$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2599a0d9-cbb1-3989-b48a-cc85d040ceb9.roa File: 2599a0d9-cbb1-3989-b48a-cc85d040ceb9.roa (raw, json) Hash identifier: fg1Z8qQw5KEuD3BTWnn5GPRpNMV85X20NcFXMuzF9to= Subject key identifier: D4:E5:40:84:24:55:F5:37:48:9F:DB:A6:59:DC:98:86:40:F0:D9:06 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EFA6E413CDE7AEDA8853C5B80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2599a0d9-cbb1-3989-b48a-cc85d040ceb9.roa Signing time: Thu 27 Aug 2026 17:42:45 +0000 ROA not before: Thu 27 Aug 2026 17:42:45 +0000 ROA not after: Wed 25 Nov 2026 18:42:45 +0000 asID: 0 IP address blocks: 204.157.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:6e:41:3c:de:7a:ed:a8:85:3c:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 27 17:42:45 2026 GMT Not After : Nov 25 18:42:45 2026 GMT Subject: CN=c466dd51-7a67-4c60-8e76-a94a10871489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:e0:92:99:8e:aa:53:1c:ae:c4:3a:74:be: 31:c6:91:63:63:38:70:18:7f:85:12:c1:25:15:2e: d6:37:61:77:2f:56:2e:39:2c:d4:25:78:b4:5a:24: 96:4e:ba:ed:65:87:22:59:00:d7:e9:ac:74:2b:b6: 40:7f:91:d7:11:9a:b8:88:45:6b:6f:59:df:72:e8: 2c:56:53:a9:2f:d0:5e:68:01:f8:16:bb:70:13:db: de:fa:56:ac:d7:fa:b1:c9:19:f9:5d:e3:67:46:4c: 74:23:4e:db:c8:66:c0:15:a0:a5:42:ca:24:82:55: fe:1c:36:4b:30:d1:22:98:f7:30:04:c2:cc:5a:0a: 8a:13:03:78:c9:f5:f0:e3:24:d9:39:8d:08:57:5c: d4:7e:28:18:32:0a:ad:bf:9e:b1:a4:92:1b:47:1c: 28:4f:78:96:cf:55:41:46:cc:1e:f7:b0:12:36:32: 07:bb:8a:c4:dc:2b:08:8d:b9:81:dd:01:3c:05:21: b5:ca:50:f7:ca:b5:7b:47:39:4a:e7:89:08:c0:4a: f4:0e:ea:52:75:28:1e:a3:f5:34:52:93:d6:1b:0f: 85:f4:10:f7:86:c0:3c:f3:15:62:89:76:c8:4d:a8: f7:31:e2:fc:62:d1:b3:c8:74:1d:d8:60:f3:4a:61: 43:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E5:40:84:24:55:F5:37:48:9F:DB:A6:59:DC:98:86:40:F0:D9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2599a0d9-cbb1-3989-b48a-cc85d040ceb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 204.157.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:63:d5:7c:44:58:f2:82:e2:53:94:cd:92:0b:3b:cf:87:50: cd:5a:fd:03:c8:b9:58:49:b7:bf:2e:43:b8:ee:83:21:f7:ed: 89:b8:f8:39:a0:30:e0:3b:2b:cd:48:18:1b:2b:2f:10:87:c8: a3:ab:d9:43:d0:7b:44:b8:99:63:58:32:90:b4:7a:6c:1f:34: 1b:f0:21:63:18:0e:09:6f:4a:2d:dd:24:13:47:4b:b3:dc:c8: 02:c6:80:81:a5:d2:33:df:fa:8d:0d:51:ba:07:20:3e:91:fa: b1:1c:9c:75:44:4f:97:ae:7e:65:e2:29:bc:6a:fb:04:f7:0f: 1c:f9:05:3d:8a:96:9c:7a:46:6b:eb:78:6d:d2:48:8d:aa:55: 0c:6f:b4:02:7f:db:7c:97:65:44:b2:ea:db:ac:5b:63:30:f7: 7c:d0:2e:9d:ac:77:01:48:c5:8a:26:b2:b5:ff:b0:87:8f:49: 6c:64:ca:c0:3f:15:53:ed:27:11:bd:41:fd:c3:04:e9:e5:11: 6e:54:c0:80:45:fa:30:2a:4a:9d:8b:3b:2c:f9:33:04:56:43: 8d:f6:b9:23:3c:60:0c:f2:35:55:28:eb:46:ff:1f:30:ec:c8: 32:7b:17:a6:a6:16:75:93:58:b5:d2:a5:03:7a:d0:77:b9:1c: c3:ff:f6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76bkE83nrtqIU8W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNzE3NDI0NVoXDTI2MTEyNTE4NDI0NVowLzEtMCsGA1UEAxMk YzQ2NmRkNTEtN2E2Ny00YzYwLThlNzYtYTk0YTEwODcxNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhjgkpmOqlMcrsQ6dL4xxpFjYzhwGH+FEsEl FS7WN2F3L1YuOSzUJXi0WiSWTrrtZYciWQDX6ax0K7ZAf5HXEZq4iEVrb1nfcugs VlOpL9BeaAH4FrtwE9ve+las1/qxyRn5XeNnRkx0I07byGbAFaClQsokglX+HDZL MNEimPcwBMLMWgqKEwN4yfXw4yTZOY0IV1zUfigYMgqtv56xpJIbRxwoT3iWz1VB Rswe97ASNjIHu4rE3CsIjbmB3QE8BSG1ylD3yrV7RzlK54kIwEr0DupSdSgeo/U0 UpPWGw+F9BD3hsA88xViiXbITaj3MeL8YtGzyHQd2GDzSmFD8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTlQIQkVfU3SJ/bplncmIZA8NkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMjU5OWEwZDktY2JiMS0z OTg5LWI0OGEtY2M4NWQwNDBjZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJ32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBj1XxEWPKC4lOUzZILO8+HUM1a/QPIuVhJt78uQ7jugyH37Ym4+Dmg MOA7K81IGBsrLxCHyKOr2UPQe0S4mWNYMpC0emwfNBvwIWMYDglvSi3dJBNHS7Pc yALGgIGl0jPf+o0NUboHID6R+rEcnHVET5eufmXiKbxq+wT3Dxz5BT2Klpx6Rmvr eG3SSI2qVQxvtAJ/23yXZUSy6tusW2Mw93zQLp2sdwFIxYomsrX/sIePSWxkysA/ FVPtJxG9Qf3DBOnlEW5UwIBF+jAqSp2LOyz5MwRWQ432uSM8YAzyNVUo60b/HzDs yDJ7F6amFnWTWLXSpQN60He5HMP/9rc= -----END CERTIFICATE-----Generated at Fri Sep 11 13:46:25 2026 by rpki-client