$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa File: fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa (raw, json) Hash identifier: O9N+K11zh0FhWeaWIebtYs0GtwjDCcn/jvm4HMsLBPQ= Subject key identifier: E5:29:40:C6:F6:39:6C:2C:C3:DF:E9:40:AB:DB:82:2E:66:3E:EF:E2 Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584EA2DFC4F9EAE420E909D78000 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 398573 IP address blocks: 204.108.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:c4:f9:ea:e4:20:e9:09:d7:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=7aa06eb7-edc6-4372-9e71-7b0dc143ab4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:f5:1e:ee:a4:39:dc:e2:f5:f6:29:c0:76: e5:a3:67:e7:cb:db:fe:a7:77:1a:0e:68:6c:d6:f3: 6b:65:27:8e:8a:06:be:9c:3a:ed:84:56:97:a1:27: e8:5c:33:da:fc:64:2c:a1:d5:a6:58:2f:d9:62:c6: 5e:fe:1e:18:0f:af:38:1b:d8:79:2e:2c:32:b4:8f: de:62:c3:28:64:da:76:d1:62:ca:80:b9:bd:d8:88: 3a:b7:c1:ab:f0:a5:6b:12:6e:db:4f:12:12:35:11: 8f:63:43:28:0e:85:21:87:72:64:ce:d6:96:dc:92: 8c:89:66:ea:53:ec:d9:08:e9:08:97:7c:df:2c:63: 1b:6d:50:36:71:7b:b0:be:75:25:30:04:51:2d:b9: 20:5b:b3:93:c0:21:31:6b:7c:9c:9f:d8:50:f7:5a: 06:11:4c:9a:d5:d2:bb:3d:14:20:a3:ad:83:3d:f5: e7:47:96:85:54:94:2a:68:72:d7:67:e3:35:c7:79: fd:b6:5a:bd:2d:10:62:1a:64:f6:aa:b8:e3:70:a3: f2:5d:02:af:1f:cf:77:9a:5b:6e:c9:11:79:91:f4: ec:bd:6a:e2:19:d3:34:d6:13:35:da:f8:7e:e9:8c: a0:5e:3e:7f:3b:d1:c4:38:47:c3:5d:32:4a:22:82: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:29:40:C6:F6:39:6C:2C:C3:DF:E9:40:AB:DB:82:2E:66:3E:EF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 204.108.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e6:5e:d3:8e:c8:de:d4:5a:fb:1d:6c:e4:f1:92:93:d8:35: 40:f9:d3:27:c2:96:0e:32:4a:de:2e:6d:f3:e3:2c:fc:39:21: 2c:b5:21:89:8f:23:ae:96:c3:df:82:61:62:0f:18:cd:ab:fe: ff:a6:ac:f8:ba:46:9c:aa:c3:1a:08:57:2c:e3:a6:73:8a:56: 0c:52:bb:f3:9a:9b:13:98:8e:05:93:68:9f:bf:6f:0a:e4:ec: 8a:f8:cf:3c:c2:0d:32:d5:72:93:76:98:0f:8d:21:eb:59:38: 76:8b:20:0a:d1:f6:db:63:a1:8c:70:22:26:35:0b:8b:61:8c: b0:f2:02:e7:ea:c4:1c:a4:26:60:d5:14:75:09:22:34:79:53: 1c:5d:ae:30:0f:b0:eb:a2:8f:13:8a:90:45:62:85:f7:ae:c4: 3d:1b:14:17:d4:3a:74:fa:2a:29:62:42:42:48:15:33:93:c9: c5:cc:b9:c8:27:a3:af:8f:31:94:b4:9d:0b:57:a6:b2:f7:e6: 67:a3:06:cb:a4:c2:a3:01:af:df:e2:00:9d:28:23:60:b3:3b: 42:37:86:10:c0:30:4c:45:69:ab:9c:86:da:da:71:6e:cd:f8: be:2a:26:53:0a:0a:f9:7c:c5:0a:ba:0a:d3:31:61:41:1c:81: 74:c3:bc:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38T56uQg6QnXgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk N2FhMDZlYjctZWRjNi00MzcyLTllNzEtN2IwZGMxNDNhYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJP1Hu6kOdzi9fYpwHblo2fny9v+p3caDmhs 1vNrZSeOiga+nDrthFaXoSfoXDPa/GQsodWmWC/ZYsZe/h4YD684G9h5LiwytI/e YsMoZNp20WLKgLm92Ig6t8Gr8KVrEm7bTxISNRGPY0MoDoUhh3JkztaW3JKMiWbq U+zZCOkIl3zfLGMbbVA2cXuwvnUlMARRLbkgW7OTwCExa3ycn9hQ91oGEUya1dK7 PRQgo62DPfXnR5aFVJQqaHLXZ+M1x3n9tlq9LRBiGmT2qrjjcKPyXQKvH893mltu yRF5kfTsvWriGdM01hM12vh+6YygXj5/O9HEOEfDXTJKIoJ/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUpQMb2OWwsw9/pQKvbgi5mPu/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZmQxMGIzZjMtMTc3MC0z YTM0LTg4ZmQtNWYwMWIyZDE3MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfmXtOOyN7UWvsdbOTxkpPYNUD50yfClg4ySt4ubfPjLPw5ISy1IYmP I66Ww9+CYWIPGM2r/v+mrPi6RpyqwxoIVyzjpnOKVgxSu/OamxOYjgWTaJ+/bwrk 7Ir4zzzCDTLVcpN2mA+NIetZOHaLIArR9ttjoYxwIiY1C4thjLDyAufqxBykJmDV FHUJIjR5UxxdrjAPsOuijxOKkEVihfeuxD0bFBfUOnT6KiliQkJIFTOTycXMucgn o6+PMZS0nQtXprL35mejBsukwqMBr9/iAJ0oI2CzO0I3hhDAMExFaauchtracW7N +L4qJlMKCvl8xQq6CtMxYUEcgXTDvOQ= -----END CERTIFICATE-----Generated at Wed Jul 29 08:33:04 2026 by rpki-client