$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa File: ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa (raw, json) Hash identifier: onb6AgC7SvtvTgHv9ehABwCAWG5/W9rKpGKEwssMo/k= Subject key identifier: DA:3C:E7:8B:1F:13:33:9E:B2:30:FE:22:35:04:7F:22:1B:14:29:31 Certificate issuer: /CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Certificate serial: 010D0C9F4328584F23C25CD09B6153646E9A4C00 Authority key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 376 IP address blocks: 204.19.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5c:d0:9b:61:53:64:6e:9a:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=f6f415f9-2485-4ccd-aeb6-7ea9be150d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3d:b3:db:0e:7d:04:53:31:d2:3c:db:ee:79: b0:b2:c9:df:3b:b1:3a:02:52:07:80:00:b4:bd:a9: 94:f1:9f:63:33:c5:5f:fb:a8:7d:70:1a:e1:f2:38: d4:18:c1:de:ae:8f:df:33:a0:46:38:7c:9b:fb:66: bc:f3:b1:d5:85:e9:d7:67:c6:73:c0:8d:22:0e:01: f3:d0:5f:02:15:d3:41:d5:a1:25:73:2c:e8:75:b6: 73:0a:96:2d:8c:c8:6e:bb:f1:74:88:bd:69:45:95: 1a:20:aa:5e:ab:41:f2:79:f4:4f:0a:61:ca:a7:30: 88:3c:2d:22:08:11:b5:98:14:ad:e9:aa:32:79:d5: bb:34:11:7f:a9:52:3c:db:d5:17:10:d8:9c:a3:d1: 80:31:f9:80:f0:c9:24:3c:9f:1b:81:e5:68:77:bf: 40:61:de:a2:65:62:4c:51:33:8c:bf:24:04:c3:43: 12:ce:04:e8:a4:33:1d:95:6f:e3:0c:d4:f6:12:8c: b8:63:d0:bf:87:65:9b:54:fe:f8:50:80:e4:c6:ac: 76:5c:c5:eb:e1:e0:6e:5e:02:9e:bf:0d:60:b9:ca: 54:9e:92:31:49:d9:5a:f0:34:59:b8:7e:37:51:77: c7:53:4c:90:6b:9d:d0:eb:50:f3:89:35:dd:49:64: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:E7:8B:1F:13:33:9E:B2:30:FE:22:35:04:7F:22:1B:14:29:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ce4d1c8d-ee6d-3784-9fc8-ae9d4c245bd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.crl X509v3 Authority Key Identifier: keyid:39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer sbgp-ipAddrBlock: critical IPv4: 204.19.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:aa:67:62:31:f2:45:ac:31:a9:f7:c6:ca:df:18:7b:af:bb: fc:ee:eb:c3:1c:d9:55:37:17:80:b7:c1:2f:b3:20:8c:bf:58: 94:bd:75:de:c1:63:f1:8c:dd:79:e9:ea:73:d1:74:0f:5c:6d: 37:a7:30:38:76:a5:f1:1a:0e:64:ce:37:59:10:49:b2:24:ff: a1:f3:73:2e:e1:f5:48:a6:1e:00:43:c6:8a:b3:80:97:a2:5e: b8:72:e2:91:6f:eb:db:08:16:93:96:45:42:e7:7e:28:c6:7b: 14:d1:f1:f7:7b:76:cd:e5:24:0d:86:91:ca:d4:37:47:2c:d8: d0:4d:7c:d6:43:87:8a:fe:c6:a7:76:7b:49:0e:b2:23:f3:c3: c8:e6:1c:32:77:26:f5:be:89:22:52:66:51:6a:c0:2a:68:41: 3a:ef:3f:55:8c:44:48:6c:6e:1d:7a:4e:f7:12:b7:df:03:97: 77:ac:fa:2a:29:3e:d1:83:39:09:7c:c9:93:4f:f9:21:41:ac: b4:98:06:d0:4f:e7:e9:57:57:0a:4a:78:3e:3a:44:6a:e5:f8: fb:fa:f7:ae:06:50:49:bd:c3:65:ac:49:d3:6d:7c:5a:90:82: 7a:67:e6:67:d3:94:d5:c6:c2:f2:f8:03:58:7f:6c:ee:b0:bb: db:c9:ed:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlzQm2FTZG6aTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4 Y2ZjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjZmNDE1ZjktMjQ4NS00Y2NkLWFlYjYtN2VhOWJlMTUwZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D2z2w59BFMx0jzb7nmwssnfO7E6AlIHgAC0 vamU8Z9jM8Vf+6h9cBrh8jjUGMHero/fM6BGOHyb+2a887HVhenXZ8ZzwI0iDgHz 0F8CFdNB1aElcyzodbZzCpYtjMhuu/F0iL1pRZUaIKpeq0HyefRPCmHKpzCIPC0i CBG1mBSt6aoyedW7NBF/qVI829UXENico9GAMfmA8MkkPJ8bgeVod79AYd6iZWJM UTOMvyQEw0MSzgTopDMdlW/jDNT2Eoy4Y9C/h2WbVP74UIDkxqx2XMXr4eBuXgKe vw1gucpUnpIxSdla8DRZuH43UXfHU0yQa53Q61DziTXdSWR9oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo854sfEzOesjD+IjUEfyIbFCkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YjJh ZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvY2U0ZDFjOGQtZWU2ZC0z Nzg0LTlmYzgtYWU5ZDRjMjQ1YmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGIyYWQ4ODQtNTk2MC00NmNkLWJm NjAtOTEwYzIyMmM4Y2ZjLzRiMmFkODg0LTU5NjAtNDZjZC1iZjYwLTkxMGMyMjJj OGNmYy5jcmwwHwYDVR0jBBgwFoAUOW6POPYN5a6p/IKOn4LGUr/Z8YIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBj MjIyYzhjZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOqZ2Ix8kWsMan3xsrfGHuvu/zu68Mc2VU3F4C3wS+zIIy/WJS9dd7B Y/GM3Xnp6nPRdA9cbTenMDh2pfEaDmTON1kQSbIk/6Hzcy7h9UimHgBDxoqzgJei Xrhy4pFv69sIFpOWRULnfijGexTR8fd7ds3lJA2GkcrUN0cs2NBNfNZDh4r+xqd2 e0kOsiPzw8jmHDJ3JvW+iSJSZlFqwCpoQTrvP1WMREhsbh16TvcSt98Dl3es+iop PtGDOQl8yZNP+SFBrLSYBtBP5+lXVwpKeD46RGrl+Pv6964GUEm9w2WsSdNtfFqQ gnpn5mfTlNXGwvL4A1h/bO6wu9vJ7fQ= -----END CERTIFICATE-----Generated at Tue Sep 22 06:00:39 2026 by rpki-client