$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdabf8ac-2663-3e7f-872c-b4d3d488fd8a.roa File: cdabf8ac-2663-3e7f-872c-b4d3d488fd8a.roa (raw, json) Hash identifier: Jy20ofxhlTVmfuU/jdvE0qyb/1ABEmlTmll8AkbMX/Y= Subject key identifier: 41:7C:FA:60:59:AE:4B:0E:98:3D:03:36:9B:5B:E4:48:A2:83:27:6F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F800C60B20BA75F9605892E00 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdabf8ac-2663-3e7f-872c-b4d3d488fd8a.roa Signing time: Wed 14 Oct 2026 14:23:51 +0000 ROA not before: Wed 14 Oct 2026 14:23:51 +0000 ROA not after: Tue 12 Jan 2027 15:21:55 +0000 asID: 153753 IP address blocks: 204.137.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:80:0c:60:b2:0b:a7:5f:96:05:89:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 14 14:23:51 2026 GMT Not After : Jan 12 15:21:55 2027 GMT Subject: CN=2f4b35ea-bd61-47bb-83cd-9bb754c22620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:0e:62:a6:37:11:ab:94:ba:78:4d:30:6e: e1:a3:50:83:e9:58:6b:2c:1e:02:24:32:21:0f:76: 3d:90:0e:26:b9:6a:27:b5:c1:d9:b8:af:41:a2:a8: 29:3f:a4:dc:c3:26:64:ab:c4:c2:06:59:e3:00:92: 78:12:ee:9b:b9:85:65:db:e1:46:ed:09:74:b5:80: 5f:25:ff:41:39:98:a9:79:97:da:8d:84:0b:53:70: 50:d3:75:ac:15:f0:da:9e:f6:e6:04:a8:ee:41:ff: 6d:19:b6:6e:b5:b1:af:bb:60:d0:7a:85:8f:76:80: e7:5d:f6:cb:77:90:a0:cf:94:cd:39:04:fc:09:94: 57:47:b6:42:df:f4:77:a7:be:77:ed:fe:f3:44:ea: 70:30:ca:03:9b:c7:25:d7:eb:4b:3b:93:81:a6:c7: 5f:94:e4:f7:e5:40:0e:a5:e3:b9:83:33:5d:18:c2: 62:43:99:0d:d1:23:f4:b8:14:a6:4c:38:b4:b7:86: 8d:66:9c:7e:42:e1:38:ed:38:cc:99:27:a7:b0:26: 86:c7:6e:c7:00:bd:6d:0d:74:f2:4b:cf:9f:eb:bc: 96:05:88:5b:f4:54:87:0e:5f:b9:15:d6:ff:79:82: f1:66:56:ce:18:e7:be:ba:a0:6f:da:dc:0c:b8:2a: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7C:FA:60:59:AE:4B:0E:98:3D:03:36:9B:5B:E4:48:A2:83:27:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/cdabf8ac-2663-3e7f-872c-b4d3d488fd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 204.137.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:19:6c:88:fd:d7:02:9c:df:dc:64:5d:ee:d8:c8:59:e8:21: cc:ed:4e:46:26:1c:a7:cd:f5:b7:72:33:e4:7f:f7:77:6c:ba: 7c:43:1b:13:b6:4c:bb:8a:d8:ef:86:51:3e:5f:5b:76:ab:4b: 87:d8:47:87:45:81:01:b0:d5:57:f3:fc:14:c2:1d:61:03:ce: 1c:c8:2e:83:a6:53:71:7e:16:10:bc:0d:ee:eb:86:b6:37:c1: 1e:5a:96:19:d3:f6:f4:8f:3a:d1:41:c2:7c:eb:44:03:ce:75: 60:30:e9:32:36:fa:d1:53:04:c5:ee:21:db:79:c9:fc:89:b4: 66:0c:b4:a3:74:17:f1:c1:fb:49:ba:39:bf:b7:95:6b:e0:8d: b6:31:a1:7c:09:0a:c2:56:59:5b:b4:22:44:ab:75:bf:81:58: 64:05:da:1b:b0:52:d3:8c:42:50:e0:8b:5e:01:e7:4e:4d:71: 28:2c:ef:9b:24:4d:5e:48:92:3b:b4:b9:de:89:6c:d2:78:19: 97:cc:73:1c:1e:5a:eb:e3:f8:3a:6f:f8:f8:fb:c9:b7:41:d6: 06:e8:70:34:6d:6e:56:89:24:36:1c:02:4d:e7:6f:9a:89:6c: 31:c9:2b:fe:08:c4:30:81:4c:f8:0d:ec:e0:ea:33:bd:5d:98: 97:97:a4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ADGCyC6dflgWJLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxNDE0MjM1MVoXDTI3MDExMjE1MjE1NVowLzEtMCsGA1UEAxMk MmY0YjM1ZWEtYmQ2MS00N2JiLTgzY2QtOWJiNzU0YzIyNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnIOYqY3EauUunhNMG7ho1CD6VhrLB4CJDIh D3Y9kA4muWontcHZuK9BoqgpP6TcwyZkq8TCBlnjAJJ4Eu6buYVl2+FG7Ql0tYBf Jf9BOZipeZfajYQLU3BQ03WsFfDanvbmBKjuQf9tGbZutbGvu2DQeoWPdoDnXfbL d5Cgz5TNOQT8CZRXR7ZC3/R3p7537f7zROpwMMoDm8cl1+tLO5OBpsdflOT35UAO peO5gzNdGMJiQ5kN0SP0uBSmTDi0t4aNZpx+QuE47TjMmSensCaGx27HAL1tDXTy S8+f67yWBYhb9FSHDl+5Fdb/eYLxZlbOGOe+uqBv2twMuCozXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF8+mBZrksOmD0DNptb5EiigydvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvY2RhYmY4YWMtMjY2My0z ZTdmLTg3MmMtYjRkM2Q0ODhmZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzImsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcZbIj91wKc39xkXe7YyFnoIcztTkYmHKfN9bdyM+R/93dsunxDGxO2 TLuK2O+GUT5fW3arS4fYR4dFgQGw1Vfz/BTCHWEDzhzILoOmU3F+FhC8De7rhrY3 wR5alhnT9vSPOtFBwnzrRAPOdWAw6TI2+tFTBMXuIdt5yfyJtGYMtKN0F/HB+0m6 Ob+3lWvgjbYxoXwJCsJWWVu0IkSrdb+BWGQF2huwUtOMQlDgi14B505NcSgs75sk TV5Ikju0ud6JbNJ4GZfMcxweWuvj+Dpv+Pj7ybdB1gbocDRtblaJJDYcAk3nb5qJ bDHJK/4IxDCBTPgN7ODqM71dmJeXpCE= -----END CERTIFICATE-----Generated at Sun Oct 25 21:38:13 2026 by rpki-client