$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4220e269-3153-3639-9a41-b923f0a8c2bb.roa File: 4220e269-3153-3639-9a41-b923f0a8c2bb.roa (raw, json) Hash identifier: Hp9wPoOhEgkugCpgMAg0FshVjPQSp+HhX+3r//D7WGw= Subject key identifier: B0:68:86:42:5D:72:23:1B:AF:41:9B:14:F1:98:8C:BC:D0:F6:52:72 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F305262229503619989982B00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4220e269-3153-3639-9a41-b923f0a8c2bb.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 204.195.0.0/17 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:62:22:95:03:61:99:89:98:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=d6a702dc-67d7-4ca2-8098-7e9a46946001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:06:39:ed:4a:7b:b8:39:ff:22:eb:01:ad: 87:fd:4c:7c:62:88:bb:4a:b2:5e:f7:a8:82:3a:eb: bb:72:ae:9f:9e:c6:b8:1f:6b:0f:31:af:49:5f:1e: 88:f2:9f:50:ef:2a:d0:4b:0d:d2:84:e8:57:5b:52: 2c:39:b6:01:e9:b6:a4:9d:3b:20:6c:02:ad:d3:7b: d3:10:c9:83:bb:ad:e5:db:06:7a:da:12:f6:7f:75: 1c:14:4f:31:e9:3a:8e:b8:12:99:e4:69:7d:49:0e: 6d:21:a1:b8:b8:ee:ac:25:fa:3c:75:28:22:34:1b: 13:67:a5:98:b9:ce:f9:4d:6e:51:90:cf:9c:cb:43: 00:ac:eb:9c:d2:66:7c:01:ff:57:67:64:69:88:2a: ef:6d:74:c9:80:b3:75:34:c4:09:91:a6:73:17:d0: 8e:13:39:75:8f:5d:aa:0c:12:11:2d:12:fd:17:ad: 0a:3b:01:49:75:27:91:54:24:4f:dd:84:74:dd:4b: f8:63:ce:39:55:1e:ab:a8:e8:4f:84:ae:89:fb:19: 8c:6f:83:a8:34:f5:a2:2e:6d:39:66:bf:51:84:19: d6:2a:78:ee:96:1c:52:e2:46:83:e1:bd:5f:86:10: ae:38:76:ee:45:98:16:05:c2:35:bd:58:72:ee:8c: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:68:86:42:5D:72:23:1B:AF:41:9B:14:F1:98:8C:BC:D0:F6:52:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4220e269-3153-3639-9a41-b923f0a8c2bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ed:fc:d9:8b:fd:24:9c:2f:ff:b2:d2:86:30:4f:5e:eb:b1: 57:e6:7e:43:e5:97:70:40:de:c0:62:5b:b3:ab:7b:04:52:ef: 7b:12:f4:f1:df:94:c0:b9:64:94:89:39:1d:1d:6e:2f:72:94: 2a:b2:49:87:cf:08:37:52:30:02:79:11:d3:d0:f8:ec:22:38: 66:ee:78:72:55:ac:65:09:11:a9:a0:16:19:47:2a:69:1f:c3: c2:09:fb:28:68:e6:23:f5:a3:56:86:d3:22:80:d5:cd:40:27: 01:3b:e9:02:37:e4:23:8b:5a:a7:05:56:e0:8b:89:6f:9e:d7: 81:4d:e8:96:cc:4d:d2:bc:33:c8:c5:36:a8:19:27:31:3b:29: 0e:55:97:b8:e0:d8:51:2a:4c:74:79:aa:1b:12:34:0b:db:35: 8a:f4:f2:4b:03:1b:b7:3f:e0:4c:bd:43:42:a5:57:a7:46:81: 27:e1:66:f0:08:23:15:11:3d:cf:8b:35:bb:78:b1:00:71:0e: 17:8d:f8:db:f4:02:99:98:5a:f1:45:06:1a:d1:57:69:cb:98: 20:44:6f:4c:59:a7:83:98:47:12:e2:fe:4e:06:96:09:94:6c: c9:a0:42:6f:fe:92:b1:ab:b1:d9:5a:bc:d0:e3:4b:77:0f:c8: a9:36:5f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmIilQNhmYmYKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDZhNzAyZGMtNjdkNy00Y2EyLTgwOTgtN2U5YTQ2OTQ2MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7gGOe1Ke7g5/yLrAa2H/Ux8Yoi7SrJe96iC Ouu7cq6fnsa4H2sPMa9JXx6I8p9Q7yrQSw3ShOhXW1IsObYB6baknTsgbAKt03vT EMmDu63l2wZ62hL2f3UcFE8x6TqOuBKZ5Gl9SQ5tIaG4uO6sJfo8dSgiNBsTZ6WY uc75TW5RkM+cy0MArOuc0mZ8Af9XZ2RpiCrvbXTJgLN1NMQJkaZzF9COEzl1j12q DBIRLRL9F60KOwFJdSeRVCRP3YR03Uv4Y845VR6rqOhPhK6J+xmMb4OoNPWiLm05 Zr9RhBnWKnjulhxS4kaD4b1fhhCuOHbuRZgWBcI1vVhy7oyOoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBohkJdciMbr0GbFPGYjLzQ9lJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDIyMGUyNjktMzE1My0z NjM5LTlhNDEtYjkyM2YwYThjMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzMMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7t/NmL/SScL/+y0oYwT17rsVfmfkPll3BA3sBiW7OrewRS73sS9PHf lMC5ZJSJOR0dbi9ylCqySYfPCDdSMAJ5EdPQ+OwiOGbueHJVrGUJEamgFhlHKmkf w8IJ+yho5iP1o1aG0yKA1c1AJwE76QI35COLWqcFVuCLiW+e14FN6JbMTdK8M8jF NqgZJzE7KQ5Vl7jg2FEqTHR5qhsSNAvbNYr08ksDG7c/4Ey9Q0KlV6dGgSfhZvAI IxURPc+LNbt4sQBxDheN+Nv0ApmYWvFFBhrRV2nLmCBEb0xZp4OYRxLi/k4GlgmU bMmgQm/+krGrsdlavNDjS3cPyKk2X2w= -----END CERTIFICATE-----Generated at Sun Sep 20 17:24:36 2026 by rpki-client