$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa File: d211989e-d01a-373b-b3b7-167816d1f06f.roa (raw, json) Hash identifier: wvRAQdegbdbYidiH8Xmo6Cl1ZF9CL+0vzJ/J5ewDbjw= Subject key identifier: 7E:FF:FD:6E:6E:BE:AD:75:21:DE:63:ED:85:0A:27:A8:6D:45:CE:8C Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F374D2C6F75DB8AA951216900 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 25645 IP address blocks: 204.174.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2c:6f:75:db:8a:a9:51:21:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=3ffbef2a-305f-4b7d-8a4a-cfa6c6dc4944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6f:9e:0d:ef:dc:4d:39:3f:c9:28:42:b3:50: 46:d4:d3:4c:95:e2:ac:a8:d2:eb:75:7b:11:bc:a5: 69:d3:32:01:9b:2c:3f:18:4d:a1:60:19:20:f9:1f: 84:a5:9a:0d:2e:3f:58:c9:4d:de:62:e4:d7:97:34: 0b:62:67:ae:b1:1e:5d:ee:e7:8f:21:4c:ea:a9:63: 47:57:28:76:2f:bb:50:0f:3a:14:ed:33:cc:30:df: 64:5c:0c:a4:48:60:ab:bd:c8:c9:1d:f5:39:fa:61: 95:04:d3:6a:02:77:ce:98:65:f8:5c:02:c5:16:49: 6c:48:44:ae:cd:36:ff:09:f6:39:ac:05:ff:ae:54: 24:11:7c:b6:91:5c:ab:3f:d9:e3:13:44:82:f0:95: cd:df:11:21:e8:fa:be:ba:97:d4:2c:87:ac:9a:d5: af:92:12:e3:b3:98:46:ab:46:ac:4d:89:6a:0b:96: 1b:f8:19:09:40:19:64:98:b0:06:e4:1e:48:c7:db: 07:a0:10:7f:37:83:c8:d8:57:98:72:d6:cb:dc:a3: 77:4c:c6:7b:2f:51:d8:c6:81:75:4e:32:a0:8c:9d: a5:a2:8d:7e:17:e9:f9:82:46:68:ac:73:0a:f5:41: b8:98:a9:d4:2f:20:84:2c:f2:06:0f:28:a1:4d:0b: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FF:FD:6E:6E:BE:AD:75:21:DE:63:ED:85:0A:27:A8:6D:45:CE:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 204.174.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8f:92:4f:e6:79:f2:5e:ba:c1:ee:05:f1:ff:46:03:64:64: 56:b8:20:bb:15:8f:a2:2c:ef:cd:7d:82:57:07:3a:87:93:3b: e3:ba:87:86:36:9a:35:b5:cb:d7:30:03:ac:70:cc:ad:fe:1f: 08:90:a7:bb:3e:97:30:84:61:8c:dc:f8:11:52:c6:79:ad:04: 42:f1:d9:ed:ba:50:82:58:e0:03:59:63:cd:48:a3:ef:a3:75: fa:ba:74:11:83:61:cc:8c:5a:83:d2:68:3f:8d:90:74:c0:03: a7:c3:5c:51:72:8d:fb:0a:63:94:09:b6:bf:3a:71:aa:6a:af: 25:c9:5e:eb:72:04:5d:c1:14:7a:91:53:1c:d7:6d:f3:46:e7: 50:0e:55:ac:b4:53:f7:75:e6:b8:86:cf:41:98:4d:f0:c2:87: 45:0d:21:45:e0:68:91:ed:32:65:d5:c9:26:52:3c:f6:0d:7c: d8:2b:b6:e3:03:f2:70:31:3e:fd:2a:af:ef:d6:33:c0:c7:0e: fd:6f:44:a5:3b:e2:11:e0:36:9f:20:32:7c:05:76:02:07:5c: 47:fc:99:23:73:a5:83:c1:76:56:43:3d:65:fc:22:aa:bb:5a: 9b:86:4e:74:88:a9:18:ac:19:82:37:fa:9a:37:93:64:9e:37: 98:5d:88:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSxvdduKqVEhaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk M2ZmYmVmMmEtMzA1Zi00YjdkLThhNGEtY2ZhNmM2ZGM0OTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2+eDe/cTTk/yShCs1BG1NNMleKsqNLrdXsR vKVp0zIBmyw/GE2hYBkg+R+EpZoNLj9YyU3eYuTXlzQLYmeusR5d7uePIUzqqWNH Vyh2L7tQDzoU7TPMMN9kXAykSGCrvcjJHfU5+mGVBNNqAnfOmGX4XALFFklsSESu zTb/CfY5rAX/rlQkEXy2kVyrP9njE0SC8JXN3xEh6Pq+upfULIesmtWvkhLjs5hG q0asTYlqC5Yb+BkJQBlkmLAG5B5Ix9sHoBB/N4PI2FeYctbL3KN3TMZ7L1HYxoF1 TjKgjJ2loo1+F+n5gkZorHMK9UG4mKnULyCELPIGDyihTQuVnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7//W5uvq11Id5j7YUKJ6htRc6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDIxMTk4OWUtZDAxYS0z NzNiLWIzYjctMTY3ODE2ZDFmMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzK4eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqPkk/mefJeusHuBfH/RgNkZFa4ILsVj6Is7819glcHOoeTO+O6h4Y2 mjW1y9cwA6xwzK3+HwiQp7s+lzCEYYzc+BFSxnmtBELx2e26UIJY4ANZY81Io++j dfq6dBGDYcyMWoPSaD+NkHTAA6fDXFFyjfsKY5QJtr86capqryXJXutyBF3BFHqR UxzXbfNG51AOVay0U/d15riGz0GYTfDCh0UNIUXgaJHtMmXVySZSPPYNfNgrtuMD 8nAxPv0qr+/WM8DHDv1vRKU74hHgNp8gMnwFdgIHXEf8mSNzpYPBdlZDPWX8Iqq7 WpuGTnSIqRisGYI3+po3k2SeN5hdiKo= -----END CERTIFICATE-----Generated at Sun Oct 4 08:30:37 2026 by rpki-client