$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/e2c89e30-0475-3362-983c-c7cdd6f2e422.roa File: e2c89e30-0475-3362-983c-c7cdd6f2e422.roa (raw, json) Hash identifier: 2+vyEt+c4XE5ft4rWIiao/OI/EueRFvIQA0fvK3nj7E= Subject key identifier: 29:5E:2C:DD:A8:F2:4B:BA:1E:D1:B1:F0:3E:91:AE:55:71:51:0B:77 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584F71EDA248F956DA2AD9185000 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/e2c89e30-0475-3362-983c-c7cdd6f2e422.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 10317 IP address blocks: 204.155.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a2:48:f9:56:da:2a:d9:18:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=46e82457-204a-4a97-acc3-17780d8ef61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:f7:60:db:b0:0e:3d:19:43:f0:30:da:a6: d7:94:83:63:40:e5:0d:0e:7b:f4:c7:f7:ed:20:76: ee:cb:03:9c:cc:f6:ab:fc:f3:9b:97:97:aa:60:33: 21:d2:d6:cf:e3:da:0e:c5:13:46:ad:fb:e2:06:f4: 4c:8f:f7:44:c3:e4:7e:17:4a:d3:e5:61:23:29:08: 44:68:0e:af:87:4e:ed:df:8a:a9:e6:8d:fb:46:6f: cb:a5:f8:08:e5:d2:88:3b:9c:21:fd:01:0d:18:e6: 8b:8b:e6:01:6b:ef:1c:23:26:21:02:10:d2:ec:16: 69:ec:5f:25:45:66:22:c0:a3:d8:6b:3b:92:08:58: 4d:ca:db:0a:aa:eb:16:80:4c:73:4b:b3:05:d6:b3: f6:07:b6:79:99:54:9c:c5:36:8b:f0:38:10:63:b8: 26:fe:ea:c9:02:76:ba:33:31:21:80:60:71:dd:95: 73:23:e0:a6:b0:ae:ca:a8:17:9f:20:0d:be:52:23: bd:79:73:49:be:7a:9a:e4:c0:04:51:e6:01:17:bb: 43:5b:90:52:35:e9:03:80:18:3c:db:8d:30:c1:2d: 43:5d:cb:75:70:66:db:ff:5d:9b:5e:ea:f0:10:bc: f8:34:d5:27:0a:e8:24:7f:ce:c1:6e:19:e3:c7:08: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5E:2C:DD:A8:F2:4B:BA:1E:D1:B1:F0:3E:91:AE:55:71:51:0B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/e2c89e30-0475-3362-983c-c7cdd6f2e422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2a:66:83:0c:4b:51:34:7e:a4:9d:5f:e3:93:e2:2a:43:62: 7f:00:e5:c0:6d:16:77:9d:88:a3:8e:e1:2a:88:c1:ca:3b:b3: a6:e4:89:63:0b:32:85:f3:bc:65:dc:93:e7:a7:1b:38:63:b6: b5:93:8e:01:11:fd:38:73:97:52:14:59:f2:92:2e:a6:0f:1f: b3:ce:47:f8:f1:f8:53:03:43:ed:bd:00:34:19:ba:18:0b:71: bd:23:59:46:80:ec:96:88:5e:30:cb:4d:c1:12:d0:2c:d5:0a: de:18:72:37:52:9f:fb:cf:c7:25:b8:8a:81:d6:40:d4:df:37: 11:da:61:b1:5f:cc:b6:5b:99:94:2c:c6:39:36:fd:81:b5:f4: 20:00:0b:73:6e:fc:ea:95:3b:3e:9f:e1:5d:58:78:59:8e:4c: 5f:eb:6c:9c:0b:7c:75:e5:f5:3e:44:c7:b9:c7:9c:ee:41:00: 1b:0f:28:6b:aa:93:85:dd:14:46:b8:eb:1d:53:2f:3c:fd:e9: c8:4f:3a:2c:98:e2:c5:1d:65:ac:4b:86:4e:bc:93:35:f0:6e: be:ec:87:0b:48:68:0d:5a:08:63:40:7e:4d:79:f2:0c:60:0b: 3f:6e:28:39:04:af:d0:99:4c:94:6d:9b:07:a8:a0:86:22:3a: ea:9e:aa:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aJI+VbaKtkYUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDZlODI0NTctMjA0YS00YTk3LWFjYzMtMTc3ODBkOGVmNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs/3YNuwDj0ZQ/Aw2qbXlINjQOUNDnv0x/ft IHbuywOczPar/PObl5eqYDMh0tbP49oOxRNGrfviBvRMj/dEw+R+F0rT5WEjKQhE aA6vh07t34qp5o37Rm/LpfgI5dKIO5wh/QENGOaLi+YBa+8cIyYhAhDS7BZp7F8l RWYiwKPYazuSCFhNytsKqusWgExzS7MF1rP2B7Z5mVScxTaL8DgQY7gm/urJAna6 MzEhgGBx3ZVzI+CmsK7KqBefIA2+UiO9eXNJvnqa5MAEUeYBF7tDW5BSNekDgBg8 240wwS1DXct1cGbb/12bXurwELz4NNUnCugkf87BbhnjxwgRhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCleLN2o8ku6HtGx8D6RrlVxUQt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvZTJjODllMzAtMDQ3NS0z MzYyLTk4M2MtYzdjZGQ2ZjJlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAqZoMMS1E0fqSdX+OT4ipDYn8A5cBtFnediKOO4SqIwco7s6bkiWML MoXzvGXck+enGzhjtrWTjgER/Thzl1IUWfKSLqYPH7POR/jx+FMDQ+29ADQZuhgL cb0jWUaA7JaIXjDLTcES0CzVCt4YcjdSn/vPxyW4ioHWQNTfNxHaYbFfzLZbmZQs xjk2/YG19CAAC3Nu/OqVOz6f4V1YeFmOTF/rbJwLfHXl9T5Ex7nHnO5BABsPKGuq k4XdFEa46x1TLzz96chPOiyY4sUdZaxLhk68kzXwbr7shwtIaA1aCGNAfk158gxg Cz9uKDkEr9CZTJRtmweooIYiOuqeqsY= -----END CERTIFICATE-----Generated at Sun Oct 11 14:51:20 2026 by rpki-client