$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1/ca3ff1d5-3f84-349d-a1d4-bb7bcad905e7.roa File: ca3ff1d5-3f84-349d-a1d4-bb7bcad905e7.roa (raw, json) Hash identifier: 7XBQ9/qyHXdIlg02v32F6djoZf1JeNKkJIcCC48JNHo= Subject key identifier: 72:A5:3C:1E:50:89:C6:5F:A8:E1:E8:7F:1C:77:42:87:0E:D6:90:A0 Certificate issuer: /CN=ac9cf9a9-e95a-4c50-a43f-9589c99bccc1 Certificate serial: 010D0C9F4328584F05F52C65D8C98C546D66F0A8 Authority key identifier: 65:3B:6E:8C:5C:5E:D6:80:4D:37:11:A8:D7:67:95:5C:10:D6:1D:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1/ca3ff1d5-3f84-349d-a1d4-bb7bcad905e7.roa Signing time: Mon 31 Aug 2026 20:48:29 +0000 ROA not before: Mon 31 Aug 2026 20:48:29 +0000 ROA not after: Sun 29 Nov 2026 21:48:29 +0000 asID: 402910 IP address blocks: 204.87.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:f5:2c:65:d8:c9:8c:54:6d:66:f0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9cf9a9-e95a-4c50-a43f-9589c99bccc1 Validity Not Before: Aug 31 20:48:29 2026 GMT Not After : Nov 29 21:48:29 2026 GMT Subject: CN=3db4c672-15ee-41ab-a5a4-e3d6e0d3bf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:6e:ca:83:93:73:0d:9b:b9:2f:c5:82:f5: ae:06:62:de:d6:31:23:f6:c1:6d:c3:a6:80:47:42: 91:3f:8e:e8:fb:22:57:f5:51:87:41:9d:5f:4c:87: b8:c0:57:67:6a:d7:b2:d3:0d:57:59:1f:7e:41:08: bb:0a:bf:ef:7b:0b:1a:84:de:5e:d0:6c:2a:90:36: 2f:df:9c:f0:bb:8f:3d:63:13:36:23:8e:2d:3b:3c: d9:fa:73:19:6f:b9:70:ac:2f:d0:cc:fd:92:f2:0c: 5b:a5:05:38:40:c1:1e:46:46:27:b9:46:19:51:a4: b7:8c:d3:6f:ea:cf:33:95:15:c9:2f:cf:7b:7a:37: e6:71:5f:9a:7a:77:85:60:2a:85:08:3b:a0:f8:e5: a9:44:6e:ef:16:2e:16:b7:38:68:6c:e9:f4:cc:c7: a7:98:ef:f8:0e:03:ee:81:d0:e7:12:c4:ce:2e:0e: 3c:64:28:7c:11:3f:5f:b0:58:7e:ff:b0:a0:f6:91: 9d:88:c6:e1:cf:90:49:cb:cf:1e:69:94:9f:ca:43: 30:cd:dd:cc:bc:42:c0:64:62:8c:4f:2f:57:e1:27: 01:af:d1:ae:08:ac:3c:02:28:95:8f:34:b3:02:6a: f2:aa:3a:4a:71:37:5d:9b:32:49:03:1f:24:21:d4: c1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A5:3C:1E:50:89:C6:5F:A8:E1:E8:7F:1C:77:42:87:0E:D6:90:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1/ca3ff1d5-3f84-349d-a1d4-bb7bcad905e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1.crl X509v3 Authority Key Identifier: keyid:65:3B:6E:8C:5C:5E:D6:80:4D:37:11:A8:D7:67:95:5C:10:D6:1D:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac9cf9a9-e95a-4c50-a43f-9589c99bccc1.cer sbgp-ipAddrBlock: critical IPv4: 204.87.