$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa File: 0a195f08-4197-3058-bb05-b1878af3700a.roa (raw, json) Hash identifier: NJuaaN+AnreZXHr0HyIn8bjuBVpb20WXzMu38uwt2QM= Subject key identifier: 66:A0:B6:E5:43:F8:54:B5:7B:A1:A6:F3:62:07:CB:96:E6:F3:88:52 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584F4974C97D3EC8A8CB82C4BAC0 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398143 IP address blocks: 104.204.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c9:7d:3e:c8:a8:cb:82:c4:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e6093c5-10e7-465e-8a73-5c0fb3ff721f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:a2:18:41:90:4f:95:85:cc:8d:e4:c5:e7: c4:47:c4:9d:06:e2:93:8d:df:e3:54:e3:65:0d:ac: 4b:6a:c5:fe:e8:46:28:7f:47:d2:f2:c7:d3:69:8e: ed:99:d1:e9:fb:98:ab:52:83:63:72:14:9d:fa:1a: c7:5a:6f:9a:7a:c5:fc:a2:ff:ee:dd:ab:46:e3:d9: 27:80:33:6f:9e:97:30:81:53:e4:0d:10:74:e0:64: ce:0e:84:78:ae:ad:84:c7:20:17:d9:a3:80:00:5a: d1:ca:b7:59:58:24:0b:0f:ad:1b:33:a4:03:84:a4: 9d:bd:35:0f:5b:6d:42:36:4b:eb:05:44:15:98:79: cc:ba:97:fc:b0:6c:62:60:90:9c:53:f3:40:ab:a2: bb:51:59:63:f8:77:56:53:51:49:25:db:d7:8c:bf: 4d:00:f2:67:ef:ae:1c:ee:fe:3b:4e:82:2d:1c:84: fc:2b:ce:e8:cb:47:09:7c:3e:ed:8d:6d:a9:b0:79: 84:9b:a8:60:d1:90:90:38:28:f6:b0:f8:a8:37:4b: 2c:d6:ad:2e:ea:83:e3:25:28:6a:89:5b:8e:cf:8c: 3e:5a:09:b4:14:74:4d:e8:20:1b:3a:fb:9e:c1:ab: 93:87:95:98:b6:8f:8f:e1:9e:a3:cc:ae:fe:e9:1b: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A0:B6:E5:43:F8:54:B5:7B:A1:A6:F3:62:07:CB:96:E6:F3:88:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/0a195f08-4197-3058-bb05-b1878af3700a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 104.204.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:90:b0:97:91:56:46:ae:9c:9e:c1:5d:d8:f0:73:b4:90:f0: 0b:f0:40:3a:a7:fd:d4:83:3c:3d:f3:14:bb:6e:2d:49:69:40: 47:b5:7b:a6:73:44:db:bc:b8:62:82:d5:12:9b:68:64:17:d9: 8b:41:70:40:0a:85:67:b8:b5:9b:71:49:c8:c1:db:9b:a7:0a: 55:09:ad:fa:8f:2c:06:4a:32:80:e5:ef:a9:64:11:2a:f8:73: eb:2c:3c:03:13:57:76:e4:c6:52:16:f5:27:eb:83:3a:85:bc: ca:ef:1c:f3:2f:cf:b1:b7:74:f5:41:ad:d8:ab:80:de:7c:b4: 49:af:2c:aa:35:e2:44:47:50:9f:86:8e:37:e7:7f:63:4d:92: e8:b8:26:01:ef:d2:43:e8:af:48:bb:82:20:63:c4:cc:16:fc: cd:c9:03:56:89:b2:98:91:fb:60:ee:6a:4a:27:30:65:94:2b: 63:2c:93:7a:dc:48:93:7e:cf:a8:8e:1e:5e:ff:bc:0a:3c:fd: 0b:c3:4b:6e:58:37:63:30:8c:09:f6:42:b4:49:b7:7e:fa:f4: 34:00:cf:ea:60:57:f3:70:76:d5:99:ee:94:63:b7:f6:6e:16: 4b:2a:7b:f7:66:0d:06:bc:d6:d9:e0:0e:6d:31:12:42:b8:88: 84:86:4f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMl9Psioy4LEusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2U2MDkzYzUtMTBlNy00NjVlLThhNzMtNWMwZmIzZmY3MjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwOiGEGQT5WFzI3kxefER8SdBuKTjd/jVONl DaxLasX+6EYof0fS8sfTaY7tmdHp+5irUoNjchSd+hrHWm+aesX8ov/u3atG49kn gDNvnpcwgVPkDRB04GTODoR4rq2ExyAX2aOAAFrRyrdZWCQLD60bM6QDhKSdvTUP W21CNkvrBUQVmHnMupf8sGxiYJCcU/NAq6K7UVlj+HdWU1FJJdvXjL9NAPJn764c 7v47ToItHIT8K87oy0cJfD7tjW2psHmEm6hg0ZCQOCj2sPioN0ss1q0u6oPjJShq iVuOz4w+Wgm0FHRN6CAbOvuewauTh5WYto+P4Z6jzK7+6RvjIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGagtuVD+FS1e6Gm82IHy5bm84hSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvMGExOTVmMDgtNDE5Ny0z MDU4LWJiMDUtYjE4NzhhZjM3MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaMzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+QsJeRVkaunJ7BXdjwc7SQ8AvwQDqn/dSDPD3zFLtuLUlpQEe1e6Zz RNu8uGKC1RKbaGQX2YtBcEAKhWe4tZtxScjB25unClUJrfqPLAZKMoDl76lkESr4 c+ssPAMTV3bkxlIW9SfrgzqFvMrvHPMvz7G3dPVBrdirgN58tEmvLKo14kRHUJ+G jjfnf2NNkui4JgHv0kPor0i7giBjxMwW/M3JA1aJspiR+2DuakonMGWUK2Msk3rc SJN+z6iOHl7/vAo8/QvDS25YN2MwjAn2QrRJt3769DQAz+pgV/NwdtWZ7pRjt/Zu Fksqe/dmDQa81tngDm0xEkK4iISGT2U= -----END CERTIFICATE-----Generated at Tue Sep 29 01:15:51 2026 by rpki-client