$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa File: 333c4625-2011-380b-81cd-9ac18b847081.roa (raw, json) Hash identifier: eMKmafw+AQuiXCE05DAfnpSeJJ37Z1ZU7T4+h4QJons= Subject key identifier: 2B:63:3F:12:4A:8E:0C:10:72:FE:8C:16:88:28:D9:0B:DA:23:37:9A Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584F7E7DBC196A89EB25B1923300 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 62720 IP address blocks: 204.186.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:bc:19:6a:89:eb:25:b1:92:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=4f9c36ee-9d7b-44fd-a865-7489e82ebbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:9e:5a:7d:4b:20:a6:ad:f7:6c:41:34:b5: 92:78:5f:19:fd:24:f7:9f:b2:08:d9:b4:34:9a:23: 11:19:c5:37:83:6f:2d:c2:a5:51:62:05:ba:b8:c1: 26:1c:45:a4:88:a7:ce:8c:20:16:17:6b:f1:e3:c3: ed:96:fa:73:7b:62:0e:6e:bf:b6:c7:68:4a:4d:5a: 50:bb:c8:b8:e6:bd:ad:23:31:ae:5b:19:02:1e:37: a6:d9:22:46:73:db:eb:c3:9f:de:3e:48:12:9e:27: 6c:4b:59:a9:64:9d:9d:d6:4b:96:34:b6:f5:ea:cd: 9b:45:e9:b4:e5:0c:fc:27:34:b0:d4:2f:f4:c6:98: a3:fa:24:91:c8:4f:4f:d8:fe:11:d9:be:e2:2c:39: e5:57:0a:fd:5a:1e:67:25:10:ba:4c:64:5d:c9:99: 17:c7:97:22:a7:4a:b0:a2:58:c0:bb:2d:f0:3e:27: d3:57:b0:4b:df:72:a1:b5:03:a6:fb:e7:89:b1:2b: ba:5a:e5:5b:37:a5:fb:df:f3:23:fe:d5:20:25:7a: 8c:e6:21:07:1e:1a:98:b9:3f:0e:ce:7a:bd:23:ba: b2:a3:ef:94:01:47:19:ba:93:3b:08:0c:fc:b2:76: 0d:ae:f8:c8:95:d9:eb:d0:ee:29:9c:90:68:36:56: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:3F:12:4A:8E:0C:10:72:FE:8C:16:88:28:D9:0B:DA:23:37:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 204.186.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:6a:28:3b:3c:77:ca:5c:6d:21:05:11:64:2a:76:54:77:6b: 7e:89:1b:73:1c:ca:14:f0:7d:92:4d:db:bd:3c:67:91:ca:47: 77:e4:17:3b:04:3e:71:dc:14:28:6c:24:b2:a3:88:ef:52:b4: b5:ab:ee:6f:d0:60:1f:0f:bf:2b:7e:74:a7:ad:cf:c2:44:c0: 43:31:69:29:aa:d5:ed:08:00:02:0a:51:dd:06:5e:dd:c0:34: ac:1c:88:4e:4f:cc:57:1c:5f:d5:9f:59:ef:30:bf:a1:04:ac: 58:df:81:50:0d:39:b8:64:18:e2:c6:02:0b:05:12:ef:1b:4f: 15:d9:3e:f2:8e:df:3a:11:db:1c:37:7b:6a:a9:d3:3a:8b:37: fd:02:2c:66:f5:1e:70:b2:b3:54:29:3a:99:69:d1:b6:58:fe: d0:d7:8b:f6:e3:14:1e:81:5d:30:32:3c:fc:80:a7:45:9b:51: 94:e2:c8:17:45:67:5c:08:80:2f:af:b0:32:cb:d0:4c:8c:8c: 86:e9:63:46:85:4e:7f:1d:16:56:29:9a:2b:a6:15:cb:10:cb: d2:06:f1:1a:0c:cb:b5:75:db:c2:a3:8c:f5:01:3f:38:f4:89: 70:4b:88:ea:cf:18:87:00:76:57:08:df:a8:96:61:bc:c2:f0: 04:e8:c9:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbwZaonrJbGSMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NGY5YzM2ZWUtOWQ3Yi00NGZkLWE4NjUtNzQ4OWU4MmViYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB2eWn1LIKat92xBNLWSeF8Z/ST3n7II2bQ0 miMRGcU3g28twqVRYgW6uMEmHEWkiKfOjCAWF2vx48Ptlvpze2IObr+2x2hKTVpQ u8i45r2tIzGuWxkCHjem2SJGc9vrw5/ePkgSnidsS1mpZJ2d1kuWNLb16s2bRem0 5Qz8JzSw1C/0xpij+iSRyE9P2P4R2b7iLDnlVwr9Wh5nJRC6TGRdyZkXx5cip0qw oljAuy3wPifTV7BL33KhtQOm++eJsSu6WuVbN6X73/Mj/tUgJXqM5iEHHhqYuT8O znq9I7qyo++UAUcZupM7CAz8snYNrvjIldnr0O4pnJBoNlavgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtjPxJKjgwQcv6MFogo2QvaIzeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMzMzYzQ2MjUtMjAxMS0z ODBiLTgxY2QtOWFjMThiODQ3MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpqKDs8d8pcbSEFEWQqdlR3a36JG3McyhTwfZJN2708Z5HKR3fkFzsE PnHcFChsJLKjiO9StLWr7m/QYB8Pvyt+dKetz8JEwEMxaSmq1e0IAAIKUd0GXt3A NKwciE5PzFccX9WfWe8wv6EErFjfgVANObhkGOLGAgsFEu8bTxXZPvKO3zoR2xw3 e2qp0zqLN/0CLGb1HnCys1QpOplp0bZY/tDXi/bjFB6BXTAyPPyAp0WbUZTiyBdF Z1wIgC+vsDLL0EyMjIbpY0aFTn8dFlYpmiumFcsQy9IG8RoMy7V128KjjPUBPzj0 iXBLiOrPGIcAdlcI36iWYbzC8AToyb4= -----END CERTIFICATE-----Generated at Sun Nov 1 03:03:48 2026 by rpki-client