$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa File: 235cefab-f003-344e-a29e-ed3307aa2358.roa (raw, json) Hash identifier: HEq1fLncEZe4L7aqEsRpGkL+TzhNWB+kTXfKUq9FiiI= Subject key identifier: 49:96:42:3A:15:D6:EA:CC:12:BA:2C:52:79:29:37:31:BB:3B:68:55 Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Certificate serial: 010D0C9F4328584F10378DD34CF3E592B9F7CB00 Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 204.57.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8d:d3:4c:f3:e5:92:b9:f7:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=d5ce224e-db0a-481a-a55f-1027f90846bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:11:7b:c2:32:bf:e2:6c:e9:49:a4:cb:c0: 51:1e:6d:0d:1a:8a:39:ea:2e:05:66:08:ec:8b:b5: a5:f6:3d:c4:a8:ec:ce:63:90:ae:92:79:66:a9:99: bf:5e:a1:47:25:37:17:4d:d1:b2:1c:f4:7c:f7:4d: c6:5f:27:12:04:24:8d:6b:40:33:53:69:2d:6a:9d: 91:58:c8:e4:16:38:f0:ad:56:30:ee:e4:61:7a:f5: 40:a4:75:ef:a9:ca:a3:9d:21:8f:5c:3a:7b:77:6a: 90:f4:30:3a:43:a4:e7:1b:6d:1c:48:eb:09:77:f6: 4d:87:b7:fb:dd:7d:66:1a:1e:f2:e4:9b:01:a5:ca: fd:d7:15:36:ae:55:96:bd:c7:88:05:b0:8c:2e:48: a4:36:78:0d:be:fc:5e:25:98:9e:b3:47:0d:7c:0b: ef:92:67:60:ae:fa:c0:64:23:6d:b5:04:1c:dc:60: a9:24:dc:e7:b3:e3:51:f4:38:9a:48:60:26:ec:cc: 29:cb:50:cc:e4:95:be:6b:3c:27:f0:04:a3:1d:d2: f0:55:cd:e2:2a:cc:19:78:3c:88:9f:c6:f6:dd:2c: 24:93:8a:69:dd:60:e8:c4:3c:07:d3:cc:ad:82:54: 1c:fe:ea:22:12:fc:89:0b:a5:45:dc:35:59:31:01: f5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:96:42:3A:15:D6:EA:CC:12:BA:2C:52:79:29:37:31:BB:3B:68:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl X509v3 Authority Key Identifier: keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer sbgp-ipAddrBlock: critical IPv4: 204.57.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:93:40:bf:27:06:05:57:05:27:66:f5:fa:7f:ff:aa:22:8b: da:04:2f:ad:b3:8e:89:0e:4a:3b:e4:bc:c6:47:4b:c1:80:db: b8:ad:53:cd:3c:4c:59:13:2b:9d:70:d2:7a:73:c3:c7:57:c6: c7:50:a4:c6:b7:d3:7d:79:58:b2:0c:19:92:df:8c:31:10:72: ff:8f:2a:e2:a8:a3:15:d5:45:cb:e7:93:6e:c7:85:66:ba:8f: cf:2d:6a:59:17:8d:b9:13:88:1d:77:03:50:76:d7:e4:1e:38: 65:73:5a:44:3b:29:43:1c:eb:ee:b2:48:57:94:30:08:95:a9: 42:d7:6e:2c:e1:a9:d7:5e:eb:5b:ee:0a:57:58:c9:27:e7:75: 95:76:78:24:40:f7:0d:b4:cf:cc:75:b1:e1:dd:88:d0:47:65: e9:75:94:40:3c:38:27:bc:2b:26:93:cd:c5:ae:90:93:e7:ab: 95:ba:32:e7:97:3a:65:64:43:9d:1e:b7:0f:90:0d:dc:61:c9: cd:9e:a7:57:4c:5f:48:2e:58:34:4f:d9:93:5e:79:fd:ef:83: e9:f8:ce:da:dc:ae:c2:a1:00:75:da:e1:4c:5e:f2:45:2e:32: 61:f1:61:5f:5f:45:16:c0:6e:2a:40:0f:2c:2f:31:5b:51:b4: 04:c5:8d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN43TTPPlkrn3ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz MzljMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDVjZTIyNGUtZGIwYS00ODFhLWE1NWYtMTAyN2Y5MDg0NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/MRe8Iyv+Js6Umky8BRHm0NGoo56i4FZgjs i7Wl9j3EqOzOY5CuknlmqZm/XqFHJTcXTdGyHPR8903GXycSBCSNa0AzU2ktap2R WMjkFjjwrVYw7uRhevVApHXvqcqjnSGPXDp7d2qQ9DA6Q6TnG20cSOsJd/ZNh7f7 3X1mGh7y5JsBpcr91xU2rlWWvceIBbCMLkikNngNvvxeJZies0cNfAvvkmdgrvrA ZCNttQQc3GCpJNzns+NR9DiaSGAm7Mwpy1DM5JW+azwn8ASjHdLwVc3iKswZeDyI n8b23Swkk4pp3WDoxDwH08ytglQc/uoiEvyJC6VF3DVZMQH1zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmWQjoV1urMErosUnkpNzG7O2hVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvMjM1Y2VmYWItZjAwMy0z NDRlLWEyOWUtZWQzMzA3YWEyMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4 NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh M2YzZTMzOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzDnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6TQL8nBgVXBSdm9fp//6oii9oEL62zjokOSjvkvMZHS8GA27itU808 TFkTK51w0npzw8dXxsdQpMa30315WLIMGZLfjDEQcv+PKuKooxXVRcvnk27HhWa6 j88talkXjbkTiB13A1B21+QeOGVzWkQ7KUMc6+6ySFeUMAiVqULXbizhqdde61vu CldYySfndZV2eCRA9w20z8x1seHdiNBHZel1lEA8OCe8KyaTzcWukJPnq5W6MueX OmVkQ50etw+QDdxhyc2ep1dMX0guWDRP2ZNeef3vg+n4ztrcrsKhAHXa4Uxe8kUu MmHxYV9fRRbAbipADywvMVtRtATFjXc= -----END CERTIFICATE-----Generated at Tue Sep 22 18:43:41 2026 by rpki-client