$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa File: 409dcb1b-8e11-32f3-b345-ba1e33a44598.roa (raw, json) Hash identifier: l51el07SMLRA2CEGE9fxUNToGE+ZqC7KBO8xEOeT+ig= Subject key identifier: F5:40:E4:CC:52:30:5C:FC:C6:7C:8F:D3:CC:58:BB:46:73:96:A2:49 Certificate issuer: /CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Certificate serial: 010D0C9F4328584F8DD8664A86AD85DB63BAA8C0 Authority key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 32746 IP address blocks: 204.8.88.0/22 maxlen: 24 208.86.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:66:4a:86:ad:85:db:63:ba:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=e7c115f3-8c4e-46ed-b140-8c4dd141497d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:89:9b:12:4d:4b:1f:62:6e:55:a2:00:ae: 82:2d:ff:42:c0:aa:3b:9c:d0:da:d7:8b:b8:53:05: 2c:83:01:d6:48:59:5f:5a:6f:d3:90:04:bb:07:42: 94:08:95:27:4f:ad:63:03:88:69:5f:93:6c:ba:c5: 24:4a:7f:38:17:f0:7f:5e:c9:f3:47:e6:f1:50:78: 1c:34:1f:57:21:ed:65:8e:31:72:fc:4b:f7:b1:cd: 9a:94:b7:0e:96:dc:a5:90:8b:a8:e1:b7:02:0c:eb: bd:20:18:e8:cc:e8:59:3f:f3:24:53:4b:e7:fc:5a: 00:23:64:3a:54:e6:6b:1d:94:93:23:65:d9:16:14: 3b:e6:1e:82:40:65:2f:10:95:1b:37:50:cc:a1:09: d5:6c:0e:4b:0b:61:1b:6f:76:e7:78:f2:4e:44:1e: dd:2b:df:f3:4b:ac:2c:89:07:3c:8d:62:c8:67:9a: 40:f7:c9:72:0a:82:29:7a:e1:f2:2f:61:5f:c0:37: 40:98:eb:0e:72:33:a7:32:62:77:1a:49:af:38:bb: 0c:e3:d8:92:71:e2:43:62:3d:01:61:f5:50:69:77: bb:33:d8:14:36:3a:28:9f:e8:23:b7:6b:3e:47:89: ea:30:a2:ff:d2:ea:87:a7:ad:72:a8:54:e0:e7:40: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:40:E4:CC:52:30:5C:FC:C6:7C:8F:D3:CC:58:BB:46:73:96:A2:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/409dcb1b-8e11-32f3-b345-ba1e33a44598.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.crl X509v3 Authority Key Identifier: keyid:5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer sbgp-ipAddrBlock: critical IPv4: 204.8.88.0/22 208.86.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:cd:e2:7c:42:87:e6:d5:d2:a3:9d:d7:09:0e:10:d6:2a:ae: 65:b9:88:45:bf:45:55:d4:4d:19:8a:ca:9c:c7:b2:83:f6:73: 5e:a5:d1:99:91:d3:40:8a:a2:96:92:59:d7:bf:37:08:56:d5: 18:f9:06:e4:4a:30:1e:10:bf:da:4a:f6:cc:f2:13:74:7e:da: a0:28:8d:2c:45:4f:ef:86:99:0f:87:24:47:6b:d6:52:1a:1a: c1:ad:e0:1a:e9:41:de:9b:0f:a5:6e:2d:b3:42:7c:2d:e3:a7: 42:cf:6d:6b:78:2b:85:b7:65:ef:e4:aa:72:3b:28:be:0e:5d: 32:2b:44:d5:11:b7:98:56:82:2c:20:d1:a9:86:76:b7:a6:47: 01:6d:25:c1:89:9c:42:37:50:5b:fb:76:8c:14:ae:c6:13:5f: be:7b:ca:0a:ff:38:36:3a:bf:d3:8e:af:02:5e:bc:4a:a1:af: 79:e3:db:aa:d5:c5:7d:ae:73:5d:36:14:fb:35:8a:a8:34:6d: 15:7a:d1:43:bf:79:84:45:30:48:5b:28:a3:77:7c:73:99:89: ba:90:f4:d6:92:d4:3a:93:9c:87:cd:6f:7a:53:9b:59:3f:78: 7c:2c:fe:28:7f:7d:73:04:ea:c2:25:b6:b5:c2:f3:6b:19:c3: 0d:e4:ca:ec -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+N2GZKhq2F22O6qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNm ODUwMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZTdjMTE1ZjMtOGM0ZS00NmVkLWIxNDAtOGM0ZGQxNDE0OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ2JmxJNSx9iblWiAK6CLf9CwKo7nNDa14u4 UwUsgwHWSFlfWm/TkAS7B0KUCJUnT61jA4hpX5NsusUkSn84F/B/XsnzR+bxUHgc NB9XIe1ljjFy/Ev3sc2alLcOltylkIuo4bcCDOu9IBjozOhZP/MkU0vn/FoAI2Q6 VOZrHZSTI2XZFhQ75h6CQGUvEJUbN1DMoQnVbA5LC2Ebb3bnePJORB7dK9/zS6ws iQc8jWLIZ5pA98lyCoIpeuHyL2FfwDdAmOsOcjOnMmJ3GkmvOLsM49iSceJDYj0B YfVQaXe7M9gUNjoon+gjt2s+R4nqMKL/0uqHp61yqFTg50CA+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPVA5MxSMFz8xnyP08xYu0ZzlqJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kM2Jm OTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvNDA5ZGNiMWItOGUxMS0z MmYzLWIzNDUtYmExZTMzYTQ0NTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDNiZjkyM2QtNmM5ZC00NzEzLTg4 N2YtMWYzMDA3NWNmODUwL2QzYmY5MjNkLTZjOWQtNDcxMy04ODdmLTFmMzAwNzVj Zjg1MC5jcmwwHwYDVR0jBBgwFoAUW36UafuPFj/MySVSVEX7bbvaxbswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMw MDc1Y2Y4NTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAhYAwQC 0FYoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABrN4nxCh+bV0qOd1wkOENYqrmW5iEW/RVXUTRmKypzHsoP2 c16l0ZmR00CKopaSWde/NwhW1Rj5BuRKMB4Qv9pK9szyE3R+2qAojSxFT++GmQ+H JEdr1lIaGsGt4BrpQd6bD6VuLbNCfC3jp0LPbWt4K4W3Ze/kqnI7KL4OXTIrRNUR t5hWgiwg0amGdremRwFtJcGJnEI3UFv7dowUrsYTX757ygr/ODY6v9OOrwJevEqh r3nj26rVxX2uc102FPs1iqg0bRV60UO/eYRFMEhbKKN3fHOZibqQ9NaS1DqTnIfN b3pTm1k/eHws/ih/fXME6sIltrXC82sZww3kyuw= -----END CERTIFICATE-----Generated at Tue Oct 27 01:13:45 2026 by rpki-client