$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa File: a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa (raw, json) Hash identifier: Rk0BXcGsHkSwCO5sO+vmsQLCnQ6hZXSGsLa93ZDpEq0= Subject key identifier: 0F:DA:B4:F8:80:AA:A0:A6:CB:C0:A2:B4:D7:06:81:8E:51:2C:87:DA Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584F3FAD42C40A455BC5980CE340 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 27313 IP address blocks: 204.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:42:c4:0a:45:5b:c5:98:0c:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=201d6995-a888-4ee5-aab3-0e04f31e7099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:cf:db:e1:ca:23:3c:cc:c6:2d:77:c4:7d: 1b:59:a6:a0:47:8c:a2:a3:53:db:d9:fe:b7:e2:fd: 05:43:33:d2:15:33:ca:1c:7f:c5:ab:fb:c1:ed:99: 6a:25:69:95:ce:00:3b:ac:26:76:db:78:7b:2a:1b: 33:6b:a2:3e:91:4e:ca:53:4a:b7:ea:68:ac:0d:a0: 5d:97:11:73:22:cb:8d:84:54:a0:0f:c8:3d:50:af: ba:46:9c:7f:76:a9:0c:b3:2a:8e:68:e8:1b:d5:a6: ac:38:fa:d7:e8:51:8e:dd:23:1c:b5:9a:4f:c1:46: 83:65:b4:bf:09:c9:8d:e8:2e:bc:fa:14:0d:c8:27: 21:1d:9a:41:ef:05:d8:b9:6f:36:b9:6e:34:90:ab: 66:3f:d5:f7:bf:25:15:78:ef:26:5d:e3:11:a1:4f: 92:43:7f:75:2f:48:63:c5:20:6e:80:4a:d1:f6:9f: 55:b8:ab:a1:f7:b7:cf:aa:b3:9b:7c:16:36:a6:f5: b1:85:f5:19:50:21:36:4b:96:97:2a:97:9c:bf:c4: 63:78:5c:10:e0:9c:d8:21:ed:59:96:ef:a8:8c:55: 40:34:75:d4:28:fe:d1:71:83:28:39:94:ff:52:9d: 8a:37:bd:92:30:6d:03:51:3e:7c:ff:50:3d:fc:68: d5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DA:B4:F8:80:AA:A0:A6:CB:C0:A2:B4:D7:06:81:8E:51:2C:87:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/a23f8b54-4a71-3b0f-92a1-2af73cc2411b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:38:e1:01:90:44:1a:0a:83:63:48:c0:cd:41:8b:98:09:5b: ae:17:b1:4d:77:f6:06:65:92:b5:7d:16:06:36:d6:fd:d4:58: dc:04:f6:32:a9:d2:af:24:f6:35:00:22:28:34:96:82:b6:0c: d4:13:fa:9c:93:ac:64:7c:07:b7:f0:b4:a7:3f:26:49:95:16: d3:0b:32:20:6c:45:e0:18:77:37:13:e5:de:fa:dc:34:d0:c0: a3:b1:0e:c2:a1:99:97:9c:47:95:9d:ba:08:f1:05:bb:00:44: a5:be:46:62:ef:7e:cd:31:47:00:2a:d9:3c:9b:c0:af:80:f8: 51:8a:b3:99:e6:1f:c9:55:b2:37:10:f4:6a:5b:59:5c:3c:3e: 04:f2:e8:74:5a:1a:41:19:d6:9c:51:37:b2:82:8f:17:27:01: 24:ac:b1:dd:73:28:59:f7:a7:9a:d8:e2:40:be:3e:78:c1:d8: 9f:e3:72:11:b6:54:e4:fd:49:4c:00:7d:c0:da:8d:b8:83:a1: 64:d3:46:93:dc:37:db:56:e1:b8:66:da:0e:b9:4e:1a:9a:c6: d5:41:2e:31:6a:5c:e7:bd:15:1f:10:36:8c:31:e5:bd:1a:ac: b5:46:1a:57:38:81:96:77:e0:ec:d3:49:81:01:88:ae:5e:1a: 4f:67:29:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rULECkVbxZgM40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjAxZDY5OTUtYTg4OC00ZWU1LWFhYjMtMGUwNGYzMWU3MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNXP2+HKIzzMxi13xH0bWaagR4yio1Pb2f63 4v0FQzPSFTPKHH/Fq/vB7ZlqJWmVzgA7rCZ223h7Khsza6I+kU7KU0q36misDaBd lxFzIsuNhFSgD8g9UK+6Rpx/dqkMsyqOaOgb1aasOPrX6FGO3SMctZpPwUaDZbS/ CcmN6C68+hQNyCchHZpB7wXYuW82uW40kKtmP9X3vyUVeO8mXeMRoU+SQ391L0hj xSBugErR9p9VuKuh97fPqrObfBY2pvWxhfUZUCE2S5aXKpecv8RjeFwQ4JzYIe1Z lu+ojFVANHXUKP7RcYMoOZT/Up2KN72SMG0DUT58/1A9/GjVswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/atPiAqqCmy8CitNcGgY5RLIfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvYTIzZjhiNTQtNGE3MS0z YjBmLTkyYTEtMmFmNzNjYzI0MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ44QGQRBoKg2NIwM1Bi5gJW64XsU139gZlkrV9FgY21v3UWNwE9jKp 0q8k9jUAIig0loK2DNQT+pyTrGR8B7fwtKc/JkmVFtMLMiBsReAYdzcT5d763DTQ wKOxDsKhmZecR5WdugjxBbsARKW+RmLvfs0xRwAq2TybwK+A+FGKs5nmH8lVsjcQ 9GpbWVw8PgTy6HRaGkEZ1pxRN7KCjxcnASSssd1zKFn3p5rY4kC+PnjB2J/jchG2 VOT9SUwAfcDajbiDoWTTRpPcN9tW4bhm2g65ThqaxtVBLjFqXOe9FR8QNowx5b0a rLVGGlc4gZZ34OzTSYEBiK5eGk9nKZo= -----END CERTIFICATE-----Generated at Tue Sep 22 14:08:22 2026 by rpki-client