$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa File: 3880b21f-244e-35e6-a256-bd5d4c123331.roa (raw, json) Hash identifier: LWyPEXs+vyQWZA5e1tnB7xaEmwP4WjXmp9tOo3J/ZQc= Subject key identifier: 79:90:B5:25:4B:52:11:E0:28:EF:AE:11:E7:57:EF:9A:A3:73:AE:E2 Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584F20F7C2DAD838A2816928C670 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 15204 IP address blocks: 204.15.52.0/22 maxlen: 22 204.15.52.0/23 maxlen: 23 204.15.54.0/24 maxlen: 24 204.15.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c2:da:d8:38:a2:81:69:28:c6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2e376efa-8379-4cf0-b142-0a0411e1cf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:d7:a3:35:e5:14:f2:67:6e:c7:76:fa:fe: a2:ec:e1:ef:78:b0:8d:ba:47:fe:18:30:e2:36:36: 42:fd:c2:5b:e7:46:d3:80:4f:11:e5:dc:49:53:f0: 19:63:87:9e:26:66:4a:a4:5c:e0:32:5a:c7:ed:7b: 99:6c:ff:a6:0b:3e:6b:67:1d:c3:52:29:96:7f:ff: ad:1b:9b:96:3f:3d:ee:1e:51:46:c6:0d:24:94:10: 1c:93:20:44:c7:db:52:ee:c7:88:d6:46:c4:c1:45: 77:3f:ce:a4:40:ff:a6:54:4e:e0:e9:ce:86:8c:76: d6:e1:bf:41:de:5d:a5:cf:02:a6:ff:16:40:4d:65: e1:b2:0d:5a:74:c8:0c:e9:48:54:5e:f9:33:f4:2e: 94:71:fd:6d:10:f6:c2:2e:3a:57:39:e3:d6:dd:46: 13:96:17:4b:32:f0:ce:6d:45:3e:28:8a:6e:2c:de: ed:2e:cb:f3:fe:f0:e8:3b:b9:f4:2e:6b:ba:65:67: f4:c5:9c:0e:54:ba:6d:36:3a:68:87:d7:d8:8c:af: 96:7e:8c:c9:bb:23:c9:f0:e2:3a:30:06:e5:d4:32: e0:a6:04:78:eb:7a:67:76:36:a7:a9:4e:0e:4c:43: 49:43:09:a3:38:6a:f5:25:b2:2b:53:2e:0e:da:c4: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:90:B5:25:4B:52:11:E0:28:EF:AE:11:E7:57:EF:9A:A3:73:AE:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 204.15.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fe:b0:97:61:b5:99:f6:2f:bb:c4:15:35:b5:6d:f8:1c:4f: 2b:b3:af:43:90:67:c3:53:cc:6e:e3:29:30:62:ad:b9:02:99: fe:ab:4d:61:31:50:a9:55:66:db:1d:09:32:8b:d2:21:4d:d7: 39:36:f7:54:21:bd:fd:ac:fa:b1:ad:5e:c3:ce:23:03:4c:fd: 73:db:aa:bd:a8:50:b4:a2:b2:19:a6:d8:1d:56:c5:07:f8:86: 3a:70:8b:47:11:a6:1f:f5:29:bf:6c:20:a7:f9:69:93:0b:d4: 20:9d:7c:12:d7:f6:a2:b9:75:c9:08:75:01:3a:f2:b2:f2:40: 5d:ed:2e:71:69:59:a2:81:eb:2c:46:32:32:13:ad:78:d9:41: 67:41:c5:19:f6:6f:6d:6a:a9:fd:ef:18:2f:9b:0e:53:f1:51: 6b:48:27:7a:d8:9a:c7:da:ec:e1:68:c2:45:98:82:ea:56:66: f6:5d:47:28:0b:f9:14:e5:36:f6:6f:d1:bd:dd:8d:44:70:10: d1:e9:f0:f3:7c:45:04:83:9a:d5:8f:08:ef:2a:39:35:16:53: dd:60:ad:f0:77:6d:e3:ad:cf:f5:bd:a1:c1:f5:cd:45:46:8a: d9:59:94:04:e9:79:28:b3:4d:89:bc:1b:76:b9:83:52:96:77: 40:7c:80:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98La2DiigWkoxnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MmUzNzZlZmEtODM3OS00Y2YwLWIxNDItMGEwNDExZTFjZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0nXozXlFPJnbsd2+v6i7OHveLCNukf+GDDi NjZC/cJb50bTgE8R5dxJU/AZY4eeJmZKpFzgMlrH7XuZbP+mCz5rZx3DUimWf/+t G5uWPz3uHlFGxg0klBAckyBEx9tS7seI1kbEwUV3P86kQP+mVE7g6c6GjHbW4b9B 3l2lzwKm/xZATWXhsg1adMgM6UhUXvkz9C6Ucf1tEPbCLjpXOePW3UYTlhdLMvDO bUU+KIpuLN7tLsvz/vDoO7n0Lmu6ZWf0xZwOVLptNjpoh9fYjK+WfozJuyPJ8OI6 MAbl1DLgpgR463pndjanqU4OTENJQwmjOGr1JbIrUy4O2sTQ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmQtSVLUhHgKO+uEedX75qjc67iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvMzg4MGIyMWYtMjQ0ZS0z NWU2LWEyNTYtYmQ1ZDRjMTIzMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn+sJdhtZn2L7vEFTW1bfgcTyuzr0OQZ8NTzG7jKTBirbkCmf6rTWEx UKlVZtsdCTKL0iFN1zk291Qhvf2s+rGtXsPOIwNM/XPbqr2oULSishmm2B1WxQf4 hjpwi0cRph/1Kb9sIKf5aZML1CCdfBLX9qK5dckIdQE68rLyQF3tLnFpWaKB6yxG MjITrXjZQWdBxRn2b21qqf3vGC+bDlPxUWtIJ3rYmsfa7OFowkWYgupWZvZdRygL +RTlNvZv0b3djURwENHp8PN8RQSDmtWPCO8qOTUWU91grfB3beOtz/W9ocH1zUVG itlZlATpeSizTYm8G3a5g1KWd0B8gAw= -----END CERTIFICATE-----Generated at Fri Sep 25 03:38:25 2026 by rpki-client