$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ff67295-2903-37cc-80d5-80d97d8c6b39.roa File: 9ff67295-2903-37cc-80d5-80d97d8c6b39.roa (raw, json) Hash identifier: ve13WiYR3NtG1RjUBA+ImltwfQNeYQaDJMM7CKs42mY= Subject key identifier: 76:96:69:0F:63:39:D4:31:C7:85:EA:28:15:CD:88:4A:88:E3:CB:40 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584F6C583AC16BD08B71E3636D40 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ff67295-2903-37cc-80d5-80d97d8c6b39.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 8014 IP address blocks: 204.236.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:3a:c1:6b:d0:8b:71:e3:63:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=fb0ed93e-6c2e-4e73-b46b-f3914f6cabb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:e4:37:9e:8e:53:b1:d3:91:37:55:54:e0: f2:6e:af:d3:87:f2:e2:c7:d2:a5:c3:09:4c:25:a1: 6e:4a:27:90:31:a0:04:22:47:2a:ec:eb:55:c0:a5: e8:7a:a5:21:b2:f2:f3:d9:a8:ae:c9:fd:4f:5e:f3: a5:25:4b:a1:dc:f1:24:d4:ae:d1:ee:8e:9d:fa:bd: 61:36:3d:6c:24:48:aa:3a:ee:b6:0e:34:87:a6:78: 20:98:bd:2a:60:e3:d0:85:b1:1a:61:34:31:17:0d: e6:93:e3:12:11:46:49:34:b3:df:94:98:31:c2:de: 16:20:52:05:62:67:7f:fa:9f:42:97:36:8d:79:23: e7:f2:84:b8:a2:09:b1:4c:db:02:6f:31:dd:69:a9: 86:f0:c9:9c:e7:b1:58:a3:b8:d6:20:8c:65:bd:93: 30:d7:91:34:7b:48:f9:ef:71:d6:85:7f:63:f4:77: cb:de:3f:1e:2c:88:23:2b:46:49:39:80:0a:3e:9b: 89:07:f6:5d:f1:13:cc:90:ec:50:64:b0:9b:a9:e3: 2c:7c:31:56:d5:42:b9:0a:8a:8a:2a:ae:11:b4:d9: 33:03:de:8d:5e:7f:de:f5:03:f7:c6:bb:4b:6d:21: 97:0a:38:74:f5:c0:03:73:de:b9:57:ff:f9:f7:2e: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:69:0F:63:39:D4:31:C7:85:EA:28:15:CD:88:4A:88:E3:CB:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ff67295-2903-37cc-80d5-80d97d8c6b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cc:db:8b:ad:87:71:c5:23:eb:e9:f9:05:e9:cb:14:b4:a9: 20:51:92:b7:52:2f:57:07:e5:82:25:6c:ce:cf:15:fa:b2:97: eb:1f:e6:90:0d:81:ff:e7:5d:8a:36:c0:5a:2d:60:91:95:bb: 69:0a:cb:5d:dd:cf:d8:6f:7e:d3:82:88:79:ad:e5:36:78:0a: c7:0f:39:ff:2a:85:4c:b8:57:97:35:3e:b7:00:77:9a:e7:b2: 32:3c:63:fb:ca:3d:36:db:03:43:6a:79:55:9c:6f:f1:25:e4: d6:60:15:24:66:a0:c5:d0:df:67:94:9e:ba:62:b8:be:c2:cc: 17:4c:9c:28:9e:ae:d6:af:d1:eb:4c:95:7e:0f:b0:71:9a:4b: 3a:e0:04:42:9c:95:e8:7c:35:67:dd:3a:07:fb:56:5d:76:8e: 97:12:90:d4:aa:d0:e6:da:16:18:3a:7c:f2:8d:f1:cc:4a:b1: 1a:e6:04:27:50:cf:55:20:58:cc:ac:8e:9a:20:0c:9e:fc:49: 7e:d0:d4:78:b4:65:c9:a3:07:3f:54:0b:ab:dd:4a:b1:6e:25: 49:78:40:8e:7b:ce:57:88:82:f5:15:65:2b:62:3a:5f:fa:d4: 40:fa:8b:01:72:e3:23:fd:b4:ff:28:18:c1:58:3e:df:5e:8f: 9a:f9:ee:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDrBa9CLceNjbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZmIwZWQ5M2UtNmMyZS00ZTczLWI0NmItZjM5MTRmNmNhYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowXkN56OU7HTkTdVVODybq/Th/Lix9KlwwlM JaFuSieQMaAEIkcq7OtVwKXoeqUhsvLz2aiuyf1PXvOlJUuh3PEk1K7R7o6d+r1h Nj1sJEiqOu62DjSHpnggmL0qYOPQhbEaYTQxFw3mk+MSEUZJNLPflJgxwt4WIFIF Ymd/+p9ClzaNeSPn8oS4ogmxTNsCbzHdaamG8Mmc57FYo7jWIIxlvZMw15E0e0j5 73HWhX9j9HfL3j8eLIgjK0ZJOYAKPpuJB/Zd8RPMkOxQZLCbqeMsfDFW1UK5CoqK Kq4RtNkzA96NXn/e9QP3xrtLbSGXCjh09cADc965V//59y5w9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaWaQ9jOdQxx4XqKBXNiEqI48tAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOWZmNjcyOTUtMjkwMy0z N2NjLTgwZDUtODBkOTdkOGM2YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfM24uth3HFI+vp+QXpyxS0qSBRkrdSL1cH5YIlbM7PFfqyl+sf5pAN gf/nXYo2wFotYJGVu2kKy13dz9hvftOCiHmt5TZ4CscPOf8qhUy4V5c1PrcAd5rn sjI8Y/vKPTbbA0NqeVWcb/El5NZgFSRmoMXQ32eUnrpiuL7CzBdMnCiertav0etM lX4PsHGaSzrgBEKcleh8NWfdOgf7Vl12jpcSkNSq0ObaFhg6fPKN8cxKsRrmBCdQ z1UgWMysjpogDJ78SX7Q1Hi0ZcmjBz9UC6vdSrFuJUl4QI57zleIgvUVZStiOl/6 1ED6iwFy4yP9tP8oGMFYPt9ej5r57mE= -----END CERTIFICATE-----Generated at Wed Oct 28 09:50:17 2026 by rpki-client