$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa File: d532a486-29c6-3280-81e5-af871505b46c.roa (raw, json) Hash identifier: 3mnnzM6kTciFbHxkhSuJkUdZqhh2cykCmPJjKNcwBsw= Subject key identifier: B0:9A:63:2A:72:9B:86:3F:C7:7D:F0:26:61:76:B2:5B:F5:41:B4:55 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584DD8F08420D6F2FA862EEEBC14 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 30048 IP address blocks: 204.10.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 31 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:84:20:d6:f2:fa:86:2e:ee:bc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=a5be5a69-e5df-4f9a-a60b-38fefcca91ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:81:3a:66:91:1d:0d:1c:f3:cf:2c:de:2d:5d: e4:e6:66:65:cc:18:83:11:c5:18:f7:f4:1f:42:10: 4e:59:b2:8e:81:3f:45:99:96:4c:99:d1:74:d1:0a: ae:3b:ec:f1:2e:d5:6b:9c:44:25:83:3f:ff:13:88: 63:2b:a5:9c:72:59:67:db:55:4f:6d:92:b6:91:b1: df:89:0e:9e:a6:20:32:71:c2:a9:0f:78:eb:a4:f0: 1a:c2:3c:df:58:f9:34:83:ac:47:b9:9e:3f:2c:20: bc:6b:17:82:4d:36:88:c7:59:6c:a1:48:32:c7:5b: 40:f8:2f:62:f4:38:69:bf:b7:d2:a5:7f:4d:4e:3d: d1:55:d1:fe:cf:ae:32:47:bf:c7:0d:f4:83:02:dd: 27:24:24:76:b4:d7:85:68:0a:06:53:70:b6:30:c6: c4:ef:09:47:bf:04:f5:a7:2f:10:ce:39:2f:72:54: 8f:e3:ed:11:e0:af:2f:8f:27:93:aa:51:69:88:de: cd:30:fc:f3:2e:c0:1d:55:6b:6f:cb:bd:e3:d2:39: 42:9d:51:40:d9:ae:91:ca:82:4e:fb:6d:83:b2:4a: 57:ec:06:39:9f:da:e5:82:c1:81:8c:a3:3e:af:a2: 5f:79:b2:69:fc:3d:d4:30:2b:0a:63:87:54:de:8d: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9A:63:2A:72:9B:86:3F:C7:7D:F0:26:61:76:B2:5B:F5:41:B4:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 204.10.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d2:0f:ea:62:e9:3d:43:1a:f3:62:18:9a:59:cb:b5:41:6d: 78:83:8b:e5:b5:58:12:fc:c0:2b:aa:01:9a:35:85:14:fb:b4: 64:33:f8:5b:a4:16:3a:d5:26:99:c9:e6:32:b1:f2:7f:bc:70: 7a:7e:80:51:7c:5a:6e:86:da:63:c4:82:bd:ea:65:b0:0d:aa: 81:11:60:19:f9:ad:3a:ac:e2:b5:a3:a1:77:e8:70:f6:11:d1: 79:22:e4:0b:dc:6c:9e:d3:43:c7:50:66:f2:f7:b9:4b:b9:1c: 38:00:c4:ed:da:21:ed:6a:da:e3:ca:bb:61:52:93:1c:9d:c2: f2:67:6b:c2:e3:9a:23:01:cb:2e:27:dc:6c:43:e9:1b:18:f7: cf:1d:97:cf:19:fe:3d:a4:81:88:a4:8f:36:68:cf:3a:b2:3d: 46:7f:76:3c:c5:6a:93:3c:f0:a5:7d:9d:bb:c1:2e:c7:8a:0f: d8:4c:cd:3d:2b:93:ea:a7:89:2e:38:13:d6:46:ee:d9:87:cb: 89:c6:d5:b7:a5:42:f2:6d:a6:f6:b9:6e:68:db:95:68:5f:f1: 7a:19:62:cd:62:1c:de:1b:20:82:55:b0:c8:b0:9f:5c:96:a8: ea:b1:fb:7e:9e:0d:39:19:a2:73:eb:0f:8b:68:86:2b:df:a6: d4:8e:00:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8IQg1vL6hi7uvBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk YTViZTVhNjktZTVkZi00ZjlhLWE2MGItMzhmZWZjY2E5MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloE6ZpEdDRzzzyzeLV3k5mZlzBiDEcUY9/Qf QhBOWbKOgT9FmZZMmdF00QquO+zxLtVrnEQlgz//E4hjK6Wcclln21VPbZK2kbHf iQ6epiAyccKpD3jrpPAawjzfWPk0g6xHuZ4/LCC8axeCTTaIx1lsoUgyx1tA+C9i 9Dhpv7fSpX9NTj3RVdH+z64yR7/HDfSDAt0nJCR2tNeFaAoGU3C2MMbE7wlHvwT1 py8QzjkvclSP4+0R4K8vjyeTqlFpiN7NMPzzLsAdVWtvy73j0jlCnVFA2a6RyoJO +22DskpX7AY5n9rlgsGBjKM+r6JfebJp/D3UMCsKY4dU3o1/1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCaYypym4Y/x33wJmF2slv1QbRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZDUzMmE0ODYtMjljNi0z MjgwLTgxZTUtYWY4NzE1MDViNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzArPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfSD+pi6T1DGvNiGJpZy7VBbXiDi+W1WBL8wCuqAZo1hRT7tGQz+Fuk FjrVJpnJ5jKx8n+8cHp+gFF8Wm6G2mPEgr3qZbANqoERYBn5rTqs4rWjoXfocPYR 0Xki5AvcbJ7TQ8dQZvL3uUu5HDgAxO3aIe1q2uPKu2FSkxydwvJna8LjmiMByy4n 3GxD6RsY988dl88Z/j2kgYikjzZozzqyPUZ/djzFapM88KV9nbvBLseKD9hMzT0r k+qniS44E9ZG7tmHy4nG1belQvJtpva5bmjblWhf8XoZYs1iHN4bIIJVsMiwn1yW qOqx+36eDTkZonPrD4tohivfptSOAOw= -----END CERTIFICATE-----Generated at Fri May 29 19:19:44 2026 by rpki-client