$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa File: c1bab32e-ba6f-30e4-bb04-585c662c039e.roa (raw, json) Hash identifier: LcPkNWOnrcQj1vJwEVPQwmhU2qoIIg7FLCp4NcjXv60= Subject key identifier: 5B:B0:AE:57:3C:30:E8:69:D8:44:23:F0:21:C8:3F:A9:CE:80:BC:F0 Certificate issuer: /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Certificate serial: 010D0C9F4328584F03A78DCFC661863F1E1CD8C0 Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 400238 IP address blocks: 204.8.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:8d:cf:c6:61:86:3f:1e:1c:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=3213003a-dadc-4a01-b03f-9a0d02b95639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:71:47:d2:0b:45:d7:a1:c3:46:3e:51:ee:b0: 39:86:d2:21:f7:72:5f:64:e3:cb:b3:c3:84:b5:63: 52:0e:0c:a4:e3:a4:0e:33:33:49:f8:14:13:12:72: 98:77:a0:27:eb:59:09:8a:d4:8b:03:80:f4:66:53: d2:de:45:32:28:8e:45:d3:fe:05:7c:69:eb:cd:a4: a5:fe:51:fe:39:17:2e:5e:de:d4:cd:fe:c6:4d:59: 16:b4:35:fe:c7:84:e2:36:be:16:a6:1a:13:eb:f9: b0:79:ba:86:f5:74:1d:21:17:90:90:1f:96:a6:94: 78:2e:cd:9a:f0:58:55:c5:f9:a9:35:c0:fb:e0:91: 10:c6:45:61:70:b8:ec:32:c1:8a:d6:e0:09:32:77: ce:7c:a9:4c:89:bf:74:da:a7:9f:47:1f:eb:df:cd: fb:f5:eb:80:e4:08:21:bb:30:c5:c2:0f:09:35:0d: 25:2d:6f:65:38:92:d8:87:a4:72:c6:8a:af:e8:40: 7d:53:2b:82:a1:cf:e6:bd:1a:3a:fc:22:fc:43:bb: d7:f1:89:32:6c:34:d2:9f:5d:26:37:f2:4f:fc:77: 9a:a4:25:86:27:93:78:f4:17:a5:4e:16:de:3c:02: b6:17:e8:3e:f7:f0:3f:70:e4:ab:5e:78:62:c7:ec: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B0:AE:57:3C:30:E8:69:D8:44:23:F0:21:C8:3F:A9:CE:80:BC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl X509v3 Authority Key Identifier: keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer sbgp-ipAddrBlock: critical IPv4: 204.8.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:17:da:0d:df:3f:8e:22:89:c6:f0:f1:6f:27:79:72:0b:5d: 1d:d2:b1:76:11:56:ed:67:1d:fb:85:02:76:ae:b6:7c:e5:18: 7d:d8:cd:e2:44:d7:9d:2c:c5:72:10:db:24:d6:96:41:23:e9: e4:c4:8a:ad:7a:20:e0:4d:39:11:b6:3e:f7:89:f7:6d:ed:5c: 60:5f:68:2a:6c:e9:f1:97:21:0f:de:33:3c:5e:6e:cd:44:cd: ee:af:e4:56:37:d8:df:00:43:43:d1:1d:00:48:61:8c:43:a8: 2d:c6:e8:1f:df:a9:71:9b:c6:99:0f:2f:2d:6f:0a:54:ca:05: 63:09:da:1d:6a:fd:9c:40:ba:6c:f4:7c:40:bd:ec:bd:e2:a2: ac:3a:8c:87:48:8c:29:e8:1c:e2:41:8a:31:55:a5:8b:ed:52: b2:18:53:b9:de:4d:3c:92:da:55:0e:08:d8:73:1d:b9:76:d3: 65:e0:1d:b3:4c:8f:8f:6f:b6:e3:84:8c:91:9d:f1:5f:6c:e3: c1:d3:33:d1:07:bd:cb:96:c3:9d:77:2b:2a:0e:f6:dc:6f:04: 52:6d:f8:c3:26:cd:c4:99:c9:20:25:b9:c2:57:23:b0:cb:80: 21:9a:33:8e:16:2b:9f:5c:14:60:0a:8b:51:95:bf:72:10:b4: d7:77:3f:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp43PxmGGPx4c2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy YWVjMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MzIxMzAwM2EtZGFkYy00YTAxLWIwM2YtOWEwZDAyYjk1NjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHFH0gtF16HDRj5R7rA5htIh93JfZOPLs8OE tWNSDgyk46QOMzNJ+BQTEnKYd6An61kJitSLA4D0ZlPS3kUyKI5F0/4FfGnrzaSl /lH+ORcuXt7Uzf7GTVkWtDX+x4TiNr4WphoT6/mwebqG9XQdIReQkB+WppR4Ls2a 8FhVxfmpNcD74JEQxkVhcLjsMsGK1uAJMnfOfKlMib902qefRx/r38379euA5Agh uzDFwg8JNQ0lLW9lOJLYh6Ryxoqv6EB9UyuCoc/mvRo6/CL8Q7vX8YkybDTSn10m N/JP/HeapCWGJ5N49BelThbePAK2F+g+9/A/cOSrXnhix+zqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuwrlc8MOhp2EQj8CHIP6nOgLzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvYzFiYWIzMmUtYmE2Zi0z MGU0LWJiMDQtNTg1YzY2MmMwMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5 ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcX2g3fP44iicbw8W8neXILXR3SsXYRVu1nHfuFAnautnzlGH3YzeJE 150sxXIQ2yTWlkEj6eTEiq16IOBNORG2PveJ923tXGBfaCps6fGXIQ/eMzxebs1E ze6v5FY32N8AQ0PRHQBIYYxDqC3G6B/fqXGbxpkPLy1vClTKBWMJ2h1q/ZxAumz0 fEC97L3ioqw6jIdIjCnoHOJBijFVpYvtUrIYU7neTTyS2lUOCNhzHbl202XgHbNM j49vtuOEjJGd8V9s48HTM9EHvcuWw513KyoO9txvBFJt+MMmzcSZySAlucJXI7DL gCGaM44WK59cFGAKi1GVv3IQtNd3P6g= -----END CERTIFICATE-----Generated at Tue Sep 22 20:56:16 2026 by rpki-client