: e5:ab:f1:5d:8b:0d:8d:c7:4e:e4:db:bb:a7:fd:42:90:e5:d6: ab:50:32:17:5f:5d:26:cd:b9:c8:25:9a:6a:a8:14:03:e4:61: 8b:43:9e:06:ab:62:27:63:e2:ec:8f:c5:57:0d:83:28:82:de: 26:0d:ef:74:c5:20:b4:dc:f1:b7:05:ed:60:67:dc:02:31:29: 63:5e:9c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8IPxJ4glhWj34sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk NTQ0NmJjN2YtOTg5NS00ODgxLWE3ZWMtZjI4M2JkYjcxZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjRgptQKAP3lEfhbUDE7XTjrfv/Ro9Ak/W44 Q6//IW9ZI54UTDeKy3fghORbXgyedPxYrZlKfEo0LzS9a5XdyJrcaFC7G9GnAmOL XAUrRvG1IECg2k/DDroZjnjEAuMZUnuOApTdSHp3B36EtyioE+r6TWCUFYBqexmh blhalKHsaOpQQKOW0dVnWq2vAKwa5VM3oi4ONyA0Pg9Od8O+0PByJIGlcJ2hiubv mabgeFh37gmUOwuolB4dF6AYA6UDa9MPa5L3NXdVTUi/T85I2dfTeFk0MZQDa67R xOi0FJP72IYNOLo6PmbqwC5fZF6V3AXY0V61uYR6/qWQfMxYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg5UyUkffYvqD1EsQehZeaC8FTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvYWYyYTYyZGYtOGM3Zi0z ODJhLWE2NmQtMmI3ZmRlYzQxYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzArMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ96QRP5bXGummmOss4L3aLA38xHcapMUfvlE8fofwwZhSQ0mN5W1Pc 3s9ig3KyGY7IXl2LS6egIhbnL2rxJw4n0cprjcka999lwlmdPzPbKV8+3he6ayuz vOy+gaBcKGrxC7in/u6aKAQ11Jbbt1MbGkCsoDLBVxq33RikpCug0QrHGrgb3/za A940dEfBN9k8AkUTkDtsl91QGC/rzMsrl7pRMzPfAjJATWjCDbU2slUfn+Wr8V2L DY3HTuTbu6f9QpDl1qtQMhdfXSbNucglmmqoFAPkYYtDngarYidj4uyPxVcNgyiC 3iYN73TFILTc8bcF7WBn3AIxKWNenJ0= -----END CERTIFICATE-----Generated at Fri May 29 19:18:00 2026 by rpki-client