$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa File: 9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa (raw, json) Hash identifier: 0upcTaCsqLfpsxvwsFwhfztIXoCF8lvNP4HMoykyyoI= Subject key identifier: 92:62:39:40:B5:42:42:D6:E3:D2:8A:12:D6:D5:4A:9E:2C:38:E2:99 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584F7E7DD049CEB16D644AB4B580 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 8014 IP address blocks: 204.236.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d0:49:ce:b1:6d:64:4a:b4:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=444c3872-5430-4831-8365-fd0e00e782da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4c:6b:33:6b:b4:41:47:9c:81:4e:e6:b2:06: 23:6e:26:57:b8:e7:9f:a6:62:8b:67:ae:a8:58:68: c4:68:cb:fb:c4:be:ab:df:da:16:e7:e7:9e:dd:ef: f6:9a:20:89:7e:49:d0:eb:04:91:17:5b:b4:1b:4d: 48:4a:9d:60:ff:e0:25:80:54:d6:14:93:d2:84:6f: a4:18:a9:c9:f8:48:d1:7e:05:52:e5:31:e7:9b:e3: 66:52:9e:ff:b7:c9:a4:19:38:59:9d:0f:3d:34:ef: 67:88:8a:fd:ea:a6:a3:cc:81:f7:51:80:97:b7:4b: 79:0e:89:b7:0e:16:8a:f4:e7:6c:e9:c3:99:3f:3e: 72:26:c5:4a:50:68:42:7b:68:c5:7d:a6:82:04:57: fe:45:2c:e7:f2:24:f9:bb:c1:b4:9c:4f:d6:61:b1: 01:f2:77:9a:33:83:7b:32:08:a6:49:69:1a:fa:3e: f1:77:01:29:c2:2b:42:40:b6:5e:c0:de:b4:85:ec: 8f:59:8a:13:ec:64:fa:1c:67:d9:28:33:22:f0:a0: 48:dd:bb:3c:01:8f:1d:c7:9d:2a:30:0f:f7:b7:86: 38:e2:e2:f9:95:e7:4d:b5:14:18:d7:82:15:c1:4a: 5f:ca:18:17:2d:ee:6a:67:c0:2c:bd:7c:6d:1d:b9: 7c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:62:39:40:B5:42:42:D6:E3:D2:8A:12:D6:D5:4A:9E:2C:38:E2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:14:87:65:76:15:4f:98:4a:b9:a5:5a:71:f5:87:51:72:67: 5f:0c:a4:ef:32:53:8f:3e:16:68:66:0e:dc:55:51:d7:79:3a: a5:e8:12:2d:9f:25:a9:e6:54:83:2c:ce:95:85:d1:d7:07:33: 58:7b:b8:18:0d:a2:6c:d2:05:07:6d:8d:f4:31:b9:d9:13:c0: ff:89:b6:06:1e:51:92:c1:44:04:d6:fa:80:f4:e4:9f:96:90: fc:37:cc:53:a2:bf:d4:e5:83:11:81:2c:19:01:ff:71:c9:87: 93:18:f2:6a:97:e9:4e:e4:ff:e3:d2:ba:2d:a1:b2:b1:f6:e8: 13:8a:93:53:95:48:12:48:68:d5:89:6f:02:22:94:54:53:de: ca:da:9f:32:11:e9:67:6a:b0:5a:05:29:66:31:ce:16:89:1e: cf:e3:7d:ea:3c:3f:80:f8:f4:8d:7d:4c:f3:62:bc:66:af:9d: 9a:b1:3a:c0:f3:3a:2c:b1:ed:09:1a:05:3e:da:34:20:7a:32: 95:84:03:33:15:21:d5:04:0f:30:5b:bf:01:1d:f1:c5:17:ff: 12:aa:5e:14:ac:4f:c7:c4:24:02:14:60:7b:81:4a:85:a6:65: e7:4d:53:de:0e:77:16:1a:55:dd:54:78:3e:c5:ae:9e:de:d6: ca:44:f6:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdBJzrFtZEq0tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDQ0YzM4NzItNTQzMC00ODMxLTgzNjUtZmQwZTAwZTc4MmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlExrM2u0QUecgU7msgYjbiZXuOefpmKLZ66o WGjEaMv7xL6r39oW5+ee3e/2miCJfknQ6wSRF1u0G01ISp1g/+AlgFTWFJPShG+k GKnJ+EjRfgVS5THnm+NmUp7/t8mkGThZnQ89NO9niIr96qajzIH3UYCXt0t5Dom3 DhaK9Ods6cOZPz5yJsVKUGhCe2jFfaaCBFf+RSzn8iT5u8G0nE/WYbEB8neaM4N7 MgimSWka+j7xdwEpwitCQLZewN60heyPWYoT7GT6HGfZKDMi8KBI3bs8AY8dx50q MA/3t4Y44uL5ledNtRQY14IVwUpfyhgXLe5qZ8AsvXxtHbl8gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJiOUC1QkLW49KKEtbVSp4sOOKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOWZmZDk3MTUtOTgzNC0z YjFhLWFkZWYtN2NlNDNmN2Q5NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYUh2V2FU+YSrmlWnH1h1FyZ18MpO8yU48+FmhmDtxVUdd5OqXoEi2f JanmVIMszpWF0dcHM1h7uBgNomzSBQdtjfQxudkTwP+JtgYeUZLBRATW+oD05J+W kPw3zFOiv9TlgxGBLBkB/3HJh5MY8mqX6U7k/+PSui2hsrH26BOKk1OVSBJIaNWJ bwIilFRT3sranzIR6WdqsFoFKWYxzhaJHs/jfeo8P4D49I19TPNivGavnZqxOsDz Oiyx7QkaBT7aNCB6MpWEAzMVIdUEDzBbvwEd8cUX/xKqXhSsT8fEJAIUYHuBSoWm ZedNU94OdxYaVd1UeD7Frp7e1spE9u0= -----END CERTIFICATE-----Generated at Wed Oct 28 11:41:16 2026 by rpki-client