$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/e04a96cd-afcf-30d3-b128-0dd1a51b6655.roa File: e04a96cd-afcf-30d3-b128-0dd1a51b6655.roa (raw, json) Hash identifier: m0nJMPtEg6er1Ubkj+9w6xPCIdizWlQbTPcgqSvRCtE= Subject key identifier: 52:FF:00:04:D0:7A:A8:C5:36:B9:7D:56:B8:0E:05:1E:D9:6E:A6:EF Certificate issuer: /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Certificate serial: 010D0C9F4328584F3E336020442FCD8DF470B780 Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/e04a96cd-afcf-30d3-b128-0dd1a51b6655.roa Signing time: Mon 21 Sep 2026 00:19:05 +0000 ROA not before: Mon 21 Sep 2026 00:19:05 +0000 ROA not after: Sun 20 Dec 2026 01:19:05 +0000 asID: 271 IP address blocks: 204.239.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:33:60:20:44:2f:cd:8d:f4:70:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e Validity Not Before: Sep 21 00:19:05 2026 GMT Not After : Dec 20 01:19:05 2026 GMT Subject: CN=5e388d73-acf9-4565-bc75-f440293a0166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:94:c1:86:9f:c0:dd:79:be:4a:42:1e:33: 5e:48:0d:f6:ad:dc:85:de:ca:b1:ab:e1:68:74:bb: b0:0c:6e:82:c9:7a:b4:69:cf:69:df:94:34:3d:c7: 88:13:ce:93:ab:44:1a:f9:40:86:11:24:92:ba:d4: 07:96:d7:ed:57:8f:5d:d0:23:de:fd:c2:a8:a1:c1: 80:e4:09:f5:c7:ad:ca:82:4a:ad:3a:14:c7:dd:2c: 3b:c1:82:e3:5a:99:fb:83:79:7b:22:81:0f:ed:40: 61:b3:ef:0e:ef:aa:6d:81:43:c2:3e:6f:b0:c4:3d: a3:3a:bb:ec:2a:08:40:14:ef:e6:82:c1:1c:ae:9f: e3:76:8e:9d:c3:25:66:44:4f:c7:1f:22:cc:ed:86: dc:29:a1:03:77:73:58:ec:5f:04:14:49:db:36:d5: 3a:9e:4b:40:fe:40:37:55:ef:78:22:f4:08:36:e2: cd:4c:b0:42:56:21:e9:8e:97:45:5b:53:37:a1:73: 96:8e:d3:13:c9:71:da:38:d5:e2:27:75:ca:df:86: 6f:c6:b4:a6:00:9f:ce:cd:b3:3a:c6:38:cf:ce:90: 82:a3:bb:b2:98:68:7a:66:fd:f1:7f:98:45:50:51: 4e:df:cd:37:ee:21:bb:3d:c3:bb:8e:ba:c6:a9:57: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FF:00:04:D0:7A:A8:C5:36:B9:7D:56:B8:0E:05:1E:D9:6E:A6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/e04a96cd-afcf-30d3-b128-0dd1a51b6655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl X509v3 Authority Key Identifier: keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer sbgp-ipAddrBlock: critical IPv4: 204.239.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:69:c0:44:6d:27:a2:cd:5e:06:94:ad:17:1e:74:2a:c7:a2: 34:2c:7c:9c:e2:b9:64:7b:ff:69:a0:1f:0a:1b:75:1c:21:68: ac:01:08:50:ce:86:0c:9e:b1:6b:f3:8a:c8:b3:b3:d7:3f:af: a1:48:8a:6e:f2:1e:f6:5c:2f:80:cc:d9:52:bd:31:ed:3f:94: a7:f1:cc:17:a4:0e:eb:e3:2f:ef:63:1a:95:56:da:f6:40:23: e8:3b:36:02:ef:30:b0:f7:f1:e3:43:7c:ce:2f:e5:52:8e:26: 4c:78:dd:fb:44:53:26:aa:8b:45:c6:a4:35:bf:60:41:3a:59: d4:7f:53:bc:af:f7:54:97:f2:db:d9:97:04:07:c5:82:5e:53: 2b:82:61:1a:ab:54:51:5d:b1:2f:1b:50:bf:c8:5a:73:2f:43: b9:a8:b3:63:4b:04:1b:7c:69:e3:53:1c:22:e4:00:bf:65:f1: e8:33:95:12:c4:06:4f:01:e8:00:46:05:a9:64:fb:82:91:15: 51:ad:cb:bb:88:94:04:00:c1:5a:11:21:2a:78:f4:40:1a:9a: b2:cb:a6:96:5f:10:da:6c:61:d7:c5:88:a3:d9:f9:6c:f1:f9: 5d:aa:14:16:92:18:95:ec:b3:36:e7:29:3b:ca:42:d8:f8:c6: 24:74:fe:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+M2AgRC/NjfRwt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA2N2UxMTEtOWQxOS00YzFlLWExZWYtODZmMTMzNjY5 YThlMB4XDTI2MDkyMTAwMTkwNVoXDTI2MTIyMDAxMTkwNVowLzEtMCsGA1UEAxMk NWUzODhkNzMtYWNmOS00NTY1LWJjNzUtZjQ0MDI5M2EwMTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2yUwYafwN15vkpCHjNeSA32rdyF3sqxq+Fo dLuwDG6CyXq0ac9p35Q0PceIE86Tq0Qa+UCGESSSutQHltftV49d0CPe/cKoocGA 5An1x63KgkqtOhTH3Sw7wYLjWpn7g3l7IoEP7UBhs+8O76ptgUPCPm+wxD2jOrvs KghAFO/mgsEcrp/jdo6dwyVmRE/HHyLM7YbcKaEDd3NY7F8EFEnbNtU6nktA/kA3 Ve94IvQINuLNTLBCViHpjpdFW1M3oXOWjtMTyXHaONXiJ3XK34ZvxrSmAJ/OzbM6 xjjPzpCCo7uymGh6Zv3xf5hFUFFO38037iG7PcO7jrrGqVecRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL/AATQeqjFNrl9VrgOBR7ZbqbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMDY3 ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYxMzM2NjlhOGUvZTA0YTk2Y2QtYWZjZi0z MGQzLWIxMjgtMGRkMWE1MWI2NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDA2N2UxMTEtOWQxOS00YzFlLWEx ZWYtODZmMTMzNjY5YThlLzAwNjdlMTExLTlkMTktNGMxZS1hMWVmLTg2ZjEzMzY2 OWE4ZS5jcmwwHwYDVR0jBBgwFoAUlskWWwf6rfza/VMJjgMSFtSDko4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wMDY3ZTExMS05ZDE5LTRjMWUtYTFlZi04NmYx MzM2NjlhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzO+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhpwERtJ6LNXgaUrRcedCrHojQsfJziuWR7/2mgHwobdRwhaKwBCFDO hgyesWvzisizs9c/r6FIim7yHvZcL4DM2VK9Me0/lKfxzBekDuvjL+9jGpVW2vZA I+g7NgLvMLD38eNDfM4v5VKOJkx43ftEUyaqi0XGpDW/YEE6WdR/U7yv91SX8tvZ lwQHxYJeUyuCYRqrVFFdsS8bUL/IWnMvQ7mos2NLBBt8aeNTHCLkAL9l8egzlRLE Bk8B6ABGBalk+4KRFVGty7uIlAQAwVoRISp49EAamrLLppZfENpsYdfFiKPZ+Wzx +V2qFBaSGJXsszbnKTvKQtj4xiR0/rE= -----END CERTIFICATE-----Generated at Mon Sep 21 17:54:29 2026 by rpki-client