$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa File: 504539a8-a450-354d-9c7e-6a0128d4ded2.roa (raw, json) Hash identifier: yJIp3Ocbpxco7b3WssE0OKhosgHAd5erLtnug9lnxqI= Subject key identifier: 54:EE:C8:37:21:06:CF:AD:45:AC:26:7B:E1:57:C5:6D:57:8C:1E:10 Certificate issuer: /CN=c003af2f-f626-4f2a-a59d-433951f53b3b Certificate serial: 010D0C9F4328584F4975B417089606A7DDB13780 Authority key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7132 IP address blocks: 204.17.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:b4:17:08:96:06:a7:dd:b1:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c003af2f-f626-4f2a-a59d-433951f53b3b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=928fa3cd-4404-460c-94fd-3809d38a06b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:c8:6b:ef:a6:6d:90:6b:5c:cd:6b:6f:2b: c6:90:26:ac:59:b9:46:ef:22:e8:87:d9:a8:03:7d: a1:bc:bf:ae:53:59:8d:70:3b:a7:9c:0b:81:67:d7: 16:bf:ce:36:0d:73:d9:ed:51:6c:4d:0b:14:c1:3c: f0:a3:0b:d7:78:06:93:7b:02:96:ac:73:20:f3:af: b2:9a:28:ef:e6:b7:37:9a:76:41:9e:14:c0:7a:a9: 0c:0d:a8:9a:91:e0:04:9e:b3:2e:68:29:36:a5:45: cf:13:f4:46:de:56:9c:f2:a0:ba:05:29:c9:77:c4: cb:ca:52:a8:cc:cb:4b:e9:d1:91:31:64:0f:55:02: 3c:59:b7:56:6e:3d:99:97:cd:26:26:4e:ba:8f:79: ef:2b:9f:ee:e7:13:23:07:31:29:5c:6c:26:ca:96: b4:08:53:d2:30:52:ae:80:6b:86:47:7f:c1:f5:a2: 2b:7a:66:18:52:0e:ab:68:9b:df:e0:05:6f:63:09: 73:23:8d:4c:c0:5a:b7:cc:d8:f3:ae:5b:15:1a:ad: 94:3c:d1:13:7b:0c:54:6e:bc:83:c7:74:b4:03:a5: d1:4b:32:11:ad:28:30:bb:14:6b:c2:ec:eb:51:59: 9d:46:ca:9d:36:5a:12:b7:0e:ff:dc:47:f7:90:b2: 2a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EE:C8:37:21:06:CF:AD:45:AC:26:7B:E1:57:C5:6D:57:8C:1E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl X509v3 Authority Key Identifier: keyid:A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer sbgp-ipAddrBlock: critical IPv4: 204.17.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b4:43:eb:16:34:42:f1:83:8a:c6:32:73:51:14:2f:53:e8: b3:45:a7:dc:41:9b:11:00:7f:e1:73:23:d8:6c:88:4e:ce:73: 6f:18:9c:0d:f4:99:b9:6d:05:ad:71:9f:d0:f0:b3:0a:49:c9: 6a:3b:4a:63:07:80:fc:c8:62:30:22:9a:c2:95:a5:11:ff:af: c5:8f:a4:03:03:fc:e1:33:9d:aa:24:f7:29:d7:e1:5f:60:34: 79:91:3a:2e:94:1a:fb:85:88:9c:bf:59:81:f3:d3:25:14:6d: 18:0d:69:f3:42:67:39:7d:41:cd:61:38:38:ad:ff:4e:44:86: 10:a1:88:f2:45:61:3c:01:47:48:4d:21:87:35:a7:5e:66:50: 64:80:73:c9:8f:34:25:00:9a:2a:d0:65:b7:2b:f6:50:dc:06: c5:8b:cd:9f:7c:07:36:28:d4:a5:59:7e:42:c8:57:24:cf:59: f4:69:61:d5:dd:f8:da:c5:72:be:cd:b4:29:78:51:0b:3b:a2: 76:8b:6f:5b:bd:0f:cb:a3:81:7b:30:35:ea:e6:a2:7f:24:fe: 6d:82:72:00:03:14:4b:e5:e3:58:8d:03:19:51:87:1a:d4:65: d8:e8:28:37:ab:a4:a6:42:26:31:3f:aa:58:50:6c:8d:ba:94: 26:ae:ad:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdbQXCJYGp92xN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwM2FmMmYtZjYyNi00ZjJhLWE1OWQtNDMzOTUxZjUz YjNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTI4ZmEzY2QtNDQwNC00NjBjLTk0ZmQtMzgwOWQzOGEwNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GTIa++mbZBrXM1rbyvGkCasWblG7yLoh9mo A32hvL+uU1mNcDunnAuBZ9cWv842DXPZ7VFsTQsUwTzwowvXeAaTewKWrHMg86+y mijv5rc3mnZBnhTAeqkMDaiakeAEnrMuaCk2pUXPE/RG3lac8qC6BSnJd8TLylKo zMtL6dGRMWQPVQI8WbdWbj2Zl80mJk66j3nvK5/u5xMjBzEpXGwmypa0CFPSMFKu gGuGR3/B9aIremYYUg6raJvf4AVvYwlzI41MwFq3zNjzrlsVGq2UPNETewxUbryD x3S0A6XRSzIRrSgwuxRrwuzrUVmdRsqdNloStw7/3Ef3kLIqUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTuyDchBs+tRawme+FXxW1XjB4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAz YWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFmNTNiM2IvNTA0NTM5YTgtYTQ1MC0z NTRkLTljN2UtNmEwMTI4ZDRkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzAwM2FmMmYtZjYyNi00ZjJhLWE1 OWQtNDMzOTUxZjUzYjNiL2MwMDNhZjJmLWY2MjYtNGYyYS1hNTlkLTQzMzk1MWY1 M2IzYi5jcmwwHwYDVR0jBBgwFoAUodsX5jXPLcuqUy/oANCS8ZQkroIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5 NTFmNTNiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD60Q+sWNELxg4rGMnNRFC9T6LNFp9xBmxEAf+FzI9hsiE7Oc28YnA30 mbltBa1xn9DwswpJyWo7SmMHgPzIYjAimsKVpRH/r8WPpAMD/OEznaok9ynX4V9g NHmROi6UGvuFiJy/WYHz0yUUbRgNafNCZzl9Qc1hODit/05EhhChiPJFYTwBR0hN IYc1p15mUGSAc8mPNCUAmirQZbcr9lDcBsWLzZ98BzYo1KVZfkLIVyTPWfRpYdXd +NrFcr7NtCl4UQs7onaLb1u9D8ujgXswNermon8k/m2CcgADFEvl41iNAxlRhxrU ZdjoKDerpKZCJjE/qlhQbI26lCaurc8= -----END CERTIFICATE-----Generated at Sat Oct 10 13:36:42 2026 by rpki-client