$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa File: 685e5fb0-74b7-3641-bd89-1132b33d3635.roa (raw, json) Hash identifier: 04ztEeMg89nO/PGEJT6g3ABjh1UlSReHv/lU7IttLeA= Subject key identifier: 5B:FA:97:E3:CD:55:53:D4:65:62:AE:61:8F:F6:55:5E:3B:18:68:A0 Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584F06724880C5A8A3DE2753D940 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 17055 IP address blocks: 204.99.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:48:80:c5:a8:a3:de:27:53:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=b2a258dd-4d49-4ed0-af02-9aca5ff5aab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:7e:01:69:13:5a:b5:49:af:3d:2c:19:32: a7:a2:fd:4c:9b:4a:be:ea:ae:df:91:1c:04:f7:c8: b4:6b:ea:23:ab:ee:39:4c:b4:e4:4c:99:91:1e:f3: 2c:d1:72:ca:6c:51:53:33:c8:f9:e0:42:fb:70:0a: a0:bd:3e:de:00:1d:85:69:e3:70:5c:61:0d:16:df: 3e:2a:86:23:45:ba:96:3c:2e:6b:63:b0:2e:f1:a0: 56:90:da:9e:f8:b9:0d:0f:63:20:99:db:47:14:f5: f2:e3:a4:72:b0:54:19:2c:63:08:2f:4b:01:83:29: 78:4e:a6:0f:3a:8a:e7:ce:72:f6:f7:de:0a:3a:34: 06:97:22:81:65:a4:75:68:e3:86:99:2f:36:52:c6: 93:ba:d5:2e:8e:cf:1e:d6:9a:fd:05:d3:73:1a:13: ba:b4:67:f1:31:9b:d3:0e:b2:52:2e:a4:02:15:aa: d5:b3:14:73:f0:42:e4:60:99:fd:c7:5e:db:b4:b2: 54:3c:dc:a8:ac:b7:9a:83:c0:49:2f:e4:fa:7d:68: 99:35:8d:e6:5e:f3:92:00:43:7d:ff:06:8f:a0:6c: 50:ba:91:81:c7:30:7a:a2:26:97:80:b0:50:e3:4e: f5:92:33:e2:eb:89:a5:bd:1d:21:97:9e:84:4f:e7: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:97:E3:CD:55:53:D4:65:62:AE:61:8F:F6:55:5E:3B:18:68:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/685e5fb0-74b7-3641-bd89-1132b33d3635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 204.99.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9c:5f:0b:b3:61:07:82:6c:c5:1e:01:cf:f3:81:2a:00:25: 40:a9:03:4b:c4:32:b7:1d:60:68:3a:ab:3f:92:4b:b3:03:40: 41:ca:27:1c:88:6d:bd:87:d8:74:63:a0:e8:a6:ba:af:f0:ef: b3:f6:03:e3:9b:00:25:e0:aa:08:f4:9e:ae:5b:d3:dc:bd:c7: 81:eb:c1:72:bd:1d:0f:62:31:16:00:c6:30:8b:b9:2b:b8:5b: fa:3d:f3:9e:ed:e0:d9:c5:16:97:c7:bf:8c:6d:1a:74:4f:0c: 86:33:32:7a:5d:a0:10:1c:9e:9a:e0:bf:20:0b:53:1d:ca:2a: 94:dc:16:05:d8:5c:cb:08:05:39:e0:93:47:4e:b4:66:f0:54: cb:49:c2:f4:16:58:f1:b6:d0:79:19:ea:bb:bb:e3:fb:6c:7d: 6b:92:ea:38:dd:db:b0:98:9e:76:5a:25:a3:0a:57:2e:e8:6c: 0a:00:73:eb:fc:d8:fa:82:2b:74:3f:9d:36:f2:a3:f4:6a:33: 53:fd:7f:40:89:2a:a6:8a:84:48:de:d3:a1:7f:81:48:58:5c: 1f:8a:21:44:eb:bd:30:f6:70:e2:34:0d:9e:18:82:6d:51:78: f5:a0:42:a4:6d:e0:9e:50:a5:f9:13:1c:b6:71:cc:68:e4:32: dc:c5:31:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckiAxaij3idT2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjJhMjU4ZGQtNGQ0OS00ZWQwLWFmMDItOWFjYTVmZjVhYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpt+AWkTWrVJrz0sGTKnov1Mm0q+6q7fkRwE 98i0a+ojq+45TLTkTJmRHvMs0XLKbFFTM8j54EL7cAqgvT7eAB2FaeNwXGENFt8+ KoYjRbqWPC5rY7Au8aBWkNqe+LkND2MgmdtHFPXy46RysFQZLGMIL0sBgyl4TqYP OornznL2994KOjQGlyKBZaR1aOOGmS82UsaTutUujs8e1pr9BdNzGhO6tGfxMZvT DrJSLqQCFarVsxRz8ELkYJn9x17btLJUPNyorLeag8BJL+T6fWiZNY3mXvOSAEN9 /waPoGxQupGBxzB6oiaXgLBQ4071kjPi64mlvR0hl56ET+c1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv6l+PNVVPUZWKuYY/2VV47GGigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvNjg1ZTVmYjAtNzRiNy0z NjQxLWJkODktMTEzMmIzM2QzNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzGOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKacXwuzYQeCbMUeAc/zgSoAJUCpA0vEMrcdYGg6qz+SS7MDQEHKJxyI bb2H2HRjoOimuq/w77P2A+ObACXgqgj0nq5b09y9x4HrwXK9HQ9iMRYAxjCLuSu4 W/o9857t4NnFFpfHv4xtGnRPDIYzMnpdoBAcnprgvyALUx3KKpTcFgXYXMsIBTng k0dOtGbwVMtJwvQWWPG20HkZ6ru74/tsfWuS6jjd27CYnnZaJaMKVy7obAoAc+v8 2PqCK3Q/nTbyo/RqM1P9f0CJKqaKhEje06F/gUhYXB+KIUTrvTD2cOI0DZ4Ygm1R ePWgQqRt4J5QpfkTHLZxzGjkMtzFMcY= -----END CERTIFICATE-----Generated at Sun Sep 13 09:43:52 2026 by rpki-client