$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/d95cc6d6-55bb-308f-949f-92289630db15.roa File: d95cc6d6-55bb-308f-949f-92289630db15.roa (raw, json) Hash identifier: qR2E7Lm7VC2Nw0JU42v4dECpKpI2K+bz2QUuT3XhghA= Subject key identifier: 65:23:4E:2A:47:1E:DC:14:ED:D5:7D:E3:54:A6:77:F9:BF:01:9A:22 Certificate issuer: /CN=59b44f57-163e-4377-bee0-0f066b25f0c2 Certificate serial: 010D0C9F4328584F06729679815B00F6BC45D200 Authority key identifier: A8:8C:0C:A4:00:5A:B7:CB:50:88:67:DF:46:9D:D9:65:88:35:96:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/d95cc6d6-55bb-308f-949f-92289630db15.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 13335 IP address blocks: 204.239.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:96:79:81:5b:00:f6:bc:45:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b44f57-163e-4377-bee0-0f066b25f0c2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=fe1e71a6-6560-4448-9a0c-ba1e2bdecce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:9a:f9:4c:8b:83:55:52:79:93:bd:b7:1a: a5:2d:9c:2c:15:52:92:24:5a:5b:01:d5:f1:dc:0e: 3e:00:45:fb:b9:e4:00:e9:a6:34:58:89:c8:90:ef: b0:50:d2:b6:2a:63:bf:40:e8:93:c9:d7:42:5b:07: be:61:8e:4f:66:68:47:2f:f6:fc:7f:34:f0:ff:a5: 7f:e7:77:bd:e7:ad:94:d4:e9:e0:51:4d:0c:94:2a: f9:b1:ec:58:33:e2:3b:a5:bc:f6:fb:d8:ba:56:12: 3e:5a:c9:2f:c8:dd:cd:3e:b2:c8:ee:b7:89:a9:ef: 57:f2:72:a4:45:c0:3d:9f:65:cc:0c:25:94:e8:72: e1:46:59:31:0a:cf:2e:3d:f9:22:29:ab:27:af:c7: 94:de:9c:27:66:ba:06:7a:bb:8d:09:df:4a:53:df: a9:36:d7:8d:55:c7:43:fb:7c:3d:fc:e0:f6:9d:0f: e5:f5:4b:eb:07:42:05:36:63:8b:58:93:10:f3:d5: cc:e5:31:6c:e1:91:74:8d:44:d5:25:59:02:27:32: b6:65:8e:42:4f:65:4a:2c:7a:9a:43:e5:00:f0:45: c0:29:7c:4b:25:73:d3:45:9e:53:f6:19:49:a2:89: a3:7c:87:6e:e4:3b:36:cc:3a:d8:8a:68:bf:c1:57: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:23:4E:2A:47:1E:DC:14:ED:D5:7D:E3:54:A6:77:F9:BF:01:9A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/d95cc6d6-55bb-308f-949f-92289630db15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2/59b44f57-163e-4377-bee0-0f066b25f0c2.crl X509v3 Authority Key Identifier: keyid:A8:8C:0C:A4:00:5A:B7:CB:50:88:67:DF:46:9D:D9:65:88:35:96:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/59b44f57-163e-4377-bee0-0f066b25f0c2.cer sbgp-ipAddrBlock: critical IPv4: 204.239.