$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa File: d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa (raw, json) Hash identifier: L3VMlhtsUjH4F8/g0CkRxc55W+b9OBf2bE7zhv+oJow= Subject key identifier: D0:71:9D:C1:EE:30:68:D2:E5:B2:78:01:F4:64:67:0B:44:17:89:A9 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584F549DA273D2C3E745061A2F00 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 204.237.144.0/22 maxlen: 24 204.237.148.0/22 maxlen: 24 204.237.152.0/22 maxlen: 24 204.237.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a2:73:d2:c3:e7:45:06:1a:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=de943b9a-8290-489f-83ca-f0a1e308b1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:d8:2b:56:21:f7:3a:34:f2:79:b7:28:48: b5:5a:fe:3a:8b:f5:dc:cb:b6:10:24:80:e7:32:64: a0:27:58:b8:d2:75:4a:5b:11:31:79:fa:37:33:c2: bd:b1:e0:a2:8d:95:d6:2e:c3:4a:59:80:aa:a6:54: 03:c3:29:c1:bf:32:5d:c2:55:4d:cb:af:22:46:a9: 54:e1:96:3b:b6:55:56:15:ad:00:6e:3e:d6:de:b6: db:00:5c:0d:f7:0d:58:e3:a8:27:cb:71:5a:7b:8a: e1:53:6d:20:e4:28:1d:0f:19:b5:be:09:8f:60:d4: 69:21:e7:e9:6d:43:cd:28:4c:c7:7b:4a:23:d7:3e: 5a:72:e3:f1:c0:e4:38:66:a6:be:bc:78:ec:52:91: 94:04:02:15:c0:64:84:bc:fc:c1:69:9d:e9:37:71: 27:1f:fb:8c:22:c8:0d:c0:d0:4f:6a:26:d8:57:6c: e7:5b:27:85:06:05:60:34:40:b9:40:76:55:7d:04: 3a:d3:21:d6:27:a1:39:2a:86:2c:c9:b3:88:bb:03: 8d:27:62:ba:8a:0a:c6:93:09:c1:1b:f2:75:57:ec: e3:2f:54:d4:c1:7c:f6:2e:7b:7b:65:29:d8:22:92: 73:fe:15:b2:da:49:72:34:6c:32:06:b3:29:d6:f8: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:71:9D:C1:EE:30:68:D2:E5:B2:78:01:F4:64:67:0B:44:17:89:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/d34d5564-b96a-3c3d-a395-e46ba3b0872d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 204.237.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b9:69:d1:a7:82:fd:a1:7e:d0:ce:3e:43:87:bc:6a:78:90: 37:95:48:3a:67:8a:6f:dc:33:0d:54:bb:9a:7a:84:e1:71:a0: e4:93:12:6d:61:34:1c:f3:c0:8b:8d:cd:aa:cc:49:6f:b0:81: 7e:99:5d:94:1a:05:85:d3:b6:be:32:61:ac:16:34:a2:8d:e6: 5c:59:fc:fc:71:15:5b:cd:0e:9e:d0:55:f7:cc:77:5f:8b:cf: a0:3e:17:c3:a5:0c:42:bb:03:43:e7:22:11:3c:65:61:9f:f3: f1:a9:0e:2a:4b:fc:3e:0d:3c:14:52:b4:36:3d:a0:5f:e5:23: 46:de:72:a2:27:c7:6a:76:cf:6a:64:c0:3c:23:f7:1b:08:b9: 78:5e:28:a2:80:7a:5c:a4:bd:9b:ee:41:81:a1:1c:f0:79:21: 31:fc:89:82:3b:58:bd:22:b8:35:00:28:e5:dd:26:22:85:48: 6e:f4:7b:8f:f6:f5:52:26:89:12:a6:07:b9:bc:47:bd:05:c4: a9:13:f7:56:ad:ff:bc:9b:81:a7:13:f2:8c:2e:45:7d:9c:8d: 2e:d2:5b:90:d7:7b:e3:71:45:55:cc:83:88:e6:75:ee:28:06: 0f:1e:0c:e0:8a:af:6e:0f:aa:e9:db:06:0e:8e:6e:41:1b:df: df:cc:8e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaJz0sPnRQYaLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGU5NDNiOWEtODI5MC00ODlmLTgzY2EtZjBhMWUzMDhiMWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f3YK1Yh9zo08nm3KEi1Wv46i/Xcy7YQJIDn MmSgJ1i40nVKWxExefo3M8K9seCijZXWLsNKWYCqplQDwynBvzJdwlVNy68iRqlU 4ZY7tlVWFa0Abj7W3rbbAFwN9w1Y46gny3Fae4rhU20g5CgdDxm1vgmPYNRpIefp bUPNKEzHe0oj1z5acuPxwOQ4Zqa+vHjsUpGUBAIVwGSEvPzBaZ3pN3EnH/uMIsgN wNBPaibYV2znWyeFBgVgNEC5QHZVfQQ60yHWJ6E5KoYsybOIuwONJ2K6igrGkwnB G/J1V+zjL1TUwXz2Lnt7ZSnYIpJz/hWy2klyNGwyBrMp1vjvCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBxncHuMGjS5bJ4AfRkZwtEF4mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvZDM0ZDU1NjQtYjk2YS0z YzNkLWEzOTUtZTQ2YmEzYjA4NzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzO2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE25adGngv2hftDOPkOHvGp4kDeVSDpnim/cMw1Uu5p6hOFxoOSTEm1h NBzzwIuNzarMSW+wgX6ZXZQaBYXTtr4yYawWNKKN5lxZ/PxxFVvNDp7QVffMd1+L z6A+F8OlDEK7A0PnIhE8ZWGf8/GpDipL/D4NPBRStDY9oF/lI0becqInx2p2z2pk wDwj9xsIuXheKKKAelykvZvuQYGhHPB5ITH8iYI7WL0iuDUAKOXdJiKFSG70e4/2 9VImiRKmB7m8R70FxKkT91at/7ybgacT8owuRX2cjS7SW5DXe+NxRVXMg4jmde4o Bg8eDOCKr24PqunbBg6ObkEb39/MjnE= -----END CERTIFICATE-----Generated at Thu Nov 5 19:24:30 2026 by rpki-client