$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/65387675-2ba0-3a3a-8261-6cb0a12ce124.roa File: 65387675-2ba0-3a3a-8261-6cb0a12ce124.roa (raw, json) Hash identifier: 8t72S4/3/kch5oLlYCsPepCl81Tafp3p0pkziQ1qVQg= Subject key identifier: 12:C3:4E:C8:7A:32:DE:2F:E3:F3:AC:2A:0C:79:78:3E:FA:A6:79:CA Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584FA2C310B5DC50C27C0A897780 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/65387675-2ba0-3a3a-8261-6cb0a12ce124.roa Signing time: Tue 27 Oct 2026 00:49:26 +0000 ROA not before: Tue 27 Oct 2026 00:49:26 +0000 ROA not after: Mon 25 Jan 2027 01:49:26 +0000 asID: 263771 IP address blocks: 204.199.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c3:10:b5:dc:50:c2:7c:0a:89:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Oct 27 00:49:26 2026 GMT Not After : Jan 25 01:49:26 2027 GMT Subject: CN=9c852c27-c016-4229-841b-06e1545e3ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:f0:69:fc:a9:69:fa:8a:28:68:83:44:69: 21:b2:f5:15:c3:d5:89:ce:81:78:2a:82:e7:af:a8: 07:0c:2b:31:f5:e1:4d:a0:0b:05:94:af:dd:02:8b: ba:b5:88:b5:ad:31:88:b0:8b:d1:85:b2:a5:f3:95: 56:3d:ca:ff:44:bc:ab:ac:a4:25:8a:78:22:5a:ac: 08:5e:74:9c:3d:3c:ad:ba:44:18:0d:0a:9f:67:73: e3:69:57:da:5f:33:86:e4:0b:cc:6e:e2:59:69:90: c9:4e:ae:bd:7b:65:c7:45:5f:7b:6f:14:a0:94:7f: 02:b3:53:28:7b:72:4b:28:e1:55:07:34:80:ba:9f: 5e:de:11:00:7c:16:49:73:87:48:9d:88:3a:cc:81: ee:db:7d:21:f5:22:6e:ce:4a:59:b9:f6:9f:7e:fb: e1:4c:27:79:20:09:4b:89:a4:88:f4:5c:4b:c0:c1: 59:78:07:75:fc:4b:dd:1f:bb:e1:a6:16:72:48:17: 90:a4:5b:67:f5:4f:98:6d:b4:ed:45:b5:11:16:5e: 7f:03:86:ae:05:a2:76:5b:3c:f4:b8:51:8b:a7:34: 8f:43:fc:64:32:ff:77:ab:8d:4d:32:11:b0:43:17: 52:4d:00:93:dc:53:a3:11:8a:82:0c:39:69:9d:31: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C3:4E:C8:7A:32:DE:2F:E3:F3:AC:2A:0C:79:78:3E:FA:A6:79:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/65387675-2ba0-3a3a-8261-6cb0a12ce124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 204.199.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ac:41:6a:8d:a3:0d:33:91:67:93:27:4c:42:6d:97:5a:12: a1:c7:d3:fd:49:ed:66:3b:ad:b4:3d:d1:c6:ff:02:08:6b:69: 11:87:86:6b:2e:b2:80:42:e5:0b:e9:c7:22:98:fb:0b:4a:aa: fc:43:1c:46:a4:2b:d1:69:bd:06:67:31:36:13:f8:8b:73:92: 6b:1c:c4:ea:a9:73:bd:1d:95:9f:4b:0d:80:47:95:6c:86:76: 74:a8:67:6e:c3:e6:41:90:8a:13:15:e4:ac:90:ff:e4:93:e0: 1c:18:bf:fc:e3:95:9d:4e:c9:7d:03:6a:06:77:17:e1:63:50: 63:08:7b:20:fa:1b:37:4c:ca:94:bb:6d:03:eb:0d:18:a3:6a: fb:12:11:32:31:c8:7e:c1:88:00:b9:fe:81:7b:6b:ad:ec:71: d5:36:d1:7a:b7:ee:c9:bf:78:02:3d:bb:ef:03:e8:8f:b0:55: f0:dd:ed:75:a5:bc:20:4e:7c:73:ee:b4:a8:2d:19:af:27:4c: 49:16:61:9b:a3:4a:c1:86:8c:e6:4a:d2:bb:6c:29:13:0d:6c: 73:48:28:ef:a7:9d:90:8c:0e:c1:6c:41:21:98:a1:67:0d:c7: 3e:53:29:b8:db:92:20:55:94:58:64:a7:a8:94:ea:3d:25:33: b8:cf:7f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iwxC13FDCfAqJd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI2MTAyNzAwNDkyNloXDTI3MDEyNTAxNDkyNlowLzEtMCsGA1UEAxMk OWM4NTJjMjctYzAxNi00MjI5LTg0MWItMDZlMTU0NWUzYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRzwafypafqKKGiDRGkhsvUVw9WJzoF4KoLn r6gHDCsx9eFNoAsFlK/dAou6tYi1rTGIsIvRhbKl85VWPcr/RLyrrKQlingiWqwI XnScPTytukQYDQqfZ3PjaVfaXzOG5AvMbuJZaZDJTq69e2XHRV97bxSglH8Cs1Mo e3JLKOFVBzSAup9e3hEAfBZJc4dInYg6zIHu230h9SJuzkpZufaffvvhTCd5IAlL iaSI9FxLwMFZeAd1/EvdH7vhphZySBeQpFtn9U+YbbTtRbURFl5/A4auBaJ2Wzz0 uFGLpzSPQ/xkMv93q41NMhGwQxdSTQCT3FOjEYqCDDlpnTH3zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLDTsh6Mt4v4/OsKgx5eD76pnnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvNjUzODc2NzUtMmJhMC0z YTNhLTgyNjEtNmNiMGExMmNlMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCsQWqNow0zkWeTJ0xCbZdaEqHH0/1J7WY7rbQ90cb/AghraRGHhmsu soBC5QvpxyKY+wtKqvxDHEakK9FpvQZnMTYT+ItzkmscxOqpc70dlZ9LDYBHlWyG dnSoZ27D5kGQihMV5KyQ/+ST4BwYv/zjlZ1OyX0DagZ3F+FjUGMIeyD6GzdMypS7 bQPrDRijavsSETIxyH7BiAC5/oF7a63scdU20Xq37sm/eAI9u+8D6I+wVfDd7XWl vCBOfHPutKgtGa8nTEkWYZujSsGGjOZK0rtsKRMNbHNIKO+nnZCMDsFsQSGYoWcN xz5TKbjbkiBVlFhkp6iU6j0lM7jPf5o= -----END CERTIFICATE-----Generated at Sat Oct 31 15:37:55 2026 by rpki-client