$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/574a32f6-ba87-38dc-920e-e85cf3f2a719.roa File: 574a32f6-ba87-38dc-920e-e85cf3f2a719.roa (raw, json) Hash identifier: 8zwWaZZ+KY0qLC5QTKAGCKtAcXjCZsXDodiHaw/cG70= Subject key identifier: 48:A7:FA:51:AF:A1:D8:1E:50:93:02:D8:77:F8:31:46:97:D8:24:CB Certificate issuer: /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d Certificate serial: 010D0C9F4328584F3E47D8B2A10F15A689B97300 Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/574a32f6-ba87-38dc-920e-e85cf3f2a719.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 26914 IP address blocks: 204.227.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d8:b2:a1:0f:15:a6:89:b9:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=0f6fdee8-250a-4d8e-8b68-51634c91dc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:ed:a6:61:b8:fc:d8:1d:f0:37:33:36:bd: 30:a3:cb:e7:b7:52:f0:e0:e3:f9:95:96:ad:72:f6: d2:43:87:92:7a:08:e8:96:f2:c7:89:43:7e:99:2b: 1a:a7:d4:30:d2:e4:ea:7b:52:dd:01:ec:d3:3c:a3: 15:ae:72:56:3f:69:47:1a:15:a5:97:40:56:d5:08: 90:98:d9:3b:2c:da:f6:af:89:44:37:a1:b2:f0:d5: 4e:c9:b5:79:d5:6b:00:f1:f3:24:99:5f:51:27:0a: 9e:66:be:88:da:27:63:12:cb:78:ee:f2:b9:c5:2a: 1d:f6:2b:a3:54:41:36:a2:ab:c9:59:fd:06:39:a1: 89:6d:31:c3:1a:b0:c9:41:11:fd:b8:47:6f:bd:1a: 3d:66:fb:3e:20:c3:a5:d0:3c:91:bf:18:a6:1f:da: 8f:a4:31:97:65:60:b3:b3:35:fe:05:6d:85:f2:aa: 31:5a:44:a1:91:bb:08:e6:5c:8e:ef:fe:32:77:ec: 47:df:cd:c0:92:62:71:0f:55:a9:58:d6:3c:a0:ab: 5f:57:a4:44:ad:d1:a0:87:b8:92:f6:87:f1:1d:38: c4:59:ad:8b:1c:89:30:1c:06:0c:dc:17:6a:0a:d7: 76:a0:0a:d6:56:c4:ed:e7:2d:79:49:27:f3:82:de: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:FA:51:AF:A1:D8:1E:50:93:02:D8:77:F8:31:46:97:D8:24:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/574a32f6-ba87-38dc-920e-e85cf3f2a719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl X509v3 Authority Key Identifier: keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer sbgp-ipAddrBlock: critical IPv4: 204.227.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:84:f1:e3:bd:38:8f:13:33:da:7b:81:e1:9d:1c:d0:2c:98: 2b:8a:3f:62:3f:fa:68:7f:5e:26:e4:43:74:f0:43:49:f1:42: da:28:95:93:1a:1b:ae:98:db:18:92:33:2c:1b:4c:2d:7d:75: 3f:6d:f4:73:40:14:11:aa:f9:8b:01:a2:4d:5b:bf:bc:04:97: 3f:62:c6:30:e8:b2:4a:bf:bc:37:ef:e0:76:34:c8:d1:ba:bc: c1:c1:ff:90:9e:b6:c1:76:84:5b:8d:68:96:35:4b:f6:74:f2: 6c:e2:d9:fe:80:77:a6:7c:df:bb:ed:7d:15:5f:1c:40:5b:8c: e2:22:7e:15:54:8a:a4:6d:4c:eb:69:f4:f4:e8:9b:1c:f2:16: a3:66:a0:ae:4e:d8:08:69:20:98:8c:97:19:51:77:2e:7a:76: d1:f4:ee:b3:b6:7c:d2:74:4d:b1:f4:28:6f:34:e2:da:28:17: e4:28:df:16:3c:31:23:dd:c2:81:8a:de:aa:91:f9:58:36:b5: a0:8d:38:c1:3e:ce:6e:d9:89:ca:ef:9d:3b:49:43:c0:91:0c: d9:30:f7:51:53:9c:4d:00:3f:26:c3:e3:9c:b6:91:73:da:7c: ae:d2:cb:fc:59:d1:76:6a:3f:a5:83:18:e5:37:2a:57:df:f2: 03:39:a5:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9iyoQ8Vpom5cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM3MDUzYWItMDczNi00M2JiLWJkZmMtMDE2OWFlOTBi ODBkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MGY2ZmRlZTgtMjUwYS00ZDhlLThiNjgtNTE2MzRjOTFkYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEPtpmG4/Ngd8DczNr0wo8vnt1Lw4OP5lZat cvbSQ4eSegjolvLHiUN+mSsap9Qw0uTqe1LdAezTPKMVrnJWP2lHGhWll0BW1QiQ mNk7LNr2r4lEN6Gy8NVOybV51WsA8fMkmV9RJwqeZr6I2idjEst47vK5xSod9iuj VEE2oqvJWf0GOaGJbTHDGrDJQRH9uEdvvRo9Zvs+IMOl0DyRvximH9qPpDGXZWCz szX+BW2F8qoxWkShkbsI5lyO7/4yd+xH383AkmJxD1WpWNY8oKtfV6RErdGgh7iS 9ofxHTjEWa2LHIkwHAYM3BdqCtd2oArWVsTt5y15SSfzgt5oOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEin+lGvodgeUJMC2Hf4MUaX2CTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcw NTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5YWU5MGI4MGQvNTc0YTMyZjYtYmE4Ny0z OGRjLTkyMGUtZTg1Y2YzZjJhNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWM3MDUzYWItMDczNi00M2JiLWJk ZmMtMDE2OWFlOTBiODBkL2VjNzA1M2FiLTA3MzYtNDNiYi1iZGZjLTAxNjlhZTkw YjgwZC5jcmwwHwYDVR0jBBgwFoAU3pcubt/PvchrC3xOqzpSG2XulSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lYzcwNTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5 YWU5MGI4MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzOMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOE8eO9OI8TM9p7geGdHNAsmCuKP2I/+mh/XibkQ3TwQ0nxQtoolZMa G66Y2xiSMywbTC19dT9t9HNAFBGq+YsBok1bv7wElz9ixjDoskq/vDfv4HY0yNG6 vMHB/5CetsF2hFuNaJY1S/Z08mzi2f6Ad6Z837vtfRVfHEBbjOIifhVUiqRtTOtp 9PTomxzyFqNmoK5O2AhpIJiMlxlRdy56dtH07rO2fNJ0TbH0KG804tooF+Qo3xY8 MSPdwoGK3qqR+Vg2taCNOME+zm7ZicrvnTtJQ8CRDNkw91FTnE0APybD45y2kXPa fK7Sy/xZ0XZqP6WDGOU3Klff8gM5pUA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:43:08 2026 by rpki-client