$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa File: 58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa (raw, json) Hash identifier: YOhSSbh82xymzQGgqibdfQIFLCRArD08g1GHts/F/E0= Subject key identifier: 38:50:90:15:7A:39:4B:DC:A0:D1:F4:69:64:0D:3D:1F:C0:AE:6D:65 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F4328584F7E7DB108ECD36B5810EBA780 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 1280 IP address blocks: 204.152.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b1:08:ec:d3:6b:58:10:eb:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=d3551f27-fda2-4bb6-959f-d3d734ba11f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:03:9e:84:7c:98:ed:a4:f1:c1:27:15:66:2f: 77:59:64:8a:e2:65:1e:2a:48:6b:9c:b1:f4:16:c3: 5f:88:55:cf:58:8d:58:25:e6:5d:79:46:aa:ba:0f: c3:5a:95:d7:5d:f8:f2:bb:ce:d0:d2:5a:42:b6:70: a4:97:14:23:82:16:93:19:cf:3b:86:55:2a:61:aa: cb:2a:59:74:18:34:cc:e9:67:e2:fe:f7:5e:03:5a: c3:9d:4c:74:a8:de:03:c7:f3:8e:22:e5:56:04:35: 82:12:eb:5d:78:0a:cb:dd:31:dd:1f:56:ca:b5:e2: 79:80:c6:aa:ed:13:a8:23:f1:db:d6:e9:4e:ea:79: b3:9f:db:98:91:82:de:0b:df:3f:56:4e:2b:57:67: d9:f0:99:1d:89:b1:5e:30:76:c0:a2:b9:c7:6f:5d: 99:c8:0e:fb:90:e8:47:a3:ea:e4:5a:79:d1:8d:87: d4:53:ff:fe:22:f9:df:a6:1b:85:20:4c:99:55:7b: f2:54:3b:f7:06:12:92:74:28:2c:3d:d0:57:e3:87: e0:73:a1:5c:81:4d:05:20:9a:77:e4:6f:8e:5d:a6: 75:3b:20:d0:9b:2c:12:3d:46:3c:33:8a:01:4b:f0: 2a:aa:d9:eb:c7:a1:ab:2d:b5:39:30:5b:f4:0d:5a: 7b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:50:90:15:7A:39:4B:DC:A0:D1:F4:69:64:0D:3D:1F:C0:AE:6D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/58de4557-2aef-37b6-b27a-3d70da1eb4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2b:eb:6e:7c:5c:d1:8e:18:5f:36:6e:3c:fb:22:aa:8a:38: 8c:5f:16:87:5b:91:a3:f6:d2:17:33:f5:05:65:d9:1c:e9:fd: c4:50:a2:b8:05:6e:3e:06:de:d2:89:b2:2b:03:70:e0:22:9e: 4e:dc:29:74:f8:c3:77:b0:b1:cd:87:ae:8d:44:cb:47:76:10: 3a:52:12:48:fd:5a:f9:47:49:15:4f:70:8f:a9:a1:89:36:d4: 20:ee:af:22:4a:de:d6:06:7f:fd:2d:34:ec:63:17:c5:c1:2c: 19:dc:16:44:50:24:c8:cd:5e:93:ba:33:95:c7:c2:6d:2e:64: 66:1b:ca:94:68:ac:3f:9d:5b:99:01:69:f6:00:5a:f8:aa:49: 6f:62:b1:98:8e:d8:ee:d1:1f:4f:fa:2b:ae:7f:b9:90:ca:42: de:36:0f:f3:58:97:51:43:12:e9:85:35:5e:76:07:3a:f5:26: f9:80:ae:d4:f3:97:99:61:3d:89:f4:63:7c:84:d1:bb:cb:76: c6:ab:90:7f:05:61:3d:f1:ce:88:6a:40:1a:b0:8f:03:17:9f: 0b:42:e0:cf:7c:d1:a3:79:2a:9b:cb:7e:80:f1:03:95:d0:54: 7b:1f:2c:16:b9:47:f9:85:7c:03:8a:4d:37:f1:80:3b:db:61: 05:8f:8a:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbEI7NNrWBDrp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDM1NTFmMjctZmRhMi00YmI2LTk1OWYtZDNkNzM0YmExMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gOehHyY7aTxwScVZi93WWSK4mUeKkhrnLH0 FsNfiFXPWI1YJeZdeUaqug/DWpXXXfjyu87Q0lpCtnCklxQjghaTGc87hlUqYarL Kll0GDTM6Wfi/vdeA1rDnUx0qN4Dx/OOIuVWBDWCEutdeArL3THdH1bKteJ5gMaq 7ROoI/Hb1ulO6nmzn9uYkYLeC98/Vk4rV2fZ8JkdibFeMHbAornHb12ZyA77kOhH o+rkWnnRjYfUU//+IvnfphuFIEyZVXvyVDv3BhKSdCgsPdBX44fgc6FcgU0FIJp3 5G+OXaZ1OyDQmywSPUY8M4oBS/Aqqtnrx6GrLbU5MFv0DVp7hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhQkBV6OUvcoNH0aWQNPR/Arm1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNThkZTQ1NTctMmFlZi0z N2I2LWIyN2EtM2Q3MGRhMWViNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQr6258XNGOGF82bjz7IqqKOIxfFodbkaP20hcz9QVl2Rzp/cRQorgF bj4G3tKJsisDcOAink7cKXT4w3ewsc2Hro1Ey0d2EDpSEkj9WvlHSRVPcI+poYk2 1CDuryJK3tYGf/0tNOxjF8XBLBncFkRQJMjNXpO6M5XHwm0uZGYbypRorD+dW5kB afYAWviqSW9isZiO2O7RH0/6K65/uZDKQt42D/NYl1FDEumFNV52Bzr1JvmArtTz l5lhPYn0Y3yE0bvLdsarkH8FYT3xzohqQBqwjwMXnwtC4M980aN5KpvLfoDxA5XQ VHsfLBa5R/mFfAOKTTfxgDvbYQWPigw= -----END CERTIFICATE-----Generated at Thu Oct 15 08:26:47 2026 by rpki-client