$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa File: 58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa (raw, json) Hash identifier: U2VoU8I6fyLwM0wm0eFWhT/TkXCwO5tkjf3jDKnPqJo= Subject key identifier: BA:C7:BC:1B:35:DF:2E:77:67:6A:34:4C:06:F3:D0:85:FF:9D:E0:A4 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584EDC91F0A0743F8F58A3BF9B40 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 1280 IP address blocks: 204.152.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:f0:a0:74:3f:8f:58:a3:bf:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=c0b70c7f-84d0-4d25-8eee-b1ff2a5ecc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:34:9e:d2:3d:5d:85:58:44:12:cd:cf:2c: 60:ba:b5:00:00:20:7f:6c:c9:ad:95:ce:f0:60:46: 04:bc:5c:bd:8b:c1:25:7c:28:be:21:98:05:69:19: 6e:df:68:04:82:7a:21:db:ab:c9:f1:31:8c:71:28: 72:04:b8:41:5a:d1:ea:ad:67:b8:a8:88:94:83:36: 42:3d:15:e2:23:6f:a1:13:08:bf:82:4a:08:da:56: 4a:01:95:75:5c:49:83:5d:01:cb:05:4e:1c:dd:55: 4c:8c:4b:95:77:9f:8e:a4:75:72:90:81:83:55:1e: c2:f3:3d:8f:f3:3a:b4:be:70:e1:e8:e6:b7:4d:de: 92:81:e4:85:50:7d:3a:c2:8a:7d:32:d6:c5:a8:4c: ec:5b:f0:af:17:be:75:06:0c:92:7e:34:ef:e9:59: e6:1c:24:02:de:8b:4d:b7:96:cc:96:0b:34:5a:be: 35:4a:42:7b:02:3e:1b:1e:3a:65:d5:45:25:f7:7a: 05:ef:3b:26:35:96:76:10:b6:02:6b:61:97:45:2e: 21:51:4f:19:3d:ad:e0:6b:40:b8:d5:78:c0:c2:57: a0:67:f5:7c:4f:0a:1d:ec:e6:93:d1:d8:2c:85:01: c4:65:2d:f9:d3:09:91:d6:a9:e4:0c:2c:57:40:2b: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C7:BC:1B:35:DF:2E:77:67:6A:34:4C:06:F3:D0:85:FF:9D:E0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7f:3a:c5:25:46:c9:d9:cf:9f:04:f9:a0:2a:ee:2c:17:e6: 8e:7b:60:73:71:ad:c6:8f:1d:b3:e6:b1:02:2a:15:97:ed:6a: 41:de:10:6c:0a:c6:5d:6f:42:db:0b:0b:a4:b6:7b:1f:77:52: 15:88:4e:c9:60:42:e9:ad:fc:ba:45:d0:33:b4:98:c0:af:9f: b8:66:35:eb:2b:30:6b:a0:d2:87:73:2e:c6:75:b4:fd:5d:04: 25:99:27:6a:60:e7:93:34:4e:35:70:2c:91:b9:60:2e:d4:5f: 5a:b7:5b:d9:2e:01:9f:75:fe:58:11:a3:63:97:87:fb:16:a2: 63:1d:73:9a:61:4f:a9:22:08:38:b1:95:3f:62:d4:09:79:38: 7a:a1:7d:a7:80:05:1c:ff:a1:bd:e7:11:2d:a2:d7:60:d5:d4: 45:83:37:89:f6:53:32:3a:37:92:9e:3f:c1:fb:b8:08:82:7f: 94:77:82:13:48:59:93:92:d2:fd:7b:24:5c:b7:9f:c6:9e:11: 41:ca:a8:a8:37:87:c0:66:c0:b8:37:80:0a:9a:39:aa:ae:8e: ac:9a:83:6b:e1:2f:62:7a:d4:83:44:4a:91:d9:da:a6:3b:01: 92:24:ff:94:83:81:6b:70:66:60:1e:db:15:8b:02:bd:09:d5: 39:11:76:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfCgdD+PWKO/m0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk YzBiNzBjN2YtODRkMC00ZDI1LThlZWUtYjFmZjJhNWVjYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou80ntI9XYVYRBLNzyxgurUAACB/bMmtlc7w YEYEvFy9i8ElfCi+IZgFaRlu32gEgnoh26vJ8TGMcShyBLhBWtHqrWe4qIiUgzZC PRXiI2+hEwi/gkoI2lZKAZV1XEmDXQHLBU4c3VVMjEuVd5+OpHVykIGDVR7C8z2P 8zq0vnDh6Oa3Td6SgeSFUH06wop9MtbFqEzsW/CvF751BgySfjTv6VnmHCQC3otN t5bMlgs0Wr41SkJ7Aj4bHjpl1UUl93oF7zsmNZZ2ELYCa2GXRS4hUU8ZPa3ga0C4 1XjAwlegZ/V8Twod7OaT0dgshQHEZS350wmR1qnkDCxXQCsoRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrHvBs13y53Z2o0TAbz0IX/neCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNThkZTQ1NTctMmFlZi0z N2I2LWIyN2EtM2Q3MGRhMWViNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR/OsUlRsnZz58E+aAq7iwX5o57YHNxrcaPHbPmsQIqFZftakHeEGwK xl1vQtsLC6S2ex93UhWITslgQumt/LpF0DO0mMCvn7hmNesrMGug0odzLsZ1tP1d BCWZJ2pg55M0TjVwLJG5YC7UX1q3W9kuAZ91/lgRo2OXh/sWomMdc5phT6kiCDix lT9i1Al5OHqhfaeABRz/ob3nES2i12DV1EWDN4n2UzI6N5KeP8H7uAiCf5R3ghNI WZOS0v17JFy3n8aeEUHKqKg3h8BmwLg3gAqaOaqujqyag2vhL2J61INESpHZ2qY7 AZIk/5SDgWtwZmAe2xWLAr0J1TkRdmk= -----END CERTIFICATE-----Generated at Thu Oct 8 12:49:26 2026 by rpki-client