$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9/cd0990d4-e02d-3df5-833a-a5689827898e.roa File: cd0990d4-e02d-3df5-833a-a5689827898e.roa (raw, json) Hash identifier: mXApQnzNVNWx1TABzPWkUBAzMRJKbVqqKFqycNNAY3I= Subject key identifier: 18:82:A0:32:1A:8B:03:35:82:01:5F:98:4C:4F:FE:AF:21:F9:B7:40 Certificate issuer: /CN=ad930472-6e6c-42c7-985e-6e36ee4661d9 Certificate serial: 010D0C9F4328584F761D7C3F4753369F8C8E0280 Authority key identifier: 10:9E:9C:01:9C:A9:90:D2:94:C6:46:EF:3C:C3:E8:B5:1D:8F:CE:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9/cd0990d4-e02d-3df5-833a-a5689827898e.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 29892 IP address blocks: 205.153.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9/ad930472-6e6c-42c7-985e-6e36ee4661d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9/ad930472-6e6c-42c7-985e-6e36ee4661d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7c:3f:47:53:36:9f:8c:8e:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad930472-6e6c-42c7-985e-6e36ee4661d9 Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=f8ee8ac1-7414-4127-bbf8-3da7684fa8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:22:af:69:83:a8:9b:52:0e:98:56:b9:de: f3:06:cd:43:b9:65:8a:82:7e:92:46:d0:f2:31:7c: 7d:12:79:f5:b8:4a:7c:c9:0e:8c:31:fe:ac:e3:1e: 5c:37:b2:8d:c9:68:8a:e9:bd:76:19:f6:8b:d8:32: d9:5c:46:55:ab:78:d3:82:de:c9:c7:21:b3:8d:5e: 03:68:b5:1e:3a:79:f4:cb:bc:8b:5e:88:d8:c0:14: 8d:9d:c2:f6:7a:91:5b:32:87:d7:20:49:94:a1:f7: b2:81:62:98:9e:38:49:ce:aa:2f:90:ce:40:b5:65: be:d0:97:e1:d5:1a:e8:27:2b:2d:59:98:9c:f4:f1: 46:d5:a8:22:a4:b5:d0:22:1c:7f:88:8b:89:83:bb: 67:96:74:d7:bb:3f:84:4b:ce:7f:55:7f:1f:05:bc: 4c:4e:fc:31:78:e8:d6:36:13:81:ba:7d:e2:d0:3c: 19:f1:e4:ea:58:c4:94:f7:0d:66:00:4d:81:68:21: be:63:9c:d1:cf:57:86:b4:f7:25:92:a5:21:c3:8a: c8:4a:1a:a7:40:4b:7f:88:84:01:bc:3d:9b:32:33: aa:e3:d6:22:6a:e0:96:67:27:03:87:b1:e1:69:67: 2d:39:7e:80:f6:87:27:87:54:a7:58:85:7e:90:d5: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:82:A0:32:1A:8B:03:35:82:01:5F:98:4C:4F:FE:AF:21:F9:B7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9/cd0990d4-e02d-3df5-833a-a5689827898e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9/ad930472-6e6c-42c7-985e-6e36ee4661d9.crl X509v3 Authority Key Identifier: keyid:10:9E:9C:01:9C:A9:90:D2:94:C6:46:EF:3C:C3:E8:B5:1D:8F:CE:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ad930472-6e6c-42c7-985e-6e36ee4661d9.cer sbgp-ipAddrBlock: critical IPv4: 205.153.