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:53:dd:d4:cc:ca:d0:a2:69:e4:d9:1c:79:48:52:71:f1:64: bb:7f:3a:90:07:0a:16:75:c6:ae:38:57:9f:5f:3d:b4:ac:d9: a6:41:54:0d:be:39:86:ba:cc:80:0e:2d:09:2a:20:34:79:6a: 69:68:48:c0:cf:c8:de:4b:7f:b1:a1:28:24:48:f3:bb:d7:d6: c0:b0:7b:53:12:2a:f9:71:cb:3a:17:8a:25:99:0b:ef:61:a9: a6:f1:af:d5:8c:1c:0c:88:f6:41:ac:47:93:82:3c:05:1f:42: ac:82:fc:6c:a0:98:7c:82:9a:aa:c3:e9:20:9c:ff:7d:3c:ee: 28:7b:f4:76:52:b5:9a:b3:1d:c5:af:51:75:97:4a:17:c8:df: d9:e4:e6:1d:d6:0f:f8:02:83:ea:ef:54:d0:eb:2a:8b:b1:22: 15:c1:0b:79:60:74:b4:71:85:7c:aa:c7:be:3c:43:cc:b8:5c: fb:f1:3b:fa:13:36:55:9d:ce:65:82:67:f7:f8:23:cd:79:94: f3:fe:c7:1b:89:e6:dd:72:af:db:d7:51:0a:02:40:73:7b:95: 0e:26:dc:6f:ac:34:86:16:67:4d:62:13:b1:98:44:45:69:93: 96:83:eb:7b:8f:96:59:50:a6:9e:0f:1f:58:8d:20:33:5b:0f: 10:99:de:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcpZ5gVsA9rxF0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTliNDRmNTctMTYzZS00Mzc3LWJlZTAtMGYwNjZiMjVm MGMyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmUxZTcxYTYtNjU2MC00NDQ4LTlhMGMtYmExZTJiZGVjY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8qa+UyLg1VSeZO9txqlLZwsFVKSJFpbAdXx 3A4+AEX7ueQA6aY0WInIkO+wUNK2KmO/QOiTyddCWwe+YY5PZmhHL/b8fzTw/6V/ 53e9562U1OngUU0MlCr5sexYM+I7pbz2+9i6VhI+WskvyN3NPrLI7reJqe9X8nKk RcA9n2XMDCWU6HLhRlkxCs8uPfkiKasnr8eU3pwnZroGeruNCd9KU9+pNteNVcdD +3w9/OD2nQ/l9UvrB0IFNmOLWJMQ89XM5TFs4ZF0jUTVJVkCJzK2ZY5CT2VKLHqa Q+UA8EXAKXxLJXPTRZ5T9hlJoomjfIdu5Ds2zDrYimi/wVdSvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUjTipHHtwU7dV941Smd/m/AZoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81OWI0 NGY1Ny0xNjNlLTQzNzctYmVlMC0wZjA2NmIyNWYwYzIvZDk1Y2M2ZDYtNTViYi0z MDhmLTk0OWYtOTIyODk2MzBkYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNTliNDRmNTctMTYzZS00Mzc3LWJl ZTAtMGYwNjZiMjVmMGMyLzU5YjQ0ZjU3LTE2M2UtNDM3Ny1iZWUwLTBmMDY2YjI1 ZjBjMi5jcmwwHwYDVR0jBBgwFoAUqIwMpABat8tQiGffRp3ZZYg1lrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81OWI0NGY1Ny0xNjNlLTQzNzctYmVlMC0wZjA2 NmIyNWYwYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpT3dTMytCiaeTZHHlIUnHxZLt/OpAHChZ1xq44V59fPbSs2aZBVA2+ OYa6zIAOLQkqIDR5amloSMDPyN5Lf7GhKCRI87vX1sCwe1MSKvlxyzoXiiWZC+9h qabxr9WMHAyI9kGsR5OCPAUfQqyC/GygmHyCmqrD6SCc/3087ih79HZStZqzHcWv UXWXShfI39nk5h3WD/gCg+rvVNDrKouxIhXBC3lgdLRxhXyqx748Q8y4XPvxO/oT NlWdzmWCZ/f4I815lPP+xxuJ5t1yr9vXUQoCQHN7lQ4m3G+sNIYWZ01iE7GYREVp k5aD63uPlllQpp4PH1iNIDNbDxCZ3i0= -----END CERTIFICATE-----Generated at Mon Sep 21 20:18:16 2026 by rpki-client