$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa File: 658f8956-451b-3b57-883e-5ede69e83e94.roa (raw, json) Hash identifier: cYbT9SpzHjN5ya+DLw7RtxVqwggepQHyoYRRDiLYGAs= Subject key identifier: E8:58:FE:30:AB:23:0F:14:58:EE:8C:40:12:FB:76:F3:05:60:9A:79 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584F7E7DBB597B48EE51881D6C80 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 3737 IP address blocks: 204.186.0.0/16 maxlen: 24 209.50.128.0/19 maxlen: 24 209.173.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:bb:59:7b:48:ee:51:88:1d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=b535dc38-6c7b-481c-90e4-c37a1d5d1d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:d8:89:05:40:5f:9b:84:ab:dc:48:5e:7a: f0:77:32:a5:74:75:f9:1b:8a:13:7d:bf:ae:ae:94: 1f:ad:84:7e:0d:9c:72:5c:20:bd:77:c2:8b:eb:c5: 6f:bc:62:18:c4:ab:0c:48:bd:82:62:c7:03:8f:33: 32:aa:cb:2b:58:1a:f6:38:c1:22:ff:1c:6b:af:6e: a7:01:3b:6f:ae:17:89:7b:98:bb:89:23:f8:91:83: ce:1e:86:31:b3:e4:11:58:8c:e9:1f:6e:5f:93:85: d6:01:e4:24:31:60:d5:1b:53:1d:3c:27:d4:d0:64: 86:ca:bf:83:12:31:05:3e:55:4c:d8:11:b1:16:b8: 0e:91:08:8f:79:fd:74:45:f9:e2:06:2d:75:1a:22: f0:03:77:26:80:da:aa:aa:8d:44:fa:a3:2a:32:e8: a0:18:8e:60:ba:36:df:40:de:e4:91:33:7c:a9:51: 2f:33:33:89:61:a8:56:57:7c:b4:c9:78:b7:0c:16: 66:39:f5:91:ea:ca:4f:a9:43:66:6b:fd:8a:11:6f: 54:15:f0:82:a1:7b:b6:a4:1d:de:3b:2b:13:76:c9: f0:ea:bd:3c:87:d3:24:24:11:a8:67:d4:04:46:d3: d9:f2:fa:bb:d6:a9:f5:a0:dc:4a:9c:4f:35:44:37: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:FE:30:AB:23:0F:14:58:EE:8C:40:12:FB:76:F3:05:60:9A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 204.186.0.0/16 209.50.128.0/19 209.173.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7b:fd:04:e0:fb:23:35:76:ce:45:25:1c:01:6b:12:dd:7f: db:e6:ba:0e:20:00:57:cc:95:46:e2:57:aa:35:dd:52:48:3f: 14:c5:7c:94:98:94:b7:60:94:bf:bc:ae:54:c2:79:31:60:2e: 75:85:97:eb:ca:f0:99:bc:eb:9e:fc:75:f2:b0:3b:50:ea:72: 8a:cc:8e:47:20:77:8a:22:a2:55:61:ef:b6:72:95:38:d2:fe: 06:f5:eb:18:44:ae:fb:42:b9:f1:71:47:d7:98:33:52:78:35: 2e:d1:5f:84:e5:44:f6:10:00:ed:57:88:55:27:f3:95:fa:8e: 16:5f:87:cc:57:86:89:62:a7:9a:1a:d7:26:8c:c7:14:fb:8d: 7c:f2:c0:f6:69:fc:61:ec:b9:2c:ff:a1:03:91:e0:a7:77:50: 52:55:a8:d1:00:df:3a:6d:62:85:cd:f3:cb:c8:0e:0b:b1:af: 51:48:4a:43:19:c4:fa:c0:64:7d:45:8d:9e:22:be:cf:8d:5b: 1e:ab:ed:ff:a0:32:5b:9d:03:8d:6d:c7:a4:dd:bd:a2:6d:16: 1f:ae:89:94:ff:07:58:a2:67:52:ae:16:99:62:ea:ee:2b:6b: 50:68:e6:d8:42:2b:b6:f4:ae:df:8c:d4:f1:9e:34:28:3e:7a: 6b:bc:72:51 -----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE9+fbtZe0juUYgdbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YjUzNWRjMzgtNmM3Yi00ODFjLTkwZTQtYzM3YTFkNWQxZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkprYiQVAX5uEq9xIXnrwdzKldHX5G4oTfb+u rpQfrYR+DZxyXCC9d8KL68VvvGIYxKsMSL2CYscDjzMyqssrWBr2OMEi/xxrr26n ATtvrheJe5i7iSP4kYPOHoYxs+QRWIzpH25fk4XWAeQkMWDVG1MdPCfU0GSGyr+D EjEFPlVM2BGxFrgOkQiPef10RfniBi11GiLwA3cmgNqqqo1E+qMqMuigGI5gujbf QN7kkTN8qVEvMzOJYahWV3y0yXi3DBZmOfWR6spPqUNma/2KEW9UFfCCoXu2pB3e OysTdsnw6r08h9MkJBGoZ9QERtPZ8vq71qn1oNxKnE81RDd1BwIDAQABo4IDYDCC A1wwHQYDVR0OBBYEFOhY/jCrIw8UWO6MQBL7dvMFYJp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvNjU4Zjg5NTYtNDUxYi0z YjU3LTg4M2UtNWVkZTY5ZTgzZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAzLoDBAXR MoADBAXRrQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAGnv9BOD7IzV2zkUlHAFrEt1/2+a6DiAAV8yVRuJX qjXdUkg/FMV8lJiUt2CUv7yuVMJ5MWAudYWX68rwmbzrnvx18rA7UOpyisyORyB3 iiKiVWHvtnKVONL+BvXrGESu+0K58XFH15gzUng1LtFfhOVE9hAA7VeIVSfzlfqO Fl+HzFeGiWKnmhrXJozHFPuNfPLA9mn8Yey5LP+hA5Hgp3dQUlWo0QDfOm1ihc3z y8gOC7GvUUhKQxnE+sBkfUWNniK+z41bHqvt/6AyW50DjW3HpN29om0WH66JlP8H WKJnUq4WmWLq7itrUGjm2EIrtvSu34zU8Z40KD56a7xyUQ== -----END CERTIFICATE-----Generated at Wed Oct 14 11:55:23 2026 by rpki-client