$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa File: 240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa (raw, json) Hash identifier: GEa5JhUpoB0Y+ycSb8FRePHHnjryEN2tv4ndOEQg3jI= Subject key identifier: 63:3E:69:25:9F:2C:5A:D3:0A:C1:56:39:3E:7D:78:4A:A0:5B:3C:8E Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584F498C2FDBD080DBE926D5F720 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40509 IP address blocks: 204.8.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:2f:db:d0:80:db:e9:26:d5:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b34e83ba-8f00-4d37-9ba9-4c2c072481d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:94:7f:8b:bd:79:72:57:e3:ea:26:76:81: 8f:99:39:68:64:07:b4:64:79:b2:d1:89:cf:fa:d8: cc:f2:18:50:c4:36:87:d2:dc:14:74:75:55:e9:25: 60:d2:e8:77:d0:85:d4:ab:f6:80:3e:50:97:bf:cc: 65:b4:9e:6d:41:b5:8b:b8:3e:b1:95:b7:64:c9:0c: 73:eb:c3:b5:4c:1a:6d:42:fe:5b:e1:dc:fc:20:26: 2e:64:3e:f6:81:64:3d:6c:78:df:cf:fe:5e:b5:7e: 6b:4d:ca:19:3c:4f:a2:6d:96:a4:23:f4:f7:c4:d9: cd:5b:8a:06:3e:28:4c:e2:29:71:a8:53:41:5d:aa: 60:bf:70:ad:d0:e1:ba:f0:fb:ef:81:43:8b:7e:ca: b4:85:df:e2:85:a7:ec:85:a3:85:a5:73:4a:2d:77: e8:dd:df:f5:03:80:72:25:08:6c:58:93:bc:f6:90: f3:a6:32:72:e4:5d:d7:cf:88:ca:97:09:09:1e:9c: bf:21:65:a9:6e:8e:fa:89:6d:aa:64:dd:d4:c8:c1: e9:88:45:9a:e8:da:e4:f0:ab:74:cc:72:fb:4f:38: a4:59:b2:c8:f5:4b:ea:ab:96:3d:09:ff:fc:09:83: d5:26:72:51:14:69:0c:a4:f5:50:b1:54:f7:b0:81: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3E:69:25:9F:2C:5A:D3:0A:C1:56:39:3E:7D:78:4A:A0:5B:3C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/240be6af-aadf-3f24-bebe-9ea38a0a6ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 204.8.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2a:1a:d7:80:d6:41:dc:ce:f1:76:52:0b:45:43:69:06:b7: 21:6c:20:72:97:d1:f3:2b:88:22:d1:d7:7c:cd:bf:52:2c:80: d1:86:64:ad:c2:9d:48:37:f5:06:f6:14:b4:f7:3f:bc:5a:80: 76:c6:e0:f2:92:75:2c:89:57:f8:68:51:ed:35:6d:af:06:c1: 7c:b2:51:4e:6b:fd:cd:33:fb:a9:b6:2a:3c:db:3f:d9:14:90: 12:5f:03:af:0f:d5:a1:c3:6c:0a:6b:45:df:92:6e:99:0d:fa: 26:3e:e9:da:ee:8f:f5:01:5d:96:dd:dc:49:61:03:c9:06:73: 4d:ee:58:d4:2b:17:a8:b2:f8:61:0b:ff:7d:c2:dc:58:23:af: 36:2b:2a:90:fe:00:26:ae:de:9b:88:76:13:aa:5e:e1:c6:c8: 16:7b:59:be:0b:5f:b5:28:66:00:5e:07:ae:75:8d:ae:0e:29: 30:56:23:a9:9e:fc:b9:b5:30:8d:3f:15:67:a4:20:6d:7f:2b: a1:b9:2e:6a:b2:17:cb:0d:5c:0e:f8:10:83:2b:e5:a0:d8:76: 8b:1f:3f:2d:6e:b4:9a:52:87:a5:aa:47:ec:70:99:00:c9:f0: 52:0d:56:d5:a7:11:9e:29:7c:b1:89:53:ac:38:a3:56:49:47: db:bf:a0:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjC/b0IDb6SbV9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjM0ZTgzYmEtOGYwMC00ZDM3LTliYTktNGMyYzA3MjQ4MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqiUf4u9eXJX4+omdoGPmTloZAe0ZHmy0YnP +tjM8hhQxDaH0twUdHVV6SVg0uh30IXUq/aAPlCXv8xltJ5tQbWLuD6xlbdkyQxz 68O1TBptQv5b4dz8ICYuZD72gWQ9bHjfz/5etX5rTcoZPE+ibZakI/T3xNnNW4oG PihM4ilxqFNBXapgv3Ct0OG68PvvgUOLfsq0hd/ihafshaOFpXNKLXfo3d/1A4By JQhsWJO89pDzpjJy5F3Xz4jKlwkJHpy/IWWpbo76iW2qZN3UyMHpiEWa6Nrk8Kt0 zHL7TzikWbLI9Uvqq5Y9Cf/8CYPVJnJRFGkMpPVQsVT3sIF6nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM+aSWfLFrTCsFWOT59eEqgWzyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvMjQwYmU2YWYtYWFkZi0z ZjI0LWJlYmUtOWVhMzhhMGE2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYqGteA1kHczvF2UgtFQ2kGtyFsIHKX0fMriCLR13zNv1IsgNGGZK3C nUg39Qb2FLT3P7xagHbG4PKSdSyJV/hoUe01ba8GwXyyUU5r/c0z+6m2KjzbP9kU kBJfA68P1aHDbAprRd+SbpkN+iY+6druj/UBXZbd3ElhA8kGc03uWNQrF6iy+GEL /33C3FgjrzYrKpD+ACau3puIdhOqXuHGyBZ7Wb4LX7UoZgBeB651ja4OKTBWI6me /Lm1MI0/FWekIG1/K6G5LmqyF8sNXA74EIMr5aDYdosfPy1utJpSh6WqR+xwmQDJ 8FINVtWnEZ4pfLGJU6w4o1ZJR9u/oLk= -----END CERTIFICATE-----Generated at Sun Oct 11 17:13:48 2026 by rpki-client