$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa File: ca248d62-3f50-35a2-9999-0258d4f72f02.roa (raw, json) Hash identifier: fyqLT7kqY4QgOg2Qw4VT3KkzOw1oeHExSDh2EO3ZHGg= Subject key identifier: 35:E8:EE:F2:B5:6E:50:2F:F5:B6:81:77:BF:6D:AD:A3:7F:4A:D8:7D Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584F82ADC08B501B517F50DB0080 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 8014 IP address blocks: 204.236.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:c0:8b:50:1b:51:7f:50:db:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=f577aea7-e123-433e-9ae5-1bce80f3439e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:4b:cb:60:8d:11:50:22:6e:6b:c7:cb:a9: 8a:96:8c:34:c9:63:04:32:bc:23:4b:94:22:a8:32: 83:31:94:38:4f:0a:76:29:81:0a:c5:c2:04:e2:52: de:10:1e:cc:c9:98:f5:b4:ee:ae:e3:1e:de:19:ac: a5:e1:db:48:36:76:c5:cd:4f:af:bc:f2:cf:ee:af: 6b:22:94:96:b2:4a:ea:d9:7e:f1:99:01:1f:e4:ee: 23:e0:b9:14:e1:c8:98:60:6b:06:32:ec:67:58:aa: 67:d9:49:5c:05:40:c6:95:44:39:b6:ff:71:e8:a3: d8:5c:7e:60:8f:9a:6f:8d:dd:2a:b0:59:a9:4f:44: a9:08:bd:01:2f:9e:88:82:e7:d3:3c:8f:ee:fe:51: 21:a7:1c:72:28:5a:2e:72:09:4f:ea:15:55:2b:94: 48:fc:e2:9a:6a:47:3a:07:47:a2:f2:bf:88:06:2c: 11:69:64:f4:af:d6:bd:fb:97:f4:01:3c:3a:6d:0c: 3b:6c:28:54:d1:02:a2:bb:53:42:c2:0a:73:23:91: 97:b1:32:ae:36:1b:b3:f6:71:39:17:45:01:9d:57: 76:eb:49:f5:ba:c1:9e:18:79:08:0e:f9:03:7e:71: 49:e9:ee:4b:a7:1a:27:b5:44:76:71:a3:36:4a:aa: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E8:EE:F2:B5:6E:50:2F:F5:B6:81:77:BF:6D:AD:A3:7F:4A:D8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8d:d2:ce:76:cd:40:5b:16:e5:28:6a:58:50:cd:2e:18:08: 6a:00:e8:ac:9c:87:2f:d5:70:c8:6c:8e:8e:2e:29:8e:2f:07: 9a:88:82:30:15:5e:61:35:77:f0:65:83:0b:12:91:9c:ab:09: 41:c3:46:8d:54:91:c7:9b:8e:70:ff:e4:42:f6:ab:53:7a:d1: 04:0f:5e:62:ce:7d:d2:33:9f:6f:ac:b2:26:f1:af:64:bc:c1: 7c:be:9f:1b:39:f3:d7:bc:31:ae:04:b2:47:d2:e9:d8:df:42: f9:f1:bd:42:0a:83:7d:f9:3b:2d:72:46:aa:26:65:7a:27:89: c3:fd:b8:cb:9d:d5:28:a1:52:cf:5f:07:a3:80:b0:cb:f2:da: 01:bf:1f:6e:9c:42:06:2b:b9:f8:ba:dd:f3:b2:fd:f7:f6:f5: a6:ac:73:a8:f9:0c:67:50:93:3b:a6:c6:ba:c3:65:9b:86:b5: f2:a5:72:82:f8:8e:64:ff:41:6f:40:e9:34:82:a8:ca:aa:89: 70:95:20:6c:78:ac:45:7e:69:ae:b1:7c:c0:be:8f:4e:1a:15: b8:d4:28:92:29:90:42:2c:76:fb:d5:19:ac:e3:89:eb:b0:07: d4:fd:44:69:d9:9f:78:df:ee:60:44:b8:c6:23:31:46:d5:24: d5:5b:b1:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+CrcCLUBtRf1DbAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk ZjU3N2FlYTctZTEyMy00MzNlLTlhZTUtMWJjZTgwZjM0MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypJLy2CNEVAibmvHy6mKlow0yWMEMrwjS5Qi qDKDMZQ4Twp2KYEKxcIE4lLeEB7MyZj1tO6u4x7eGayl4dtINnbFzU+vvPLP7q9r IpSWskrq2X7xmQEf5O4j4LkU4ciYYGsGMuxnWKpn2UlcBUDGlUQ5tv9x6KPYXH5g j5pvjd0qsFmpT0SpCL0BL56IgufTPI/u/lEhpxxyKFoucglP6hVVK5RI/OKaakc6 B0ei8r+IBiwRaWT0r9a9+5f0ATw6bQw7bChU0QKiu1NCwgpzI5GXsTKuNhuz9nE5 F0UBnVd260n1usGeGHkIDvkDfnFJ6e5LpxontUR2caM2Sqp8nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXo7vK1blAv9baBd79traN/Sth9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvY2EyNDhkNjItM2Y1MC0z NWEyLTk5OTktMDI1OGQ0ZjcyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2N0s52zUBbFuUoalhQzS4YCGoA6Kychy/VcMhsjo4uKY4vB5qIgjAV XmE1d/BlgwsSkZyrCUHDRo1UkcebjnD/5EL2q1N60QQPXmLOfdIzn2+ssibxr2S8 wXy+nxs589e8Ma4EskfS6djfQvnxvUIKg335Oy1yRqomZXonicP9uMud1SihUs9f B6OAsMvy2gG/H26cQgYrufi63fOy/ff29aasc6j5DGdQkzumxrrDZZuGtfKlcoL4 jmT/QW9A6TSCqMqqiXCVIGx4rEV+aa6xfMC+j04aFbjUKJIpkEIsdvvVGazjieuw B9T9RGnZn3jf7mBEuMYjMUbVJNVbsYg= -----END CERTIFICATE-----Generated at Wed Oct 28 22:52:39 2026 by rpki-client