$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa File: f73b5053-f5db-33cf-aecf-f99a7cff535a.roa (raw, json) Hash identifier: 5DuGt8TEAgn6IzPQd7zIJfxtvg9w+W4w+NIZc5taBDU= Subject key identifier: 3A:11:10:3E:0F:B0:A2:79:1C:36:68:8D:5B:0C:18:5C:23:1B:B0:3A Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584F497754CAB8D005F454A45470 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36290 IP address blocks: 204.16.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:54:ca:b8:d0:05:f4:54:a4:54:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0927650d-885d-43e9-854e-9b79469a7975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:84:65:da:95:0e:76:b3:53:88:7b:70:6b: ef:91:a6:7d:d1:c2:8e:c1:b8:90:42:b2:b6:70:04: c2:2f:82:fd:60:05:83:3f:a3:2a:8c:f3:a3:2b:ec: 01:a6:d7:6b:aa:d1:b1:f6:c3:18:b7:1f:57:79:65: bb:db:51:fd:7f:ec:b8:d4:e5:80:dc:8a:e9:f1:0f: 14:a0:76:ef:fd:32:f2:42:29:3f:70:c9:5c:82:3f: 75:50:5e:b2:b0:9a:bc:4c:21:d5:1a:58:39:09:0c: da:78:62:9e:60:5f:2b:41:3d:72:e7:5f:b7:2b:63: 29:e3:48:e3:b4:5d:ef:18:88:fa:ae:98:2f:84:62: 7d:c5:99:dc:01:74:99:b3:95:a8:8d:d2:98:be:53: 3e:9f:e9:01:c0:61:48:7c:1a:bc:f9:cd:6a:c8:60: bd:c4:4f:46:39:60:88:7c:08:01:67:f4:64:ee:1c: 32:d2:47:df:ec:bd:94:c7:77:cb:e9:b5:48:a6:a8: e7:03:e9:17:1d:53:f8:d2:2c:94:d6:26:a4:7e:82: 56:38:17:c3:71:cc:96:97:9d:47:d7:65:62:61:3b: 6a:00:7e:67:78:e5:df:30:b2:50:a5:a2:6e:44:d4: 1b:d4:76:6c:3c:3c:4c:f1:5c:56:6f:e3:de:e3:3e: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:11:10:3E:0F:B0:A2:79:1C:36:68:8D:5B:0C:18:5C:23:1B:B0:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.16.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e9:fa:d2:39:74:12:cc:b8:1d:20:63:08:29:18:88:ec:a2: e2:16:be:ec:fa:23:bd:50:35:c0:92:79:71:9a:84:e4:86:86: 72:0c:1a:03:43:5a:22:aa:ab:56:7e:ca:e3:6d:07:5b:56:76: 20:2e:f8:17:8f:94:41:80:55:9b:a2:59:19:55:12:c8:70:c6: 04:a9:d7:dc:0c:85:fe:be:6a:7d:2d:4c:d8:69:56:05:f1:0a: 34:82:71:2a:c2:29:00:88:59:d5:ee:53:80:af:10:26:23:8b: 37:9b:54:1b:7b:c6:d4:fb:68:8a:c1:26:b4:55:92:4c:ca:01: b4:f5:50:8f:68:74:3b:eb:c0:d8:d4:ed:ed:c9:e3:f3:fa:29: ce:cd:86:90:05:fd:50:a8:4d:fe:4b:c0:4c:22:05:52:c1:b3: 3b:9f:9b:64:37:78:58:1c:53:80:c2:b2:7a:a5:c6:07:5b:74: 81:85:1c:41:5e:1e:58:52:23:3f:e0:3a:c5:56:36:ff:b8:7f: 4b:3c:5e:21:c6:d6:3c:b6:5f:ec:86:2c:f6:37:71:b6:1a:73: b8:ab:80:2c:f5:bb:a5:f0:e2:0e:00:dc:aa:6a:e3:84:d8:63: db:05:5e:ec:a7:3a:d5:41:b8:2d:08:5e:98:02:22:e4:76:32: 31:f6:35:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1TKuNAF9FSkVHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDkyNzY1MGQtODg1ZC00M2U5LTg1NGUtOWI3OTQ2OWE3OTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CmEZdqVDnazU4h7cGvvkaZ90cKOwbiQQrK2 cATCL4L9YAWDP6MqjPOjK+wBptdrqtGx9sMYtx9XeWW721H9f+y41OWA3Irp8Q8U oHbv/TLyQik/cMlcgj91UF6ysJq8TCHVGlg5CQzaeGKeYF8rQT1y51+3K2Mp40jj tF3vGIj6rpgvhGJ9xZncAXSZs5WojdKYvlM+n+kBwGFIfBq8+c1qyGC9xE9GOWCI fAgBZ/Rk7hwy0kff7L2Ux3fL6bVIpqjnA+kXHVP40iyU1iakfoJWOBfDccyWl51H 12ViYTtqAH5neOXfMLJQpaJuRNQb1HZsPDxM8VxWb+Pe4z780QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoRED4PsKJ5HDZojVsMGFwjG7A6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvZjczYjUwNTMtZjVkYi0z M2NmLWFlY2YtZjk5YTdjZmY1MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzp+tI5dBLMuB0gYwgpGIjsouIWvuz6I71QNcCSeXGahOSGhnIMGgND WiKqq1Z+yuNtB1tWdiAu+BePlEGAVZuiWRlVEshwxgSp19wMhf6+an0tTNhpVgXx CjSCcSrCKQCIWdXuU4CvECYjizebVBt7xtT7aIrBJrRVkkzKAbT1UI9odDvrwNjU 7e3J4/P6Kc7NhpAF/VCoTf5LwEwiBVLBszufm2Q3eFgcU4DCsnqlxgdbdIGFHEFe HlhSIz/gOsVWNv+4f0s8XiHG1jy2X+yGLPY3cbYac7irgCz1u6Xw4g4A3Kpq44TY Y9sFXuynOtVBuC0IXpgCIuR2MjH2Nfs= -----END CERTIFICATE-----Generated at Sat Oct 10 03:00:13 2026 by rpki-client