$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa File: cd834625-5e03-3003-a219-1f2ecf641d36.roa (raw, json) Hash identifier: Q4gbR0fPbQu1DltO8DG2ewmgU5vylkF4sy5M/F2bFHw= Subject key identifier: 16:DB:DA:44:F6:D4:96:D1:EF:10:25:82:B0:F6:27:5B:4A:25:32:40 Certificate issuer: /CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Certificate serial: 010D0C9F4328584F067231C88C99F10CD8DBCEB0 Authority key identifier: F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 204.10.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:31:c8:8c:99:f1:0c:d8:db:ce:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=7beb4605-5f39-46ae-8614-99c37bd3d16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:26:05:0b:62:e0:2f:43:de:07:44:f7:32: 6c:79:97:bf:97:f0:81:1b:e0:d4:1e:50:1c:b8:a5: af:a2:f9:43:6c:45:42:e0:c2:e3:8e:76:91:72:79: 46:ca:34:d5:32:2a:ce:a6:f9:5a:17:8f:71:93:5f: 17:80:36:e8:44:81:e2:2c:a3:6e:85:f3:e4:3d:e8: a7:61:42:77:f1:01:7f:94:b5:07:8a:0a:b1:d2:7f: ba:37:49:00:7e:d9:ae:c4:65:d5:f7:ea:e3:17:7b: b8:8b:03:6e:58:d8:e4:1d:0e:84:9f:02:4f:48:ef: 08:89:3d:35:88:9d:b3:06:0f:55:c0:56:b6:72:59: 8c:6d:8c:60:89:cb:c0:4b:48:6a:57:4d:74:db:f4: 82:25:c4:7d:7c:72:7e:35:8a:67:19:5f:d9:b9:01: 99:d7:20:29:3d:33:6c:78:97:74:14:b9:83:67:f2: ba:09:21:da:a6:a8:b9:5d:e4:33:84:fc:bb:23:76: 89:f4:7d:16:02:e2:38:58:57:24:92:b5:6d:70:5a: ec:11:3c:6c:c9:e7:b3:ef:79:2c:25:e8:26:d9:c6: f5:4f:ce:63:f4:a9:ae:3a:08:fc:ea:3d:42:e4:a7: c8:0e:0e:a3:46:64:45:eb:53:f6:7b:64:52:da:c3: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DB:DA:44:F6:D4:96:D1:EF:10:25:82:B0:F6:27:5B:4A:25:32:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl X509v3 Authority Key Identifier: keyid:F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer sbgp-ipAddrBlock: critical IPv4: 204.10.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e2:5a:6c:8d:63:48:66:b0:56:be:ae:68:f8:d9:bf:b2:c8: 54:32:cd:3b:43:7b:3a:fc:8f:a3:d9:bd:b1:a5:1a:13:89:03: 3d:b6:31:21:d8:f3:5c:00:63:fa:68:8d:cf:b6:19:f1:28:4a: b5:e9:d3:32:20:fd:c6:60:ce:2b:03:fb:1a:6f:1d:3d:61:23: e9:cf:88:13:54:ff:93:3e:3d:0c:07:76:06:d3:61:46:2d:1e: e3:bd:0b:dd:9d:88:f0:e3:eb:71:9c:04:99:b4:96:1e:17:e1: 86:d5:5b:de:62:51:1d:b2:e6:38:ac:19:f3:85:34:02:c3:c7: ca:2f:7c:bc:d8:e1:21:c8:db:18:07:b7:3d:85:b2:21:23:d5: ad:21:1d:8d:7e:15:70:43:68:5b:ac:bd:44:f6:8b:20:19:04: 9e:8b:0b:63:d2:2e:6f:ee:cb:c4:01:e8:6c:e3:1c:32:96:96: c1:d4:28:e8:cb:2d:24:7e:1d:4e:4e:56:36:ba:b2:ef:60:51: 1b:92:2f:56:5d:69:1a:6d:59:9a:cf:9f:6b:5a:b7:b3:42:4c: 6f:77:d0:84:5e:22:61:86:63:e2:de:57:27:81:fe:5d:c7:7e: 06:6d:d7:e3:79:76:8e:24:b1:fa:cd:0b:d5:0c:37:b7:b9:96: bd:80:88:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjHIjJnxDNjbzrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YTE2YWQtOTY5Ny00ZDk1LWEwNGMtODYzOTRmN2I3 OGM4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk N2JlYjQ2MDUtNWYzOS00NmFlLTg2MTQtOTljMzdiZDNkMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSgmBQti4C9D3gdE9zJseZe/l/CBG+DUHlAc uKWvovlDbEVC4MLjjnaRcnlGyjTVMirOpvlaF49xk18XgDboRIHiLKNuhfPkPein YUJ38QF/lLUHigqx0n+6N0kAftmuxGXV9+rjF3u4iwNuWNjkHQ6EnwJPSO8IiT01 iJ2zBg9VwFa2clmMbYxgicvAS0hqV0102/SCJcR9fHJ+NYpnGV/ZuQGZ1yApPTNs eJd0FLmDZ/K6CSHapqi5XeQzhPy7I3aJ9H0WAuI4WFckkrVtcFrsETxsyeez73ks Jegm2cb1T85j9KmuOgj86j1C5KfIDg6jRmRF61P2e2RS2sO8SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbb2kT21JbR7xAlgrD2J1tKJTJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZh MTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5NGY3Yjc4YzgvY2Q4MzQ2MjUtNWUwMy0z MDAzLWEyMTktMWYyZWNmNjQxZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGE2YTE2YWQtOTY5Ny00ZDk1LWEw NGMtODYzOTRmN2I3OGM4L2RhNmExNmFkLTk2OTctNGQ5NS1hMDRjLTg2Mzk0Zjdi NzhjOC5jcmwwHwYDVR0jBBgwFoAU9GfqmmCwnE5urS68W5wIlLqmBFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZhMTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5 NGY3Yjc4YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFviWmyNY0hmsFa+rmj42b+yyFQyzTtDezr8j6PZvbGlGhOJAz22MSHY 81wAY/pojc+2GfEoSrXp0zIg/cZgzisD+xpvHT1hI+nPiBNU/5M+PQwHdgbTYUYt HuO9C92diPDj63GcBJm0lh4X4YbVW95iUR2y5jisGfOFNALDx8ovfLzY4SHI2xgH tz2FsiEj1a0hHY1+FXBDaFusvUT2iyAZBJ6LC2PSLm/uy8QB6GzjHDKWlsHUKOjL LSR+HU5OVja6su9gURuSL1ZdaRptWZrPn2tat7NCTG930IReImGGY+LeVyeB/l3H fgZt1+N5do4ksfrNC9UMN7e5lr2AiCU= -----END CERTIFICATE-----Generated at Tue Sep 29 13:55:51 2026 by rpki-client