$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa File: 8a599c8a-6f69-352a-9eff-d9583500ded1.roa (raw, json) Hash identifier: G8xFZQmWvREE/qlkZwB9MvXhw9pGWmJ4vNO6HuEfklk= Subject key identifier: 5F:C7:47:FC:6F:D1:F2:8C:92:C0:A3:A6:88:CD:7D:77:9C:9E:41:5B Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584EAD1C563C889E8187E366D240 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 33322 IP address blocks: 204.10.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:56:3c:88:9e:81:87:e3:66:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=d294889f-b8dd-438d-b84b-6f0062f9e967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:6e:c1:b5:ee:08:e5:ee:bf:98:fb:72:ad: 0b:dd:61:eb:ed:3d:0a:3a:c5:ad:a6:2f:81:2c:68: 25:c0:f1:10:86:9a:2c:9f:48:5a:fd:ef:e9:6a:56: 9b:5a:37:70:54:88:e8:b9:77:e6:10:bd:7f:cb:3d: a9:f4:9e:d2:64:37:34:6f:d3:62:8c:80:4f:f7:73: 64:c6:8a:68:8a:00:4e:34:d7:30:2a:57:f4:52:51: 37:23:d4:b5:5b:e0:4c:b7:63:4f:42:73:9c:d2:ef: f4:ef:c0:01:cb:b8:9f:aa:ba:a7:6e:37:8e:aa:07: 2d:4e:5d:6d:da:44:11:f1:f6:2a:f5:74:62:4e:67: e3:fe:c5:03:7f:fa:29:6b:5a:22:f2:a8:6b:08:97: 1f:c3:45:27:91:a8:19:50:98:f3:e3:c9:7d:fd:84: dd:9e:21:2d:b2:a3:fa:fb:a6:94:3e:d4:0b:42:de: 0f:d0:00:4d:aa:fe:6a:47:b8:29:b6:6d:56:48:25: e8:b5:c7:a2:57:f9:27:ed:7f:ee:19:76:fb:18:f6: 60:ff:5f:ff:40:d6:ff:01:71:d0:37:90:12:7b:d6: f2:e3:0b:c5:74:bf:28:cc:1e:70:d3:5d:75:95:8b: a7:23:57:ec:e1:94:fc:9d:dd:81:f3:18:9c:0b:52: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C7:47:FC:6F:D1:F2:8C:92:C0:A3:A6:88:CD:7D:77:9C:9E:41:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.10.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ad:5b:21:d3:87:6b:42:7f:39:37:2f:7c:23:20:e3:fc:f6: 04:7c:75:c4:53:cd:47:78:cd:4a:32:f9:2a:c4:6d:b3:34:16: 87:81:06:a8:03:97:e6:d0:5e:35:62:51:4c:83:11:a7:29:ad: b9:2a:ea:ec:de:15:84:01:73:8a:e7:f5:6d:b2:c3:0a:55:c8: c4:a5:28:74:aa:d7:4b:f6:bf:9d:2b:0e:82:e2:2f:09:97:c4: 0f:74:5b:90:a2:44:51:d8:df:2e:b9:69:a0:0a:19:da:b0:b4: 01:5c:7f:94:95:40:f2:ba:21:b3:17:f7:54:41:f9:e5:9a:05: d7:70:78:92:80:f7:6d:88:a2:cd:08:6a:91:79:fe:74:73:95: d7:4b:7f:62:ae:cc:61:92:35:36:80:a2:9e:b8:a7:3c:d1:f8: 97:6f:8c:09:02:b2:c2:ef:f8:f6:4f:fa:1c:9c:9e:2a:d0:07: 23:a7:ae:1c:65:e5:d1:37:8a:ae:4e:1f:07:57:b3:d2:51:2c: 1e:1f:a8:03:41:0f:c6:98:70:aa:e2:71:8e:e6:8d:26:f5:15: c0:f3:c3:a0:89:c7:99:07:68:09:53:bd:d1:bc:75:df:41:ef: 6e:e7:f8:5c:b0:de:23:f2:d2:ac:05:e5:2d:63:90:cf:90:b0: c9:0a:90:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFY8iJ6Bh+Nm0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk ZDI5NDg4OWYtYjhkZC00MzhkLWI4NGItNmYwMDYyZjllOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg5uwbXuCOXuv5j7cq0L3WHr7T0KOsWtpi+B LGglwPEQhposn0ha/e/palabWjdwVIjouXfmEL1/yz2p9J7SZDc0b9NijIBP93Nk xopoigBONNcwKlf0UlE3I9S1W+BMt2NPQnOc0u/078ABy7ifqrqnbjeOqgctTl1t 2kQR8fYq9XRiTmfj/sUDf/opa1oi8qhrCJcfw0UnkagZUJjz48l9/YTdniEtsqP6 +6aUPtQLQt4P0ABNqv5qR7gptm1WSCXotceiV/kn7X/uGXb7GPZg/1//QNb/AXHQ N5ASe9by4wvFdL8ozB5w0111lYunI1fs4ZT8nd2B8xicC1I4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/HR/xv0fKMksCjpojNfXecnkFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOGE1OTljOGEtNmY2OS0z NTJhLTllZmYtZDk1ODM1MDBkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+tWyHTh2tCfzk3L3wjIOP89gR8dcRTzUd4zUoy+SrEbbM0FoeBBqgD l+bQXjViUUyDEacprbkq6uzeFYQBc4rn9W2ywwpVyMSlKHSq10v2v50rDoLiLwmX xA90W5CiRFHY3y65aaAKGdqwtAFcf5SVQPK6IbMX91RB+eWaBddweJKA922Ios0I apF5/nRzlddLf2KuzGGSNTaAop64pzzR+JdvjAkCssLv+PZP+hycnirQByOnrhxl 5dE3iq5OHwdXs9JRLB4fqANBD8aYcKricY7mjSb1FcDzw6CJx5kHaAlTvdG8dd9B 727n+Fyw3iPy0qwF5S1jkM+QsMkKkDY= -----END CERTIFICATE-----Generated at Wed Aug 26 10:37:46 2026 by rpki-client