$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa File: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (raw, json) Hash identifier: +4uG3V8FOpqDMqtLRXBE1Dmpm+tnxYS+CFinhrQFadg= Subject key identifier: 03:86:58:89:D3:FC:3D:45:BB:88:ED:5B:42:28:4B:8D:1A:DB:A1:CE Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584EA787F1E63098AC57B2EDE2C0 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396895 IP address blocks: 67.204.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:f1:e6:30:98:ac:57:b2:ed:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=44ca1b89-165c-4cc6-9721-a3a76127c782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:32:1b:bf:d3:ca:d1:93:c9:1b:fa:47:8e: 9a:01:6c:c3:63:99:c0:d5:84:03:fb:8a:f6:d4:44: b4:ac:e9:25:4b:b3:01:cc:31:96:1d:49:6b:b8:ee: d9:1f:9c:4f:15:40:87:53:33:34:d2:be:47:fa:c6: e4:cf:53:07:a5:a8:04:47:8b:e5:17:2c:22:5d:c2: e2:fd:7d:ec:0b:0c:0a:ba:08:26:4a:6e:70:fc:f0: c7:ec:6d:34:a5:7c:39:97:31:53:eb:de:c3:9f:2b: 69:ed:ab:ff:a1:99:76:8a:78:b3:6c:e7:0c:bf:2e: 6b:76:ce:91:0a:36:e4:03:7d:b6:d7:46:00:92:12: f8:10:63:18:87:78:75:3c:97:e3:8b:fb:05:37:c3: 6a:e9:46:ed:91:fa:f6:34:be:2f:00:0c:1d:a7:4d: b3:80:75:a5:c3:05:d7:c2:fb:7a:63:b7:8a:af:dc: ca:ff:6a:f9:94:4b:55:c0:53:2e:10:a4:ac:c7:e7: c4:77:75:a4:99:6c:65:31:75:c0:8b:1f:e0:fb:31: 3d:d4:b1:48:a7:64:b2:c7:dc:b2:40:9b:36:20:31: ea:2c:64:24:53:a2:ae:a1:92:70:57:ad:81:b3:6e: 67:dd:8f:49:23:9c:83:84:49:f5:5d:a3:d2:d6:d9: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:58:89:D3:FC:3D:45:BB:88:ED:5B:42:28:4B:8D:1A:DB:A1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 67.204.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ae:c4:8b:1b:a0:24:8a:d4:2e:0b:c9:de:09:a4:78:77:71: 83:a4:93:86:f5:75:80:12:31:38:c6:d7:45:cb:d9:3f:6f:16: 5b:ed:b2:90:4b:6c:64:2b:93:a4:4a:27:80:4c:c6:4a:31:18: 94:7e:75:24:bb:9b:c9:65:0c:20:8d:30:1d:80:09:12:65:60: e0:5b:e7:a1:70:36:82:c3:0e:ed:b2:be:56:65:40:30:aa:6e: 24:1f:2c:0f:a6:a5:37:8f:77:79:5e:55:ac:82:2e:39:8b:a3: c5:02:c0:f1:83:0e:7d:a4:84:fb:af:95:b3:3a:e5:6f:19:1e: 50:00:ed:b3:21:34:5d:19:68:31:5e:5f:e8:46:96:c8:af:a6: 83:d3:ec:76:25:d1:3c:94:b6:52:9a:f7:ee:22:d9:c3:d4:d3: 26:0f:23:c7:94:a0:bd:2c:60:fe:72:71:7b:67:bd:8b:9c:82: af:eb:a1:22:ce:98:85:b6:51:3d:da:3e:00:31:15:7f:7e:73: 63:e0:cb:a2:f9:94:92:63:dd:40:4c:ec:39:8d:3b:21:e8:34: d2:e2:3e:e0:ae:30:e9:b5:24:eb:27:77:05:d9:08:9e:b7:5c: 01:ee:f1:fa:aa:68:37:73:46:be:8e:14:dd:5e:77:d3:3d:c3: f6:52:b1:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/HmMJisV7Lt4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDRjYTFiODktMTY1Yy00Y2M2LTk3MjEtYTNhNzYxMjdjNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdkyG7/TytGTyRv6R46aAWzDY5nA1YQD+4r2 1ES0rOklS7MBzDGWHUlruO7ZH5xPFUCHUzM00r5H+sbkz1MHpagER4vlFywiXcLi /X3sCwwKuggmSm5w/PDH7G00pXw5lzFT697Dnytp7av/oZl2inizbOcMvy5rds6R CjbkA32210YAkhL4EGMYh3h1PJfji/sFN8Nq6Ubtkfr2NL4vAAwdp02zgHWlwwXX wvt6Y7eKr9zK/2r5lEtVwFMuEKSsx+fEd3WkmWxlMXXAix/g+zE91LFIp2Syx9yy QJs2IDHqLGQkU6KuoZJwV62Bs25n3Y9JI5yDhEn1XaPS1tndxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOGWInT/D1Fu4jtW0IoS40a26HOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvYjhjN2MyNDctZTEzNC0z YmQzLTk4MWYtZDlkYzQ0ZDhhY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8wRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCuxIsboCSK1C4Lyd4JpHh3cYOkk4b1dYASMTjG10XL2T9vFlvtspBL bGQrk6RKJ4BMxkoxGJR+dSS7m8llDCCNMB2ACRJlYOBb56FwNoLDDu2yvlZlQDCq biQfLA+mpTePd3leVayCLjmLo8UCwPGDDn2khPuvlbM65W8ZHlAA7bMhNF0ZaDFe X+hGlsivpoPT7HYl0TyUtlKa9+4i2cPU0yYPI8eUoL0sYP5ycXtnvYucgq/roSLO mIW2UT3aPgAxFX9+c2Pgy6L5lJJj3UBM7DmNOyHoNNLiPuCuMOm1JOsndwXZCJ63 XAHu8fqqaDdzRr6OFN1ed9M9w/ZSsVM= -----END CERTIFICATE-----Generated at Fri Sep 11 08:23:41 2026 by rpki-client