$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa File: d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa (raw, json) Hash identifier: SVotrbqWmK1/8a+ipqutcAvelUx28USJKAIhuoVGqEk= Subject key identifier: BF:6B:4A:02:6B:09:87:70:FD:A7:81:B3:DC:4D:F1:CE:2C:BE:40:D1 Certificate issuer: /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Certificate serial: 010D0C9F4328584F71ED8BF9E68B29F6B55596D0 Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 394770 IP address blocks: 204.58.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:8b:f9:e6:8b:29:f6:b5:55:96:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=bcc8fae7-5199-450f-a1ca-63330b6f5a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:23:ac:20:a1:83:b2:2b:62:2d:8d:36:2c: 28:a4:07:81:c7:11:7d:73:ac:c6:60:c4:90:d1:81: 6f:b5:33:c9:3d:bb:8a:41:c6:2b:42:83:f1:d0:4c: 8c:2d:04:d4:6e:38:51:d1:08:31:56:40:2a:25:25: c8:15:70:e6:b3:d6:bd:dd:f2:cc:a7:4c:11:0b:ef: 63:f0:f2:fd:d2:b3:13:c8:d8:72:fa:72:5e:53:4c: ff:e7:02:fb:74:38:b1:87:6d:a4:94:66:6f:e0:d2: b9:2d:26:23:e1:d9:81:23:6e:c8:d3:b5:6f:d2:0d: 3a:8e:75:e0:b9:7c:f0:71:8c:84:de:62:26:f2:3a: f8:42:5b:59:b3:cc:c0:61:d3:6b:58:4b:a9:36:02: 8b:50:9e:4a:5b:3f:fd:68:cb:6a:0c:21:64:de:03: b9:1e:83:8b:04:f5:c4:28:90:9c:65:b7:27:a6:92: 4e:7d:b4:06:72:83:f2:05:d9:c7:fa:13:4a:93:f6: 90:f8:36:77:ef:c4:59:dc:79:de:04:12:53:29:79: 77:06:7c:1c:d5:c3:ea:c5:cd:c2:5c:85:ac:6e:82: 7b:c5:7a:9a:c7:4a:b8:a1:35:e4:d9:be:41:1c:94: 22:0a:1b:2d:01:b8:84:dd:fe:32:cf:b9:78:ef:81: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6B:4A:02:6B:09:87:70:FD:A7:81:B3:DC:4D:F1:CE:2C:BE:40:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/d7ff4307-da19-3b8f-81a1-5a10ab70d923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl X509v3 Authority Key Identifier: keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer sbgp-ipAddrBlock: critical IPv4: 204.58.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:16:61:97:b4:ff:8c:19:f6:98:1f:fe:2a:fe:95:a2:b3:75: 78:a7:1b:86:ab:f0:d6:47:6e:03:1e:b8:1e:48:6a:d7:79:8e: 68:77:fc:cc:39:db:cf:31:49:06:d2:44:98:56:a2:b4:fe:fe: 29:41:a9:f7:c1:05:d7:16:99:0f:d1:ed:85:b7:b9:d5:14:d9: c2:78:59:2d:be:25:9f:79:67:8b:75:2a:8f:b7:30:c6:3f:d1: e7:f1:ef:66:7a:32:61:21:86:10:73:fb:af:61:94:1b:37:99: f4:a3:39:3f:cc:ab:3d:19:00:92:71:0d:b5:25:cd:4c:06:5e: 82:c8:33:f8:5e:f6:6c:4f:fb:93:22:67:38:3d:88:23:9b:f1: 86:61:a6:2a:9a:0b:1c:32:34:b5:40:58:8e:1b:71:b3:39:67: b4:b1:4d:b0:4d:37:3c:7d:ee:f0:d8:e2:f0:1e:e5:4c:3d:90: 1d:7d:61:e8:09:61:71:50:5c:9d:39:f2:75:e8:72:92:93:f9: bf:a3:0a:71:28:32:32:f8:e6:13:32:74:ef:3a:bd:2c:89:b0: e6:41:13:3d:47:b5:e3:d6:07:94:51:da:b1:b7:91:4d:9c:e3: 98:6d:88:db:97:5a:51:73:1e:ea:66:b4:57:fa:3d:4e:b0:3f: b4:d8:90:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Yv55osp9rVVltAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1ZTZlODctNWY2NS00OTNiLWI2NjQtNWExMjgxOWNk YWE0MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YmNjOGZhZTctNTE5OS00NTBmLWExY2EtNjMzMzBiNmY1YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhgjrCChg7IrYi2NNiwopAeBxxF9c6zGYMSQ 0YFvtTPJPbuKQcYrQoPx0EyMLQTUbjhR0QgxVkAqJSXIFXDms9a93fLMp0wRC+9j 8PL90rMTyNhy+nJeU0z/5wL7dDixh22klGZv4NK5LSYj4dmBI27I07Vv0g06jnXg uXzwcYyE3mIm8jr4QltZs8zAYdNrWEupNgKLUJ5KWz/9aMtqDCFk3gO5HoOLBPXE KJCcZbcnppJOfbQGcoPyBdnH+hNKk/aQ+DZ378RZ3HneBBJTKXl3Bnwc1cPqxc3C XIWsboJ7xXqax0q4oTXk2b5BHJQiChstAbiE3f4yz7l474HQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9rSgJrCYdw/aeBs9xN8c4svkDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVl NmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEyODE5Y2RhYTQvZDdmZjQzMDctZGExOS0z YjhmLTgxYTEtNWExMGFiNzBkOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWU1ZTZlODctNWY2NS00OTNiLWI2 NjQtNWExMjgxOWNkYWE0LzllNWU2ZTg3LTVmNjUtNDkzYi1iNjY0LTVhMTI4MTlj ZGFhNC5jcmwwHwYDVR0jBBgwFoAUl9Icz4rNdOOPsJMgf8bCkeBFoTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVlNmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEy ODE5Y2RhYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcWYZe0/4wZ9pgf/ir+laKzdXinG4ar8NZHbgMeuB5Iatd5jmh3/Mw5 288xSQbSRJhWorT+/ilBqffBBdcWmQ/R7YW3udUU2cJ4WS2+JZ95Z4t1Ko+3MMY/ 0efx72Z6MmEhhhBz+69hlBs3mfSjOT/Mqz0ZAJJxDbUlzUwGXoLIM/he9mxP+5Mi Zzg9iCOb8YZhpiqaCxwyNLVAWI4bcbM5Z7SxTbBNNzx97vDY4vAe5Uw9kB19YegJ YXFQXJ058nXocpKT+b+jCnEoMjL45hMydO86vSyJsOZBEz1HtePWB5RR2rG3kU2c 45htiNuXWlFzHupmtFf6PU6wP7TYkPE= -----END CERTIFICATE-----Generated at Mon Oct 26 01:57:23 2026 by rpki-client