$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0f127fb7-4d6e-38ec-9d22-d262412d33f4.roa File: 0f127fb7-4d6e-38ec-9d22-d262412d33f4.roa (raw, json) Hash identifier: Uwee9SWq3/capkuZ6o2gOUpkXCTIiH6p8X3SAcVSHlE= Subject key identifier: 84:95:57:DE:26:F6:F2:2F:CF:B7:C8:08:A7:2F:51:00:AC:BC:21:A2 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F00DCD0603E80059639A196E0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0f127fb7-4d6e-38ec-9d22-d262412d33f4.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 271982 IP address blocks: 204.157.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:d0:60:3e:80:05:96:39:a1:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=21dbfb34-f5b2-42fd-987f-8fdb9bd48ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:05:25:97:ce:69:7e:6f:51:f5:76:48:ac: e9:e8:bb:0f:ee:eb:e8:f3:d1:8a:5c:48:86:3c:89: a4:71:90:41:67:84:62:8a:37:36:e4:84:be:85:c4: 9f:b9:32:81:78:62:b0:8d:c9:46:68:94:fc:45:e2: 69:af:53:c9:03:f4:3d:c9:5b:63:5e:dc:a7:14:a6: d8:74:a6:75:d3:1c:44:bb:53:d7:c6:2c:e1:d1:27: db:44:40:ae:9e:52:a8:a5:1d:55:39:13:54:80:6c: 3c:6c:03:46:39:ac:82:83:91:d5:f3:1d:1e:b0:60: e6:6a:65:cf:c5:db:e7:c3:04:48:cd:44:4d:88:df: a4:e0:9e:a8:82:3b:c0:dd:9c:e8:87:2b:7e:e8:92: 2a:be:74:15:a7:9d:f8:6c:9d:66:f6:9e:cf:41:4f: 10:90:e4:f1:7d:ae:e9:df:74:d1:fa:16:1a:05:a0: 1f:85:dd:e6:c8:6c:ab:c4:ac:8b:78:13:5e:28:94: 6b:6f:28:b5:40:1b:f4:bc:58:8b:70:dc:ce:67:b3: 14:0d:eb:4f:25:ec:01:6d:03:5f:3f:47:9e:8f:f1: 35:f0:dd:10:b8:44:30:b5:4c:d5:61:81:83:f3:db: 2f:98:6e:b3:a8:16:41:ea:8b:98:57:42:d1:e5:be: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:95:57:DE:26:F6:F2:2F:CF:B7:C8:08:A7:2F:51:00:AC:BC:21:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0f127fb7-4d6e-38ec-9d22-d262412d33f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 204.157.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:48:b6:7e:13:bb:67:ac:41:c0:4a:05:b7:63:62:10:76:ff: 3e:9f:3d:98:72:9b:28:3c:57:33:1f:9a:bb:51:45:c4:0f:cf: 44:f0:98:37:23:9e:68:28:5f:41:6b:b7:26:7e:57:ba:9d:1e: 66:f6:75:2d:c4:3d:05:67:6e:fd:6b:ff:56:58:84:bd:33:14: 61:fe:13:bc:56:23:42:d8:d8:50:2a:45:68:77:82:f3:2b:d0: aa:ba:e2:c4:d0:c7:a2:82:24:0c:90:e6:ac:f2:64:ef:20:d6: c8:d7:5d:be:2e:76:03:31:c4:42:62:ca:89:64:96:60:4e:47: 31:2d:d4:55:e8:25:f5:9e:1f:40:7d:47:4e:6c:df:35:76:fa: cc:b1:db:30:6c:ef:2c:a7:e8:09:4d:0f:3e:02:17:95:e7:f5: 46:d6:7d:0a:22:61:28:11:4a:97:f5:6a:4d:8d:57:be:5d:d0: cd:a8:bd:c4:d8:68:91:a3:32:7f:bc:f2:7c:27:80:49:99:28: 71:ca:e1:ed:a9:d4:ce:46:22:e5:3d:33:17:e3:cc:5c:e4:77: d6:ef:94:e1:94:d9:d2:a3:dd:49:d6:a6:80:66:f3:1d:6e:00: 65:9a:d8:c8:08:79:3b:59:21:d9:1a:ad:87:0e:a3:e8:13:88: 2a:e9:47:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3NBgPoAFljmhluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk MjFkYmZiMzQtZjViMi00MmZkLTk4N2YtOGZkYjliZDQ4Y2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDYFJZfOaX5vUfV2SKzp6LsP7uvo89GKXEiG PImkcZBBZ4Riijc25IS+hcSfuTKBeGKwjclGaJT8ReJpr1PJA/Q9yVtjXtynFKbY dKZ10xxEu1PXxizh0SfbRECunlKopR1VORNUgGw8bANGOayCg5HV8x0esGDmamXP xdvnwwRIzURNiN+k4J6ogjvA3Zzohyt+6JIqvnQVp534bJ1m9p7PQU8QkOTxfa7p 33TR+hYaBaAfhd3myGyrxKyLeBNeKJRrbyi1QBv0vFiLcNzOZ7MUDetPJewBbQNf P0eej/E18N0QuEQwtUzVYYGD89svmG6zqBZB6ouYV0LR5b4jhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISVV94m9vIvz7fICKcvUQCsvCGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMGYxMjdmYjctNGQ2ZS0z OGVjLTlkMjItZDI2MjQxMmQzM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJ3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlItn4Tu2esQcBKBbdjYhB2/z6fPZhymyg8VzMfmrtRRcQPz0TwmDcj nmgoX0FrtyZ+V7qdHmb2dS3EPQVnbv1r/1ZYhL0zFGH+E7xWI0LY2FAqRWh3gvMr 0Kq64sTQx6KCJAyQ5qzyZO8g1sjXXb4udgMxxEJiyolklmBORzEt1FXoJfWeH0B9 R05s3zV2+syx2zBs7yyn6AlNDz4CF5Xn9UbWfQoiYSgRSpf1ak2NV75d0M2ovcTY aJGjMn+88nwngEmZKHHK4e2p1M5GIuU9MxfjzFzkd9bvlOGU2dKj3UnWpoBm8x1u AGWa2MgIeTtZIdkarYcOo+gTiCrpR90= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:26 2026 by rpki-client