$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa File: 7281ae23-867a-34c7-a504-aa8437b8e969.roa (raw, json) Hash identifier: M2dmOIH8YHN7WS+zj5aDwJV0aGwHl/c3C/MKvN8HjOs= Subject key identifier: 53:EA:0C:D1:7A:55:A5:AD:FA:19:42:79:E9:B4:8C:F1:F4:5D:B7:57 Certificate issuer: /CN=874e86b5-586f-43d7-be6f-cf21e434b31a Certificate serial: 010D0C9F4328584F1467A0A7AF9B6719ED84FFB0 Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 55270 IP address blocks: 204.154.142.0/23 maxlen: 23 2602:ff43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a0:a7:af:9b:67:19:ed:84:ff:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=da9ab35a-1ab9-48b8-8145-4cb43385c8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d3:dd:42:8c:f2:d7:6e:6c:31:fa:d9:16:70: 02:04:5e:ed:cf:91:03:d7:19:8b:7f:b6:9a:8f:16: e4:fa:f0:c0:5b:9c:54:dd:73:66:35:0b:25:5a:39: e5:d9:91:75:d8:6d:74:51:8b:1e:1c:be:7c:d2:4b: 32:17:cf:0e:2b:ce:5c:fd:80:88:32:22:1c:2e:61: 64:de:05:92:de:dd:08:cf:0c:cf:c5:d8:02:b9:df: 04:ce:af:39:55:3d:1b:95:b3:3d:9f:63:2c:79:da: 70:d0:e1:38:02:a7:57:f6:d9:ba:5e:89:27:af:b0: 7d:38:83:30:49:c9:ef:98:4d:2b:07:31:a1:9c:c9: 8c:7e:d8:7f:d4:4e:6a:d2:6d:7a:d3:cd:3f:4b:d8: 75:72:ee:01:2e:57:42:6b:a6:01:6e:1b:81:bb:e4: f4:ee:1b:d6:81:48:c6:34:e7:ac:d7:93:fa:0b:7c: f5:6f:cb:ad:59:05:7f:c0:b3:91:3a:35:e9:f3:68: ca:cd:00:15:1b:7e:4f:9e:6a:65:c0:d3:62:8c:4c: 4c:d3:c3:6f:c3:8f:6a:89:fc:d8:c4:14:35:ef:dd: 0d:a1:7c:95:fd:0a:9e:1d:ce:52:7c:cb:62:d8:ef: 95:b3:a8:29:2a:2a:fe:2b:e8:3f:0b:a5:6e:69:cb: 71:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EA:0C:D1:7A:55:A5:AD:FA:19:42:79:E9:B4:8C:F1:F4:5D:B7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl X509v3 Authority Key Identifier: keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer sbgp-ipAddrBlock: critical IPv4: 204.154.142.0/23 IPv6: 2602:ff43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:42:dd:dc:1e:df:42:01:30:38:10:04:69:cc:e2:00:79:ca: e8:be:28:53:47:b0:ef:e6:df:b6:59:29:92:d4:ff:00:3b:0e: 0c:25:d6:ac:0d:7e:5a:5b:b2:54:34:c2:c4:d0:92:d5:df:d1: 3c:d7:fd:2a:20:6c:48:d0:fc:08:7f:95:d6:24:d9:98:e4:ec: 40:6d:30:93:b8:e5:de:1c:ef:7b:62:c4:0a:af:22:3d:46:5f: cd:2f:92:4b:c2:6d:49:38:77:1a:55:01:59:af:58:73:a4:64: be:bf:ee:da:bb:bc:9a:29:69:23:61:18:5a:7c:7a:79:6c:0a: b3:65:44:2b:31:f4:64:12:25:1a:2e:5c:b4:0d:72:be:aa:13: cf:79:b7:7c:71:fd:ef:56:14:43:7f:12:d7:a6:16:d6:72:1b: 81:78:9c:8c:7c:4d:70:1d:ad:67:d2:68:5e:56:c4:83:4a:5f: f7:cc:c4:5a:08:06:c1:12:9b:6f:17:60:3f:39:6e:1a:4f:ce: 19:aa:19:7f:79:36:8c:7c:02:a3:62:20:a9:63:eb:58:58:f5: 57:4b:04:1e:00:c5:19:1c:57:f5:95:b5:4e:29:23:45:eb:bb: 45:9a:58:de:98:93:dc:e7:ba:63:bc:e0:11:6f:be:6c:d6:ef: e1:cf:c8:e8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8UZ6Cnr5tnGe2E/7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0ZTg2YjUtNTg2Zi00M2Q3LWJlNmYtY2YyMWU0MzRi MzFhMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZGE5YWIzNWEtMWFiOS00OGI4LTgxNDUtNGNiNDMzODVjOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitPdQozy125sMfrZFnACBF7tz5ED1xmLf7aa jxbk+vDAW5xU3XNmNQslWjnl2ZF12G10UYseHL580ksyF88OK85c/YCIMiIcLmFk 3gWS3t0IzwzPxdgCud8Ezq85VT0blbM9n2Msedpw0OE4AqdX9tm6Xoknr7B9OIMw ScnvmE0rBzGhnMmMfth/1E5q0m16080/S9h1cu4BLldCa6YBbhuBu+T07hvWgUjG NOes15P6C3z1b8utWQV/wLOROjXp82jKzQAVG35PnmplwNNijExM08Nvw49qifzY xBQ1790NoXyV/QqeHc5SfMti2O+Vs6gpKir+K+g/C6VuactxfwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFPqDNF6VaWt+hlCeem0jPH0XbdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzRl ODZiNS01ODZmLTQzZDctYmU2Zi1jZjIxZTQzNGIzMWEvNzI4MWFlMjMtODY3YS0z NGM3LWE1MDQtYWE4NDM3YjhlOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0ZTg2YjUtNTg2Zi00M2Q3LWJl NmYtY2YyMWU0MzRiMzFhLzg3NGU4NmI1LTU4NmYtNDNkNy1iZTZmLWNmMjFlNDM0 YjMxYS5jcmwwHwYDVR0jBBgwFoAUeU1ChMm712cQU58VdYLc1BLE/u0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NzRlODZiNS01ODZmLTQzZDctYmU2Zi1jZjIx ZTQzNGIzMWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBzJqOMA4E AgACMAgDBgQmAv9DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsQt3cHt9CATA4EARpzOIAecrovihTR7Dv 5t+2WSmS1P8AOw4MJdasDX5aW7JUNMLE0JLV39E81/0qIGxI0PwIf5XWJNmY5OxA bTCTuOXeHO97YsQKryI9Rl/NL5JLwm1JOHcaVQFZr1hzpGS+v+7au7yaKWkjYRha fHp5bAqzZUQrMfRkEiUaLly0DXK+qhPPebd8cf3vVhRDfxLXphbWchuBeJyMfE1w Ha1n0mheVsSDSl/3zMRaCAbBEptvF2A/OW4aT84Zqhl/eTaMfAKjYiCpY+tYWPVX SwQeAMUZHFf1lbVOKSNF67tFmljemJPc57pjvOARb75s1u/hz8jo -----END CERTIFICATE-----Generated at Fri Sep 25 19:08:35 2026 by rpki-client