$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa File: 658f8956-451b-3b57-883e-5ede69e83e94.roa (raw, json) Hash identifier: V97RBkPB82YpuXIsvb9ztt/wQ5MfquTikspJdpRH9Mg= Subject key identifier: AB:E4:74:30:51:C0:34:BB:79:E5:A1:2F:41:3A:B9:6A:33:31:2A:94 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584EDC91FAB708DD4CE7E7689240 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 3737 IP address blocks: 204.186.0.0/16 maxlen: 24 209.50.128.0/19 maxlen: 24 209.173.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:fa:b7:08:dd:4c:e7:e7:68:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=3e89b22a-679d-4fc7-91f8-faf1ca7c80f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:30:e3:1d:71:7b:19:5f:14:ae:33:64:a6: 60:4f:02:13:45:28:d8:35:47:a0:d5:aa:62:3b:67: df:e8:84:eb:c3:e9:c5:63:00:68:1e:3d:7b:48:5c: 67:cc:69:4a:ae:fc:fb:50:5f:76:a0:47:0a:9b:bd: b7:2b:80:96:b8:29:ff:eb:7d:93:47:d0:d2:a8:1e: 0a:74:82:76:1a:73:96:91:0b:14:74:1a:34:96:09: 99:bc:75:e9:e3:bc:f6:aa:4e:84:22:b8:25:20:b6: 84:29:3b:a4:ca:95:f8:78:c0:77:a3:e6:0d:6b:fe: 3d:20:53:b5:e5:77:bb:26:d4:c0:bd:e5:7d:21:7a: 13:7f:62:d5:fb:c8:01:19:3d:c2:cd:c5:bf:21:ff: 32:6f:7b:99:01:77:5f:4f:36:8a:9b:b5:3f:0b:4a: c1:e9:96:40:9a:c8:e1:91:9d:ce:e9:41:f8:08:57: cc:23:59:41:0f:a9:b5:f9:97:31:7c:aa:e2:35:92: 27:5e:9d:10:4e:bf:00:dc:7f:b2:ed:60:2f:ec:64: 02:68:32:c0:04:13:50:a7:71:0a:8b:52:6a:bf:c4: c3:54:da:8d:08:f9:5f:3f:c7:4c:38:17:6b:71:81: 3c:40:8d:b4:28:31:68:22:8b:13:aa:71:cf:a4:d0: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E4:74:30:51:C0:34:BB:79:E5:A1:2F:41:3A:B9:6A:33:31:2A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 204.186.0.0/16 209.50.128.0/19 209.173.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e9:64:3d:12:2a:50:89:69:3d:80:a4:07:fd:0c:91:4a:ae: 68:e8:12:5f:a8:53:e2:a7:49:e4:1d:78:52:32:31:f4:7c:6a: c5:7e:d7:83:8b:55:e9:0e:93:5a:67:fa:e5:53:42:eb:60:07: 94:c8:79:4f:11:f0:84:f4:ef:69:e8:a2:30:26:11:4a:b0:cf: cd:b9:d2:c4:4f:d9:95:94:2d:ea:3c:eb:bb:2e:65:21:bc:17: 49:18:65:78:a9:cd:9a:9c:ed:d9:ad:38:cf:c4:b7:d5:ef:8b: 97:eb:69:fe:00:0f:81:6b:a6:ed:8b:33:b5:a4:75:81:c2:c4: bf:d4:17:2e:ee:c4:c7:01:26:48:2e:87:52:97:cb:5f:54:2e: 01:7e:a0:6b:d1:bf:86:56:d8:27:b6:da:58:35:8b:d1:5a:fc: 52:31:b6:e0:ca:53:8a:63:5a:e2:f6:e5:0c:a6:51:f7:e5:7c: b2:9e:b9:6b:a6:d5:c6:00:f1:af:21:14:a8:99:19:21:b8:79: 44:2c:52:16:63:11:46:96:2c:9e:8a:ef:74:c9:78:74:c3:ef: c0:81:07:da:1a:e6:4b:c7:ae:15:a2:da:23:f8:17:97:0f:49: 46:2a:b6:46:40:21:49:e4:81:b3:26:5a:06:83:15:79:1b:b1: e3:20:cd:dd -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE7ckfq3CN1M5+dokkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk M2U4OWIyMmEtNjc5ZC00ZmM3LTkxZjgtZmFmMWNhN2M4MGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3sw4x1xexlfFK4zZKZgTwITRSjYNUeg1api O2ff6ITrw+nFYwBoHj17SFxnzGlKrvz7UF92oEcKm723K4CWuCn/632TR9DSqB4K dIJ2GnOWkQsUdBo0lgmZvHXp47z2qk6EIrglILaEKTukypX4eMB3o+YNa/49IFO1 5Xe7JtTAveV9IXoTf2LV+8gBGT3CzcW/If8yb3uZAXdfTzaKm7U/C0rB6ZZAmsjh kZ3O6UH4CFfMI1lBD6m1+ZcxfKriNZInXp0QTr8A3H+y7WAv7GQCaDLABBNQp3EK i1Jqv8TDVNqNCPlfP8dMOBdrcYE8QI20KDFoIosTqnHPpNBciQIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFKvkdDBRwDS7eeWhL0E6uWozMSqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNjU4Zjg5NTYtNDUxYi0z YjU3LTg4M2UtNWVkZTY5ZTgzZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAzLoDBAXR MoADBAXRrQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAfulkPRIqUIlpPYCkB/0MkUquaOgSX6hT4qdJ5B14 UjIx9HxqxX7Xg4tV6Q6TWmf65VNC62AHlMh5TxHwhPTvaeiiMCYRSrDPzbnSxE/Z lZQt6jzruy5lIbwXSRhleKnNmpzt2a04z8S31e+Ll+tp/gAPgWum7YsztaR1gcLE v9QXLu7ExwEmSC6HUpfLX1QuAX6ga9G/hlbYJ7baWDWL0Vr8UjG24MpTimNa4vbl DKZR9+V8sp65a6bVxgDxryEUqJkZIbh5RCxSFmMRRpYsnorvdMl4dMPvwIEH2hrm S8euFaLaI/gXlw9JRiq2RkAhSeSBsyZaBoMVeRux4yDN3Q== -----END CERTIFICATE-----Generated at Fri Aug 21 23:26:42 2026 by rpki-client