$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa File: c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa (raw, json) Hash identifier: nqLBugiZevrx1SmyAkYK5o9PCbquciSXWKEZ03b1oTo= Subject key identifier: 8C:A5:F1:15:0F:BF:D2:95:16:C8:3B:69:CE:AA:38:C5:15:36:E5:47 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584F15CCE79C04155C0765A7A200 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 88 IP address blocks: 204.153.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e7:9c:04:15:5c:07:65:a7:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=ad56d21a-d419-4d73-99fc-34a90630f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:cd:2f:80:01:77:36:4e:9f:26:e4:e0:bb: 6e:53:7c:c7:7a:94:98:82:35:7c:8c:df:bf:e1:96: c8:82:c3:5e:4c:22:ba:e0:f6:45:b3:f4:14:b4:d2: 6c:84:da:fb:b4:9e:d1:7c:41:9a:59:65:f8:93:43: 1b:96:fb:57:83:19:04:b8:0f:ec:e0:61:41:11:90: 85:be:53:62:cc:77:9d:69:8c:4f:5e:40:4e:38:86: be:65:67:3c:8f:f9:63:62:e3:c6:3f:f6:25:bd:5d: 9a:e8:19:a4:88:43:19:00:fb:df:c1:4f:68:6c:78: 64:3e:f5:86:0e:40:06:53:2a:2a:7d:03:5f:f5:ac: 8c:f1:00:2d:d6:98:4a:21:d3:96:45:5f:10:f9:e3: 55:6d:4d:af:95:fe:14:12:4e:cf:bd:0d:3d:0e:90: eb:ae:e9:a6:63:ae:9e:77:5a:a8:41:09:df:4c:40: d7:f1:34:f5:df:e3:48:ef:9a:5d:1b:51:10:5e:b2: 10:40:16:2b:d3:11:dc:d1:73:1b:70:73:e1:2f:cd: da:cd:0f:b0:19:31:23:b7:95:84:c9:c7:76:98:f2: f5:fc:59:b0:d3:b7:d5:80:b7:33:65:fa:d5:d7:fd: 7c:62:be:09:c4:9b:fe:fd:ba:f5:14:bc:40:a4:fd: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A5:F1:15:0F:BF:D2:95:16:C8:3B:69:CE:AA:38:C5:15:36:E5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ec:97:44:51:d6:f5:43:fa:20:7b:af:b3:ea:35:9e:60:04: ce:5a:6c:c7:43:7a:76:05:b1:f7:14:5c:2c:70:66:2d:4f:20: 46:e6:86:83:ea:c8:eb:4a:5c:db:51:f4:d5:20:56:66:ec:ac: 3e:4c:7a:55:e6:1b:d4:07:bd:dd:9a:1f:5c:06:19:b9:39:27: f1:6c:6f:c5:60:d5:b0:9d:7c:36:d4:a5:f0:49:6b:e2:45:62: f5:5a:a8:4a:ad:9e:70:08:db:c2:9a:13:8a:f3:f9:4b:ba:7b: 1a:0b:52:ae:2c:42:21:88:fc:4a:d5:70:f5:43:08:24:63:01: 96:6f:03:40:71:6b:62:34:b7:d3:1d:2a:a7:0e:64:80:27:13: b6:d5:f0:c6:2c:ae:32:fc:37:fd:71:2e:7c:61:32:47:d9:79: d4:83:1c:ae:cb:72:30:ad:73:c7:93:39:f8:c0:7e:16:0c:ec: b0:ff:58:1a:0d:e6:48:49:b4:8a:8b:48:3d:20:46:1b:18:5a: f2:03:ed:be:a4:08:72:ec:80:4a:c2:42:73:d1:d4:7a:c8:81: 86:9e:7f:66:0c:55:5f:04:59:90:ab:49:f1:b4:15:c8:f5:30: f4:2f:7f:23:4a:b7:19:8b:56:d3:81:8a:a3:15:00:ee:fd:f6: b6:61:e7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOecBBVcB2WnogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YWQ1NmQyMWEtZDQxOS00ZDczLTk5ZmMtMzRhOTA2MzBmOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirLNL4ABdzZOnybk4LtuU3zHepSYgjV8jN+/ 4ZbIgsNeTCK64PZFs/QUtNJshNr7tJ7RfEGaWWX4k0MblvtXgxkEuA/s4GFBEZCF vlNizHedaYxPXkBOOIa+ZWc8j/ljYuPGP/YlvV2a6BmkiEMZAPvfwU9obHhkPvWG DkAGUyoqfQNf9ayM8QAt1phKIdOWRV8Q+eNVbU2vlf4UEk7PvQ09DpDrrummY66e d1qoQQnfTEDX8TT13+NI75pdG1EQXrIQQBYr0xHc0XMbcHPhL83azQ+wGTEjt5WE ycd2mPL1/Fmw07fVgLczZfrV1/18Yr4JxJv+/br1FLxApP1U/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyl8RUPv9KVFsg7ac6qOMUVNuVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYzJkOWY2ZDktMWZjNi0z NDgyLWEzNjMtOGUzYTA1N2NiZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7sl0RR1vVD+iB7r7PqNZ5gBM5abMdDenYFsfcUXCxwZi1PIEbmhoPq yOtKXNtR9NUgVmbsrD5MelXmG9QHvd2aH1wGGbk5J/Fsb8Vg1bCdfDbUpfBJa+JF YvVaqEqtnnAI28KaE4rz+Uu6exoLUq4sQiGI/ErVcPVDCCRjAZZvA0Bxa2I0t9Md KqcOZIAnE7bV8MYsrjL8N/1xLnxhMkfZedSDHK7LcjCtc8eTOfjAfhYM7LD/WBoN 5khJtIqLSD0gRhsYWvID7b6kCHLsgErCQnPR1HrIgYaef2YMVV8EWZCrSfG0Fcj1 MPQvfyNKtxmLVtOBiqMVAO799rZh5x8= -----END CERTIFICATE-----Generated at Tue Sep 22 09:27:58 2026 by rpki-client