$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa File: 11274dc3-d729-310f-a5b6-e526a7179fc6.roa (raw, json) Hash identifier: Xq9M7bZsQT3+3zCVgzmhXRNN2QMRZ8AaXyVkdE6cGFU= Subject key identifier: DB:31:A8:40:33:8A:DE:2B:41:28:E4:42:67:6E:BE:96:2C:1D:A5:7A Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584F4F08116150C76F1D3789E5A0 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 22218 IP address blocks: 204.8.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:11:61:50:c7:6f:1d:37:89:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=e94d7ddc-9a62-4bec-9410-da8c81c8b544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:6d:df:ae:5d:f8:20:c2:d8:17:f1:cb:b4: f3:25:e9:29:ce:91:ea:5f:ff:92:ba:5b:d6:e1:68: 60:b5:57:f7:70:47:87:e4:51:6c:30:6b:25:b0:53: 68:73:4a:df:6f:d1:38:a8:0c:4a:b7:35:94:4a:bc: 66:a8:b8:e8:6d:10:7b:ef:f6:e5:ca:75:9c:bd:22: 54:b8:ef:42:94:ca:8b:12:1b:30:ca:84:e7:04:1a: 8c:18:d1:1d:ef:7f:ea:14:02:c8:d0:7a:50:0e:b4: 20:ee:f8:4c:f5:a6:4f:4d:f7:5b:64:dc:1f:de:88: de:f1:bd:21:d7:5d:e9:1f:a8:83:48:ed:f8:72:b4: 8b:11:9f:2c:08:e6:5b:3b:02:cb:b6:33:fc:27:eb: 9c:e1:5a:0a:6c:03:49:ad:52:80:83:39:ec:00:1f: b3:70:7d:80:9c:d1:d5:4d:db:9c:7c:8a:c1:5b:a6: 09:4c:b7:d1:ca:dc:40:e8:43:8f:1a:15:bd:25:59: e9:76:5b:ce:8d:c8:86:cc:c3:eb:ea:9e:6a:7f:a4: 09:db:06:94:25:50:bb:86:d1:89:b6:da:9d:77:39: 36:7f:dd:30:22:fc:b6:22:05:0c:73:72:a3:97:6d: bf:e2:0b:23:ba:8f:56:3f:05:b0:a2:55:f1:81:46: c1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:31:A8:40:33:8A:DE:2B:41:28:E4:42:67:6E:BE:96:2C:1D:A5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 204.8.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1b:0a:61:5b:6b:54:00:06:df:eb:b4:22:f8:72:7b:ce:e5: 56:31:37:9f:4a:0b:2f:c6:12:3c:ae:b6:21:e7:61:31:8a:51: 0b:a0:12:6c:0e:01:60:8c:79:2f:4b:15:21:d8:23:7b:6d:a3: 64:87:51:71:7b:4a:f4:9e:5a:61:41:81:83:85:e6:93:6f:2d: 27:72:cf:33:fc:50:62:fc:cf:da:57:44:f9:b8:85:7f:6f:b4: 0e:0e:b8:3a:41:1f:5c:ee:1e:49:65:8d:60:9e:e8:c0:b1:5f: b3:a6:91:31:df:10:9e:48:ca:fe:26:04:28:69:fa:bc:77:8c: 28:0a:69:b6:e9:be:5a:b2:a6:a5:90:62:06:af:c9:dc:77:e1: d3:b1:78:f6:22:70:45:62:4d:31:f4:2c:db:c3:92:1d:61:76: bd:a9:2c:13:66:4d:3e:cd:ac:cb:09:b7:f2:26:0e:c2:c0:ab: 36:8e:30:9f:31:24:76:fa:11:58:90:44:57:b8:fa:ca:61:aa: f7:05:31:91:be:de:a5:98:d5:eb:7c:7d:56:8e:07:7b:c2:e0: 28:2e:57:42:5e:76:a6:cf:cf:4a:0a:a1:3e:9f:df:a5:81:cc: 7a:6d:32:63:1a:92:01:24:09:22:25:5b:db:0b:ec:86:97:4e: 16:75:73:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBFhUMdvHTeJ5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZTk0ZDdkZGMtOWE2Mi00YmVjLTk0MTAtZGE4YzgxYzhiNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPVt365d+CDC2Bfxy7TzJekpzpHqX/+SulvW 4WhgtVf3cEeH5FFsMGslsFNoc0rfb9E4qAxKtzWUSrxmqLjobRB77/blynWcvSJU uO9ClMqLEhswyoTnBBqMGNEd73/qFALI0HpQDrQg7vhM9aZPTfdbZNwf3oje8b0h 113pH6iDSO34crSLEZ8sCOZbOwLLtjP8J+uc4VoKbANJrVKAgznsAB+zcH2AnNHV TducfIrBW6YJTLfRytxA6EOPGhW9JVnpdlvOjciGzMPr6p5qf6QJ2waUJVC7htGJ ttqddzk2f90wIvy2IgUMc3Kjl22/4gsjuo9WPwWwolXxgUbBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsxqEAzit4rQSjkQmduvpYsHaV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvMTEyNzRkYzMtZDcyOS0z MTBmLWE1YjYtZTUyNmE3MTc5ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsbCmFba1QABt/rtCL4cnvO5VYxN59KCy/GEjyutiHnYTGKUQugEmwO AWCMeS9LFSHYI3tto2SHUXF7SvSeWmFBgYOF5pNvLSdyzzP8UGL8z9pXRPm4hX9v tA4OuDpBH1zuHklljWCe6MCxX7OmkTHfEJ5Iyv4mBChp+rx3jCgKabbpvlqypqWQ Ygavydx34dOxePYicEViTTH0LNvDkh1hdr2pLBNmTT7NrMsJt/ImDsLAqzaOMJ8x JHb6EViQRFe4+sphqvcFMZG+3qWY1et8fVaOB3vC4CguV0JedqbPz0oKoT6f36WB zHptMmMakgEkCSIlW9sL7IaXThZ1cwE= -----END CERTIFICATE-----Generated at Thu Oct 8 00:55:53 2026 by rpki-client