$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/dbfccde8-68cd-3b37-92ba-ad228cee9fd9.roa File: dbfccde8-68cd-3b37-92ba-ad228cee9fd9.roa (raw, json) Hash identifier: wtPmei5pYHXUQYnSxiFWsqeKXgTqgNRSUYHNJJpLFao= Subject key identifier: 55:19:7D:49:CC:D3:A6:2D:7E:35:0E:A6:D4:49:6C:49:AF:B5:59:E3 Certificate issuer: /CN=2af9df74-e88e-4433-b765-051efef6177a Certificate serial: 010D0C9F4328584F576815688ABF90680388E650 Authority key identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/dbfccde8-68cd-3b37-92ba-ad228cee9fd9.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 1041 IP address blocks: 205.203.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:15:68:8a:bf:90:68:03:88:e6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af9df74-e88e-4433-b765-051efef6177a Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=2ae4da15-a7c7-4eb4-9a60-915a00eb8958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:d2:8b:42:f8:80:e1:02:6d:fb:68:d8:d4: c1:c9:7b:2f:47:28:06:16:da:5e:5d:ba:84:75:ff: a2:88:17:e2:a2:74:4d:44:b9:fe:87:a6:21:a4:4d: 0a:ec:fc:ff:a2:20:ac:ef:8f:46:10:53:7f:2e:79: df:aa:a3:3a:ce:dd:43:b7:88:00:ab:6f:35:70:9c: 73:51:bc:5c:37:85:2c:ee:80:4a:85:40:2e:dc:93: 64:5a:21:9f:47:4f:f5:33:6a:d6:50:3b:83:0e:8a: 5e:99:18:0f:d5:05:29:31:f0:fa:15:0f:9c:b7:1b: d2:59:54:d3:58:37:6c:45:80:11:1b:d1:70:51:48: 27:9d:f6:42:99:6d:d7:3f:cb:74:9a:d4:eb:18:3e: b5:ec:51:3f:89:34:de:28:ee:fc:92:05:a4:37:49: 61:14:13:8c:3a:69:a6:a3:b2:11:e3:d3:c7:8b:5a: 09:5f:50:5d:32:df:e7:f2:12:27:cf:55:7f:4c:ef: 25:68:1e:f0:cd:23:98:1e:06:ee:85:19:c7:79:e4: 0a:39:6a:da:28:28:13:0c:6f:5f:76:82:47:62:b5: 27:82:24:bc:5b:50:55:82:ae:3f:3f:fd:9e:be:27: eb:11:b0:5d:9f:87:50:5b:d9:25:81:e8:81:2e:08: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:7D:49:CC:D3:A6:2D:7E:35:0E:A6:D4:49:6C:49:AF:B5:59:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/dbfccde8-68cd-3b37-92ba-ad228cee9fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl X509v3 Authority Key Identifier: keyid:8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer sbgp-ipAddrBlock: critical IPv4: 205.203.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:60:61:37:58:75:e8:37:72:27:ec:f7:13:b5:97:0a:99:b9: 3e:23:a1:07:a3:a9:92:cf:29:fc:c5:b5:be:67:ec:3d:dd:01: 56:32:43:e4:ff:13:bb:c6:9f:aa:9b:97:87:59:43:8b:ed:74: e5:af:11:49:83:8a:79:0d:06:9d:6e:0a:d1:8a:57:ac:7d:58: ca:9d:a8:e7:9b:85:10:45:a9:f0:99:1e:be:d7:fd:37:f7:c4: 95:38:b2:da:8c:68:01:48:22:cf:99:41:f0:24:51:fa:98:c4: a7:82:20:b8:74:fc:c4:dd:9f:25:e3:3a:5b:9b:81:b5:b7:44: 02:a7:53:ce:78:11:c6:d0:3b:1e:66:b6:c4:16:77:b1:e1:ab: 02:25:b7:28:d0:2b:ab:e1:68:ce:0c:91:82:38:97:ee:8d:a6: 38:e4:64:cc:cc:5b:3a:73:20:9e:70:dd:47:ad:ca:d5:48:fd: b9:bd:d0:4b:4a:75:60:de:4e:34:b6:61:b2:c4:61:0b:e0:31: 10:56:20:c9:52:9f:78:fe:5e:ee:f8:62:5a:7d:ff:a3:ee:39: ac:77:6b:67:0b:70:cf:65:d2:e2:b6:03:56:7f:4c:fa:83:79: b6:61:2f:d5:72:f3:10:c8:5b:45:ea:ae:60:04:e8:b5:5d:ee: 07:eb:bb:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaBVoir+QaAOI5lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFmOWRmNzQtZTg4ZS00NDMzLWI3NjUtMDUxZWZlZjYx NzdhMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MmFlNGRhMTUtYTdjNy00ZWI0LTlhNjAtOTE1YTAwZWI4OTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzLSi0L4gOECbfto2NTByXsvRygGFtpeXbqE df+iiBfionRNRLn+h6YhpE0K7Pz/oiCs749GEFN/LnnfqqM6zt1Dt4gAq281cJxz UbxcN4Us7oBKhUAu3JNkWiGfR0/1M2rWUDuDDopemRgP1QUpMfD6FQ+ctxvSWVTT WDdsRYARG9FwUUgnnfZCmW3XP8t0mtTrGD617FE/iTTeKO78kgWkN0lhFBOMOmmm o7IR49PHi1oJX1BdMt/n8hInz1V/TO8laB7wzSOYHgbuhRnHeeQKOWraKCgTDG9f doJHYrUngiS8W1BVgq4/P/2evifrEbBdn4dQW9klgeiBLgjOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUZfUnM06YtfjUOptRJbEmvtVnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5 ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFlZmVmNjE3N2EvZGJmY2NkZTgtNjhjZC0z YjM3LTkyYmEtYWQyMjhjZWU5ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmFmOWRmNzQtZTg4ZS00NDMzLWI3 NjUtMDUxZWZlZjYxNzdhLzJhZjlkZjc0LWU4OGUtNDQzMy1iNzY1LTA1MWVmZWY2 MTc3YS5jcmwwHwYDVR0jBBgwFoAUiyZaUSN12FMLO/GXY5KWF7AiEBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFl ZmVmNjE3N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzctYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBgYTdYdeg3cifs9xO1lwqZuT4joQejqZLPKfzFtb5n7D3dAVYyQ+T/ E7vGn6qbl4dZQ4vtdOWvEUmDinkNBp1uCtGKV6x9WMqdqOebhRBFqfCZHr7X/Tf3 xJU4stqMaAFIIs+ZQfAkUfqYxKeCILh0/MTdnyXjOlubgbW3RAKnU854EcbQOx5m tsQWd7HhqwIltyjQK6vhaM4MkYI4l+6NpjjkZMzMWzpzIJ5w3UetytVI/bm90EtK dWDeTjS2YbLEYQvgMRBWIMlSn3j+Xu74Ylp9/6PuOax3a2cLcM9l0uK2A1Z/TPqD ebZhL9Vy8xDIW0XqrmAE6LVd7gfru20= -----END CERTIFICATE-----Generated at Sat Oct 24 16:22:47 2026 by rpki-client