$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa File: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (raw, json) Hash identifier: xAPuKjri5LmIP2ijOuL6SOXFRW8E4SL2+2U+QCZGoy8= Subject key identifier: 2C:92:4C:82:DE:4E:A7:02:B0:7C:D3:A6:C3:33:F9:5D:9E:9F:14:7C Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584F497468E187EE9B1ADDFAB700 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396895 IP address blocks: 67.204.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:68:e1:87:ee:9b:1a:dd:fa:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6e01cdd4-6709-4d07-b567-d316708828a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:77:63:1b:f5:0c:21:20:5d:82:a0:6f:d1: 1e:d0:11:d4:57:40:a9:09:ce:f3:39:cd:3d:ba:33: 54:84:7e:76:9e:ef:cd:47:09:b3:2a:8e:f0:b2:8c: b6:6b:95:b8:70:ad:62:dc:5d:8b:3d:ea:25:ea:6e: d7:2a:ce:70:a9:3e:2e:84:ec:f5:4f:ce:83:95:c9: f1:75:9e:b3:ad:1c:44:d7:ec:5a:df:ca:fa:af:d9: b5:8a:ba:c5:b3:66:57:53:bb:d5:9c:61:9e:08:b8: 88:94:86:ff:25:80:cb:8c:d3:05:96:7d:35:e1:ee: b7:b9:df:ed:55:9c:e8:ae:a0:d9:68:60:b3:44:1c: 1e:61:4b:79:69:f0:19:46:04:b4:2b:eb:5b:12:19: 79:65:f1:74:41:ba:bd:56:67:ca:6b:eb:45:43:b8: cd:47:da:69:31:9d:37:61:76:e8:b1:59:c0:87:9c: cd:04:37:1b:d9:ab:80:9d:6c:6c:23:56:e2:22:c8: c3:76:60:d1:97:a2:09:e9:6b:a0:e4:60:dc:b8:6e: a0:2a:ca:67:3d:43:48:68:7e:31:ee:6c:5b:50:88: e1:83:81:8b:1e:02:ee:d4:43:51:1c:45:f8:32:e0: d8:a4:d0:2e:6c:58:47:89:da:bb:e6:b8:e0:f6:1e: 3a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:92:4C:82:DE:4E:A7:02:B0:7C:D3:A6:C3:33:F9:5D:9E:9F:14:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 67.204.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:cb:e5:af:62:94:0e:08:43:f2:69:23:7f:ce:88:9b:a2:d6: 8f:f8:52:9e:90:f5:20:12:41:db:df:52:e5:03:8f:3c:b4:77: c8:71:f6:3c:63:05:a2:80:44:d2:b7:90:15:6a:c3:e6:20:95: 1e:c4:2d:01:83:55:b8:70:81:ef:da:3e:84:6f:5e:a3:c5:b3: 54:b8:f6:d0:a3:1d:4b:b7:61:25:69:dd:98:87:63:c0:29:64: 97:8a:7b:a9:73:0e:86:5b:2d:cd:78:ba:80:7b:e9:98:48:ee: 1b:05:e4:d8:76:d6:05:b7:ce:f8:24:46:8b:49:6c:54:19:31: 92:6b:da:b1:07:9f:29:a8:42:26:69:13:67:4e:ea:8d:b3:02: cd:8e:84:77:4b:89:48:7e:79:4d:47:8d:b7:27:20:72:f5:c1: b8:1e:fb:e8:7d:5b:7d:ba:6d:5e:75:d3:d4:70:4b:e7:ff:1a: d0:cc:01:16:43:00:bd:38:93:b5:10:09:ec:80:66:a8:ae:4d: 30:22:4d:40:0c:32:ef:ed:0f:a8:5c:93:a8:59:4f:19:36:cb: 76:42:19:ae:ac:72:86:d0:5d:3c:40:70:f6:bf:2d:93:1e:2c: e2:49:a8:6d:72:ce:73:64:d7:cc:be:54:a5:fe:0b:9e:60:cd: e9:f2:25:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGjhh+6bGt36twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmUwMWNkZDQtNjcwOS00ZDA3LWI1NjctZDMxNjcwODgyOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlR3Yxv1DCEgXYKgb9Ee0BHUV0CpCc7zOc09 ujNUhH52nu/NRwmzKo7wsoy2a5W4cK1i3F2LPeol6m7XKs5wqT4uhOz1T86Dlcnx dZ6zrRxE1+xa38r6r9m1irrFs2ZXU7vVnGGeCLiIlIb/JYDLjNMFln014e63ud/t VZzorqDZaGCzRBweYUt5afAZRgS0K+tbEhl5ZfF0Qbq9VmfKa+tFQ7jNR9ppMZ03 YXbosVnAh5zNBDcb2auAnWxsI1biIsjDdmDRl6IJ6Wug5GDcuG6gKspnPUNIaH4x 7mxbUIjhg4GLHgLu1ENRHEX4MuDYpNAubFhHidq75rjg9h46sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCySTILeTqcCsHzTpsMz+V2enxR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvYjhjN2MyNDctZTEzNC0z YmQzLTk4MWYtZDlkYzQ0ZDhhY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8wRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDL5a9ilA4IQ/JpI3/OiJui1o/4Up6Q9SASQdvfUuUDjzy0d8hx9jxj BaKARNK3kBVqw+YglR7ELQGDVbhwge/aPoRvXqPFs1S49tCjHUu3YSVp3ZiHY8Ap ZJeKe6lzDoZbLc14uoB76ZhI7hsF5Nh21gW3zvgkRotJbFQZMZJr2rEHnymoQiZp E2dO6o2zAs2OhHdLiUh+eU1HjbcnIHL1wbge++h9W326bV5109RwS+f/GtDMARZD AL04k7UQCeyAZqiuTTAiTUAMMu/tD6hck6hZTxk2y3ZCGa6scobQXTxAcPa/LZMe LOJJqG1yznNk18y+VKX+C55gzenyJRk= -----END CERTIFICATE-----Generated at Tue Nov 10 10:57:45 2026 by rpki-client