$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/dc3f100b-4e22-3d34-b871-ffff1718895f.roa File: dc3f100b-4e22-3d34-b871-ffff1718895f.roa (raw, json) Hash identifier: I8g61RTEWE4+rXZamNdSd/aBLjGwklOxYpLyX2TUxpg= Subject key identifier: BB:EF:68:7B:70:59:68:EB:0C:FB:EC:45:92:0B:12:D8:88:CE:C3:5E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F30526213E84F7C1E9590ED80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/dc3f100b-4e22-3d34-b871-ffff1718895f.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 11404 IP address blocks: 204.14.48.0/21 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:62:13:e8:4f:7c:1e:95:90:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=daff6756-64fe-42b6-a234-ce89811ddece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:b9:55:cb:80:c3:de:81:86:be:b8:d9:78: 8a:f9:93:ee:10:2d:64:8d:54:ea:09:60:87:67:65: 46:17:fe:bd:5c:3e:8f:59:6f:3f:c9:d7:20:e4:e1: 23:2d:c8:ac:24:62:1f:b1:72:23:ef:f2:91:44:d4: 63:a1:30:f4:6d:f0:09:8d:cf:48:de:93:ae:0b:6b: 4f:cd:e5:af:34:23:19:6b:b7:47:35:93:64:8d:49: 39:c4:7a:c6:48:53:8b:7b:dd:10:ef:4b:44:43:43: 43:20:fb:72:76:05:c1:29:72:02:88:dd:42:0d:b0: 61:1a:44:74:58:8d:bf:b2:af:76:0d:77:dc:0f:72: c7:53:a5:62:7a:7b:61:e3:40:46:60:33:6c:b0:9b: a5:48:18:f3:6a:c6:82:4f:44:6a:6d:e0:b6:71:e9: 0c:b4:b9:7d:0c:4f:d9:fd:70:57:44:fc:12:43:1a: 67:53:fa:41:5d:0d:70:90:0c:11:1f:3d:1c:af:b8: 83:10:ac:a5:b5:09:bf:f3:6c:a5:2a:f5:81:44:29: bd:14:9b:6e:61:43:6b:ff:86:01:06:e6:04:22:31: 4a:c9:18:14:6f:bf:93:21:c0:03:89:1d:4b:35:a1: e4:c7:db:ab:c3:50:a1:ab:e8:6b:3e:74:0e:e7:20: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EF:68:7B:70:59:68:EB:0C:FB:EC:45:92:0B:12:D8:88:CE:C3:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/dc3f100b-4e22-3d34-b871-ffff1718895f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.14.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6e:c4:0d:c7:34:4e:ab:82:ec:67:e5:b8:ee:05:a0:7f:a9: 4f:0b:0d:58:43:89:9e:07:71:45:e9:6c:81:d0:de:12:d8:63: 25:4a:a6:27:ca:c4:6e:40:28:01:4d:95:87:9a:7f:4c:d0:89: c0:eb:cb:4f:48:37:d2:8b:00:9f:f4:4d:9b:c5:b4:a2:8f:7f: 61:65:14:95:26:ac:60:2f:66:a8:71:2f:3c:91:9f:d1:d4:af: b7:7f:8d:ae:34:86:28:4d:4d:c6:a0:2d:8e:6f:00:08:c7:6d: 4e:86:43:87:18:27:a3:ea:10:cc:20:b8:90:2e:a4:2d:c7:2e: 99:8d:dc:a3:a8:45:f0:c0:4b:8d:9e:49:6e:19:9b:b9:63:92: 92:a6:23:62:52:4a:ca:ab:66:1c:f8:ed:24:e6:2f:83:49:99: cf:67:91:16:fb:82:a5:34:6e:b0:1c:05:6f:72:2c:69:54:c0: 55:de:f1:48:fc:0c:e7:d0:0c:1c:8b:e0:0c:b6:67:9e:17:c1: a1:c9:08:08:ba:56:32:9b:be:36:96:6c:6a:af:90:e8:68:a7: a5:9c:46:e3:5c:6d:2f:31:b8:a6:97:4c:d2:46:ff:85:6a:da: ce:e2:c2:b9:d5:9b:cf:05:63:d8:6f:23:b5:75:73:74:b3:95: 28:ef:75:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmIT6E98HpWQ7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZGFmZjY3NTYtNjRmZS00MmI2LWEyMzQtY2U4OTgxMWRkZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDO5VcuAw96Bhr642XiK+ZPuEC1kjVTqCWCH Z2VGF/69XD6PWW8/ydcg5OEjLcisJGIfsXIj7/KRRNRjoTD0bfAJjc9I3pOuC2tP zeWvNCMZa7dHNZNkjUk5xHrGSFOLe90Q70tEQ0NDIPtydgXBKXICiN1CDbBhGkR0 WI2/sq92DXfcD3LHU6Vienth40BGYDNssJulSBjzasaCT0RqbeC2cekMtLl9DE/Z /XBXRPwSQxpnU/pBXQ1wkAwRHz0cr7iDEKyltQm/82ylKvWBRCm9FJtuYUNr/4YB BuYEIjFKyRgUb7+TIcADiR1LNaHkx9urw1Chq+hrPnQO5yAQ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvvaHtwWWjrDPvsRZILEtiIzsNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGMzZjEwMGItNGUyMi0z ZDM0LWI4NzEtZmZmZjE3MTg4OTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9uxA3HNE6rguxn5bjuBaB/qU8LDVhDiZ4HcUXpbIHQ3hLYYyVKpifK xG5AKAFNlYeaf0zQicDry09IN9KLAJ/0TZvFtKKPf2FlFJUmrGAvZqhxLzyRn9HU r7d/ja40hihNTcagLY5vAAjHbU6GQ4cYJ6PqEMwguJAupC3HLpmN3KOoRfDAS42e SW4Zm7ljkpKmI2JSSsqrZhz47STmL4NJmc9nkRb7gqU0brAcBW9yLGlUwFXe8Uj8 DOfQDByL4Ay2Z54XwaHJCAi6VjKbvjaWbGqvkOhop6WcRuNcbS8xuKaXTNJG/4Vq 2s7iwrnVm88FY9hvI7V1c3SzlSjvdac= -----END CERTIFICATE-----Generated at Tue Sep 22 14:26:39 2026 by rpki-client