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:69:95:a3:23:f4:35:38:12:54:01:99:49:cf:50:2f:7a:7e: c3:ee:d3:bb:04:fe:b6:69:5c:df:d5:3d:21:7c:14:4e:be:ab: b3:df:04:a5:3d:92:28:4d:24:51:a8:6b:4b:2d:3a:ca:3d:ea: 55:9f:92:e3:1c:86:2b:f9:a9:de:1d:69:77:b3:00:6d:f2:e7: b2:87:e3:08:4c:2e:80:91:93:ea:7c:99:ed:9d:96:48:bb:3a: f3:b8:90:65:27:09:b4:dd:36:c5:3e:5b:8e:bf:aa:1b:3c:dc: c4:9f:20:36:4a:84:e1:50:a9:69:44:a1:27:eb:63:c1:f2:b9: 99:90:58:8a:89:3b:d0:8e:1f:28:60:62:aa:d6:e0:58:98:c2: da:58:61:4d:e6:43:03:34:af:e0:ac:c4:36:ed:da:66:21:af: bc:2e:a9:a7:2f:30:d5:58:73:11:cc:59:41:02:f0:55:66:4b: e0:5f:c8:64:2a:3d:2d:c1:96:d2:bb:54:be:97:3c:3a:2f:fe: c0:bd:c8:2d:bd:7d:ec:9d:87:b0:80:e6:80:d2:cd:6a:d5:0c: 48:43:b3:35:78:19:1d:57:80:1b:30:03:cb:6f:8e:8f:5a:1b: 78:21:a2:3d:3e:bf:6c:22:36:f3:ce:0a:3b:78:59:15:d8:eb: 41:75:b5:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8F9Sxl2MmMVG1m8KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5Y2Y5YTktZTk1YS00YzUwLWE0M2YtOTU4OWM5OWJj Y2MxMB4XDTI2MDgzMTIwNDgyOVoXDTI2MTEyOTIxNDgyOVowLzEtMCsGA1UEAxMk M2RiNGM2NzItMTVlZS00MWFiLWE1YTQtZTNkNmUwZDNiZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyVuyoOTcw2buS/FgvWuBmLe1jEj9sFtw6aA R0KRP47o+yJX9VGHQZ1fTIe4wFdnatey0w1XWR9+QQi7Cr/vewsahN5e0GwqkDYv 35zwu489YxM2I44tOzzZ+nMZb7lwrC/QzP2S8gxbpQU4QMEeRkYnuUYZUaS3jNNv 6s8zlRXJL897ejfmcV+aeneFYCqFCDug+OWpRG7vFi4WtzhobOn0zMenmO/4DgPu gdDnEsTOLg48ZCh8ET9fsFh+/7Cg9pGdiMbhz5BJy88eaZSfykMwzd3MvELAZGKM Ty9X4ScBr9GuCKw8AiiVjzSzAmryqjpKcTddmzJJAx8kIdTB8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKlPB5QicZfqOHofxx3QocO1pCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzlj ZjlhOS1lOTVhLTRjNTAtYTQzZi05NTg5Yzk5YmNjYzEvY2EzZmYxZDUtM2Y4NC0z NDlkLWExZDQtYmI3YmNhZDkwNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWM5Y2Y5YTktZTk1YS00YzUwLWE0 M2YtOTU4OWM5OWJjY2MxL2FjOWNmOWE5LWU5NWEtNGM1MC1hNDNmLTk1ODljOTli Y2NjMS5jcmwwHwYDVR0jBBgwFoAUZTtujFxe1oBNNxGo12eVXBDWHQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzljZjlhOS1lOTVhLTRjNTAtYTQzZi05NTg5 Yzk5YmNjYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRplaMj9DU4ElQBmUnPUC96fsPu07sE/rZpXN/VPSF8FE6+q7PfBKU9 kihNJFGoa0stOso96lWfkuMchiv5qd4daXezAG3y57KH4whMLoCRk+p8me2dlki7 OvO4kGUnCbTdNsU+W46/qhs83MSfIDZKhOFQqWlEoSfrY8HyuZmQWIqJO9COHyhg YqrW4FiYwtpYYU3mQwM0r+CsxDbt2mYhr7wuqacvMNVYcxHMWUEC8FVmS+BfyGQq PS3BltK7VL6XPDov/sC9yC29feydh7CA5oDSzWrVDEhDszV4GR1XgBswA8tvjo9a G3ghoj0+v2wiNvPOCjt4WRXY60F1tak= -----END CERTIFICATE-----Generated at Sun Sep 20 10:54:37 2026 by rpki-client