$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa File: 43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa (raw, json) Hash identifier: jVUuR003GmW4lRxxZutTHOwjM9TKqGgboL3JKqAv+VQ= Subject key identifier: 48:21:03:2A:E6:AC:C3:05:F0:EC:4D:F1:B3:B1:A2:14:A8:41:75:A9 Certificate issuer: /CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Certificate serial: 010D0C9F4328584F3E47E7EA28E2AE7A1CD48740 Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 40628 IP address blocks: 204.62.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e7:ea:28:e2:ae:7a:1c:d4:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=3d86b0f0-f015-4bed-a677-73c84156d5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e1:b4:85:5b:cf:4e:a6:c6:66:df:e2:c3:29: 13:64:a2:82:fa:08:a9:d6:ce:0c:91:7f:b6:6b:d2: 8a:5e:e7:f5:06:c7:be:b9:9b:f0:9a:0f:f0:da:63: a6:1a:44:24:76:b1:c6:d7:75:d0:ef:92:9f:8e:78: df:e8:78:4c:c1:e4:ed:18:1b:a2:e2:f7:6c:30:25: 5c:5d:78:de:2f:0e:5c:f4:dc:66:83:2c:fd:36:da: 40:ea:54:73:d7:ef:cd:9e:b7:d2:f3:1e:68:dd:ab: c7:99:88:6c:17:4d:1e:9d:97:48:1c:39:e4:c3:97: 71:db:9d:f5:94:98:cb:47:a5:12:2e:8b:96:e6:29: 8d:f7:e6:51:31:9b:bb:18:09:40:d7:6a:c2:d9:9c: 61:ae:d5:6e:31:c5:81:33:35:0e:25:a3:de:0c:70: 74:03:43:1d:47:2e:6a:10:47:d5:84:ea:8c:fb:00: 2c:94:b5:54:07:d0:97:4a:b0:7e:35:05:4e:28:e2: c7:87:35:76:b3:50:37:f6:7b:78:c3:03:3e:88:79: ec:f0:e7:a8:b9:42:91:e5:b7:25:70:d5:f2:c5:06: 16:f7:71:c5:bf:2c:13:bf:98:69:09:8a:3e:99:0d: dc:75:0b:6c:01:e7:a8:40:44:34:38:f7:af:86:a6: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:21:03:2A:E6:AC:C3:05:F0:EC:4D:F1:B3:B1:A2:14:A8:41:75:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl X509v3 Authority Key Identifier: keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer sbgp-ipAddrBlock: critical IPv4: 204.62.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8f:b0:ac:f4:81:85:b8:5f:dd:19:a7:3f:3d:37:19:20:27: 31:1d:ea:48:ac:8b:8c:a1:27:1b:8f:04:af:ab:d0:21:16:f6: 87:87:80:57:14:6a:07:e2:3c:e8:fe:53:91:f6:3b:45:94:da: 87:13:51:d1:fb:2f:7c:b9:fe:9d:8e:f9:7c:1e:c1:31:d5:e2: 2c:e0:cb:a1:b1:c1:51:47:8c:7d:fa:49:f3:11:5d:f5:89:cf: 18:22:d6:fe:d2:bb:32:d2:32:b9:3b:1f:44:4f:3e:4b:5d:3d: ce:8f:a2:5a:fe:6c:11:eb:a3:ea:fa:e7:ff:99:8a:de:86:de: e6:f2:16:6b:0c:fe:9a:dd:64:e4:bb:a8:22:ef:93:2f:70:dc: 0d:95:44:7c:30:6f:a4:89:f2:bf:cc:e2:6a:cf:16:b0:12:1d: 8b:ed:ff:74:1d:37:5b:dc:5e:02:62:5c:b9:0d:43:35:0a:c7: 0d:f2:b8:34:89:7c:7e:65:61:20:b7:98:83:9e:b1:5e:86:19: 84:47:80:89:9e:2b:0d:17:72:f4:90:cd:04:72:f8:21:c3:b3: de:0f:37:c7:6e:ce:e9:ff:39:d8:d6:92:af:98:85:8e:98:7f: 3c:6c:cb:da:2e:3f:da:a7:57:49:eb:fc:9e:64:89:e2:7a:c4: f6:ce:15:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+fqKOKuehzUh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4 YTU3MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk M2Q4NmIwZjAtZjAxNS00YmVkLWE2NzctNzNjODQxNTZkNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OG0hVvPTqbGZt/iwykTZKKC+gip1s4MkX+2 a9KKXuf1Bse+uZvwmg/w2mOmGkQkdrHG13XQ75Kfjnjf6HhMweTtGBui4vdsMCVc XXjeLw5c9Nxmgyz9NtpA6lRz1+/NnrfS8x5o3avHmYhsF00enZdIHDnkw5dx2531 lJjLR6USLouW5imN9+ZRMZu7GAlA12rC2ZxhrtVuMcWBMzUOJaPeDHB0A0MdRy5q EEfVhOqM+wAslLVUB9CXSrB+NQVOKOLHhzV2s1A39nt4wwM+iHns8OeouUKR5bcl cNXyxQYW93HFvywTv5hpCYo+mQ3cdQtsAeeoQEQ0OPevhqbDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEghAyrmrMMF8OxN8bOxohSoQXWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFm ODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvNDM5NDBkY2MtMmRkYy0z OTZlLWI5ZWEtMTM0MWRjZmNkNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTkxZjgxZmYtNTMxNy00MGY0LWE1 NDQtNWRmMmUzMzU4YTU3L2E5MWY4MWZmLTUzMTctNDBmNC1hNTQ0LTVkZjJlMzM1 OGE1Ny5jcmwwHwYDVR0jBBgwFoAUNAcTZw8RHbNMsi51vbBuS9RfIl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYy ZTMzNThhNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzD4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECPsKz0gYW4X90Zpz89NxkgJzEd6kisi4yhJxuPBK+r0CEW9oeHgFcU agfiPOj+U5H2O0WU2ocTUdH7L3y5/p2O+XwewTHV4izgy6GxwVFHjH36SfMRXfWJ zxgi1v7SuzLSMrk7H0RPPktdPc6Polr+bBHro+r65/+Zit6G3ubyFmsM/prdZOS7 qCLvky9w3A2VRHwwb6SJ8r/M4mrPFrASHYvt/3QdN1vcXgJiXLkNQzUKxw3yuDSJ fH5lYSC3mIOesV6GGYRHgImeKw0XcvSQzQRy+CHDs94PN8duzun/OdjWkq+YhY6Y fzxsy9ouP9qnV0nr/J5kieJ6xPbOFRg= -----END CERTIFICATE-----Generated at Tue Sep 22 18:03:26 2026 by rpki-client