$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa File: 0f23b3b1-954d-3567-bd9a-85457745ed41.roa (raw, json) Hash identifier: hPMuJL2+e0QS2Z14kKX49axI6vXbXWdJB1IXyzLxy9w= Subject key identifier: EE:BA:69:50:12:A3:22:7B:99:25:09:E1:02:88:64:4E:89:FF:97:97 Certificate issuer: /CN=74a9f5cd-6394-4062-8085-0e1da1f04511 Certificate serial: 010D0C9F4328584F506D4DFE8AA949A21CE5B871 Authority key identifier: CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 398663 IP address blocks: 204.108.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4d:fe:8a:a9:49:a2:1c:e5:b8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9f5cd-6394-4062-8085-0e1da1f04511 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d19957d1-5053-46f1-98af-389e46ad26a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:75:f3:5f:39:dd:fb:6f:c2:fe:09:ed:91: 06:6f:44:57:ca:4f:57:71:40:c0:b0:b0:cf:76:43: 41:5f:59:da:a1:50:fe:ee:99:e4:df:ef:8d:ce:7e: 63:a3:31:47:cc:c4:a9:90:fa:7d:ad:75:3e:88:54: ed:a4:fc:f1:7d:2f:e1:33:f0:7b:f1:ef:b5:75:93: da:f6:6f:42:b2:47:06:ea:67:b1:23:f0:e1:c9:ba: 55:69:81:97:38:69:b4:0f:d1:cb:f5:12:0f:bc:7f: 47:00:8a:90:a0:c8:bc:f8:16:04:f1:18:0c:8d:89: 3f:51:a2:b4:66:f7:6c:c0:a1:89:aa:f9:58:aa:44: e1:7a:3f:7e:e2:50:fe:d5:6e:cf:29:bd:9f:5e:b1: f7:e9:13:39:e1:5f:f1:4b:cb:eb:dc:ff:33:4e:ef: 94:63:5a:5e:35:e4:12:ce:a9:42:e9:00:2d:be:40: d3:12:5d:08:3e:a3:6f:44:4b:0f:47:ab:0b:d3:1c: 59:fe:16:63:a9:69:b9:e4:aa:52:70:40:13:50:67: 64:f5:3e:cc:b7:4f:40:8e:e7:9b:50:fa:02:01:b8: be:02:6b:a7:12:4e:40:1a:3c:71:5a:31:5f:29:1f: 51:76:d8:89:fe:3f:2d:f2:f6:32:3e:0a:a3:36:fd: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BA:69:50:12:A3:22:7B:99:25:09:E1:02:88:64:4E:89:FF:97:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl X509v3 Authority Key Identifier: keyid:CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer sbgp-ipAddrBlock: critical IPv4: 204.108.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e6:94:72:73:77:6d:e9:8b:f6:21:d1:23:7b:7e:e8:e1:06: 29:7d:cf:83:89:cf:cd:1b:c1:47:e6:07:a4:94:0b:88:61:b3: 49:c5:a9:ae:1e:c4:ea:bf:3b:11:c9:72:4a:53:a6:d2:a9:70: 9a:0f:e2:b4:78:90:de:a4:cb:05:7f:38:3e:a9:26:11:39:d1: 96:4f:fa:20:e0:b1:9b:ab:81:24:af:8a:36:6d:18:34:6e:bd: ff:31:b1:9c:0b:00:4d:d2:d5:32:73:10:d2:21:f2:63:3c:9e: 64:51:33:e9:0b:7f:55:ce:78:4a:80:d0:af:64:67:fd:83:fe: f7:e8:5b:90:61:0a:87:79:7b:25:b6:ac:61:f0:d6:d3:8b:be: c3:f0:ea:22:1d:fa:f1:49:4b:1e:42:23:df:da:79:fe:8a:7f: 60:f3:6d:64:95:19:39:36:02:21:95:fb:f2:91:89:8b:ae:d2: af:03:56:19:47:35:33:5a:6c:a3:d2:ef:61:d2:b3:d0:4a:38: 64:d6:b0:2d:f1:a0:17:a8:17:5e:2b:2c:a2:64:c5:5d:e3:1b: 19:d1:c0:4d:08:fe:4b:9e:74:43:c1:32:a1:70:68:0e:fc:54: 68:01:e9:9d:1c:55:59:70:24:e4:cf:15:81:4e:d9:76:77:1f: 42:c4:41:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU3+iqlJohzluHEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWY1Y2QtNjM5NC00MDYyLTgwODUtMGUxZGExZjA0 NTExMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDE5OTU3ZDEtNTA1My00NmYxLTk4YWYtMzg5ZTQ2YWQyNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbV181853ftvwv4J7ZEGb0RXyk9XcUDAsLDP dkNBX1naoVD+7pnk3++Nzn5jozFHzMSpkPp9rXU+iFTtpPzxfS/hM/B78e+1dZPa 9m9CskcG6mexI/DhybpVaYGXOGm0D9HL9RIPvH9HAIqQoMi8+BYE8RgMjYk/UaK0 ZvdswKGJqvlYqkThej9+4lD+1W7PKb2fXrH36RM54V/xS8vr3P8zTu+UY1peNeQS zqlC6QAtvkDTEl0IPqNvREsPR6sL0xxZ/hZjqWm55KpScEATUGdk9T7Mt09Ajueb UPoCAbi+AmunEk5AGjxxWjFfKR9RdtiJ/j8t8vYyPgqjNv3QSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO66aVASoyJ7mSUJ4QKIZE6J/5eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83NGE5 ZjVjZC02Mzk0LTQwNjItODA4NS0wZTFkYTFmMDQ1MTEvMGYyM2IzYjEtOTU0ZC0z NTY3LWJkOWEtODU0NTc3NDVlZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzRhOWY1Y2QtNjM5NC00MDYyLTgw ODUtMGUxZGExZjA0NTExLzc0YTlmNWNkLTYzOTQtNDA2Mi04MDg1LTBlMWRhMWYw NDUxMS5jcmwwHwYDVR0jBBgwFoAUzc3HNTCwGkpD/V6Ej6DjaRT4b1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83NGE5ZjVjZC02Mzk0LTQwNjItODA4NS0wZTFk YTFmMDQ1MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXmlHJzd23pi/Yh0SN7fujhBil9z4OJz80bwUfmB6SUC4hhs0nFqa4e xOq/OxHJckpTptKpcJoP4rR4kN6kywV/OD6pJhE50ZZP+iDgsZurgSSvijZtGDRu vf8xsZwLAE3S1TJzENIh8mM8nmRRM+kLf1XOeEqA0K9kZ/2D/vfoW5BhCod5eyW2 rGHw1tOLvsPw6iId+vFJSx5CI9/aef6Kf2DzbWSVGTk2AiGV+/KRiYuu0q8DVhlH NTNabKPS72HSs9BKOGTWsC3xoBeoF14rLKJkxV3jGxnRwE0I/kuedEPBMqFwaA78 VGgB6Z0cVVlwJOTPFYFO2XZ3H0LEQWE= -----END CERTIFICATE-----Generated at Mon Oct 12 07:15:21 2026 by rpki-client