$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa File: 2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa (raw, json) Hash identifier: /pI3C7U4RS6ArSyHKQB4EaH0qpooFfHqhVUrBC/wyj0= Subject key identifier: 34:97:3C:E2:D8:C2:AC:74:EA:A1:02:91:82:55:D0:97:47:8F:DB:86 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584FA85DF4B9E80DD2FC6CEA10E0 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 62467 IP address blocks: 204.197.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:f4:b9:e8:0d:d2:fc:6c:ea:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=e8942475-a35b-4953-ab4d-922121acdfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:0d:51:df:60:4b:ad:1b:8e:66:fa:61:0b: 50:50:00:de:78:74:3b:ac:4b:80:c6:88:d2:a1:d0: cc:24:17:56:79:8f:b3:c9:ec:9e:18:b1:77:13:90: 8e:93:84:9b:f6:74:eb:80:5c:ee:47:3f:02:d9:8e: 39:56:2e:fa:2e:ee:c7:19:f8:8b:51:47:fb:32:09: d9:a5:f6:d6:7d:d0:74:63:e1:8a:cd:13:5e:03:ac: 24:48:32:9a:5d:49:f6:d2:4a:de:bd:54:fa:05:b2: 00:04:dc:c9:f4:71:1f:d3:a5:0b:fb:b4:d6:47:f6: bc:cf:7b:cb:97:f8:77:57:bc:36:c4:fd:75:04:db: 86:ea:c4:27:42:b1:25:4a:6e:54:83:50:7d:13:96: 09:d4:4a:aa:d6:a0:02:1f:ee:4a:07:61:b8:63:3b: 96:a2:3f:d1:19:5d:72:fa:5a:da:92:b5:af:eb:aa: ac:67:aa:72:1c:84:76:5d:97:a6:48:37:ef:40:b6: e5:c4:6e:4a:e3:56:08:07:1f:01:c0:04:aa:f4:e9: 70:bd:cd:84:e4:84:08:1d:e1:f0:62:59:98:57:67: b3:00:69:33:23:f4:e1:87:0d:c2:ba:69:71:c2:93: 21:16:92:3d:63:e1:6e:2a:73:ca:35:45:36:fa:3a: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:97:3C:E2:D8:C2:AC:74:EA:A1:02:91:82:55:D0:97:47:8F:DB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/2f39b9df-a572-3b0b-a30f-6b7e5fceea9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:17:76:f5:6a:03:55:2d:f6:2d:ef:f8:f8:e6:b7:7e:01:34: 89:6d:11:48:7a:5a:3a:eb:aa:7d:23:a3:47:ac:3d:cf:ac:22: 85:5a:49:2b:bf:8e:9f:5a:24:a2:b1:5d:22:72:ae:a3:37:5e: c8:8c:1b:d2:e5:70:a2:6f:94:d3:25:70:03:b4:83:14:65:a3: fb:3a:31:f3:35:90:b4:60:af:7b:12:ca:0c:9f:c6:d9:1f:be: e4:4c:f0:16:89:9d:8e:0a:b3:25:04:59:20:7e:83:0f:f8:a6: 0d:e0:a7:a6:6b:09:e4:b5:7e:cd:59:97:d9:83:a0:d6:e8:d3: ee:45:81:ae:a8:bc:d8:4a:52:40:3e:a5:1a:41:d3:cc:23:88: 33:c0:69:92:4d:9c:15:ba:46:62:1c:06:6f:cb:76:ad:7e:2b: fe:68:6e:76:58:8b:33:b7:bc:05:57:9b:18:fd:e1:98:d5:e1: 55:3d:0e:81:34:c1:a0:ab:e5:b6:36:b9:b8:6e:71:08:e5:8d: 41:63:13:40:95:9b:e1:79:1b:5c:02:72:87:f9:f5:de:ac:84: b9:bf:bb:56:c3:67:a4:ed:05:e8:e7:2a:0e:db:f1:2d:8f:77: ed:e3:b2:cd:77:11:29:f4:1b:a3:59:f8:bc:1d:d7:7d:65:9b: 9f:b9:66:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXfS56A3S/GzqEOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTg5NDI0NzUtYTM1Yi00OTUzLWFiNGQtOTIyMTIxYWNkZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj88NUd9gS60bjmb6YQtQUADeeHQ7rEuAxojS odDMJBdWeY+zyeyeGLF3E5COk4Sb9nTrgFzuRz8C2Y45Vi76Lu7HGfiLUUf7MgnZ pfbWfdB0Y+GKzRNeA6wkSDKaXUn20krevVT6BbIABNzJ9HEf06UL+7TWR/a8z3vL l/h3V7w2xP11BNuG6sQnQrElSm5Ug1B9E5YJ1Eqq1qACH+5KB2G4YzuWoj/RGV1y +lrakrWv66qsZ6pyHIR2XZemSDfvQLblxG5K41YIBx8BwASq9Olwvc2E5IQIHeHw YlmYV2ezAGkzI/Thhw3CumlxwpMhFpI9Y+FuKnPKNUU2+joRiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSXPOLYwqx06qECkYJV0JdHj9uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMmYzOWI5ZGYtYTU3Mi0z YjBiLWEzMGYtNmI3ZTVmY2VlYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4XdvVqA1Ut9i3v+Pjmt34BNIltEUh6Wjrrqn0jo0esPc+sIoVaSSu/ jp9aJKKxXSJyrqM3XsiMG9LlcKJvlNMlcAO0gxRlo/s6MfM1kLRgr3sSygyfxtkf vuRM8BaJnY4KsyUEWSB+gw/4pg3gp6ZrCeS1fs1Zl9mDoNbo0+5Fga6ovNhKUkA+ pRpB08wjiDPAaZJNnBW6RmIcBm/Ldq1+K/5obnZYizO3vAVXmxj94ZjV4VU9DoE0 waCr5bY2ubhucQjljUFjE0CVm+F5G1wCcof59d6shLm/u1bDZ6TtBejnKg7b8S2P d+3jss13ESn0G6NZ+Lwd131lm5+5ZlY= -----END CERTIFICATE-----Generated at Sun Nov 1 19:54:59 2026 by rpki-client