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d4:87:7c:27:bd:72:9e:bf:a7:c5:a2:b8:a2:53:d8:ad:ef: d6:0f:f0:11:1f:a7:4e:35:d1:ed:23:77:ca:66:1f:f9:e5:bb: 61:83:8c:78:2b:a2:be:ef:aa:40:29:6e:bc:db:2f:db:42:82: 64:a0:3f:f5:73:6c:fe:af:fd:da:87:7e:96:5e:7d:92:a3:5d: c7:cb:ee:b1:31:4e:be:b1:a5:29:83:54:ac:57:aa:79:79:f2: 72:51:95:4c:a5:33:e2:2e:8b:06:5d:2c:d6:5f:df:6e:31:2a: 27:84:ca:c0:04:63:8b:ca:f4:e6:25:8f:a3:9d:54:56:4b:ff: d3:b6:47:82:80:9f:75:11:4c:0f:60:67:68:93:bc:94:fa:70: bc:65:de:06:e2:2e:c4:e6:68:87:f5:c2:1b:51:f6:4a:ab:62: bb:bc:31:02:a5:df:70:32:b9:31:a4:ae:a5:c5:79:fb:fa:91: 2b:ba:05:28:13:52:4e:e4:e5:33:27:e2:54:e9:f1:fc:e3:b6: 6e:b1:7f:84:54:93:cb:e5:a5:ab:26:fd:cf:55:44:f8:35:a0: 80:43:ec:5b:b6:13:89:48:5a:28:16:72:66:f1:9e:8c:ab:05: cf:d9:43:06:fe:29:44:2a:ba:d6:0c:7f:20:a0:23:5b:b1:da: 43:83:d8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE92HXw/R1M2n4yOAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ5MzA0NzItNmU2Yy00MmM3LTk4NWUtNmUzNmVlNDY2 MWQ5MB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk ZjhlZThhYzEtNzQxNC00MTI3LWJiZjgtM2RhNzY4NGZhOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZkir2mDqJtSDphWud7zBs1DuWWKgn6SRtDy MXx9Enn1uEp8yQ6MMf6s4x5cN7KNyWiK6b12GfaL2DLZXEZVq3jTgt7JxyGzjV4D aLUeOnn0y7yLXojYwBSNncL2epFbMofXIEmUofeygWKYnjhJzqovkM5AtWW+0Jfh 1RroJystWZic9PFG1agipLXQIhx/iIuJg7tnlnTXuz+ES85/VX8fBbxMTvwxeOjW NhOBun3i0DwZ8eTqWMSU9w1mAE2BaCG+Y5zRz1eGtPclkqUhw4rIShqnQEt/iIQB vD2bMjOq49YiauCWZycDh7HhaWctOX6A9ocnh1SnWIV+kNVMgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiCoDIaiwM1ggFfmExP/q8h+bdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZDkz MDQ3Mi02ZTZjLTQyYzctOTg1ZS02ZTM2ZWU0NjYxZDkvY2QwOTkwZDQtZTAyZC0z ZGY1LTgzM2EtYTU2ODk4Mjc4OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYWQ5MzA0NzItNmU2Yy00MmM3LTk4 NWUtNmUzNmVlNDY2MWQ5L2FkOTMwNDcyLTZlNmMtNDJjNy05ODVlLTZlMzZlZTQ2 NjFkOS5jcmwwHwYDVR0jBBgwFoAUEJ6cAZypkNKUxkbvPMPotR2PzpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZDkzMDQ3Mi02ZTZjLTQyYzctOTg1ZS02ZTM2 ZWU0NjYxZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADUh3wnvXKev6fForiiU9it79YP8BEfp0410e0jd8pmH/nlu2GDjHgr or7vqkApbrzbL9tCgmSgP/VzbP6v/dqHfpZefZKjXcfL7rExTr6xpSmDVKxXqnl5 8nJRlUylM+IuiwZdLNZf324xKieEysAEY4vK9OYlj6OdVFZL/9O2R4KAn3URTA9g Z2iTvJT6cLxl3gbiLsTmaIf1whtR9kqrYru8MQKl33AyuTGkrqXFefv6kSu6BSgT Uk7k5TMn4lTp8fzjtm6xf4RUk8vlpasm/c9VRPg1oIBD7Fu2E4lIWigWcmbxnoyr Bc/ZQwb+KUQqutYMfyCgI1ux2kOD2Io= -----END CERTIFICATE-----Generated at Sun Oct 11 22:28:44 2026 by rpki-client