$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/cfd5f556-bd1f-3211-96d0-beae3373e874.roa File: cfd5f556-bd1f-3211-96d0-beae3373e874.roa (raw, json) Hash identifier: 1r9lBbgywbEHbPHxge39oDP+O4PrlGcsT4W7T4G0eNA= Subject key identifier: 89:F1:98:FC:E2:D1:99:00:06:12:07:25:F3:E5:44:1B:B8:CC:D6:A7 Certificate issuer: /CN=2e218182-d880-48fb-baed-8c63f1bc8249 Certificate serial: 010D0C9F4328584F7E7DC41D44ED3BADA924FF80 Authority key identifier: C6:85:47:30:B6:5C:97:13:CE:68:0F:0C:5D:C3:9A:80:41:D6:E7:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/cfd5f556-bd1f-3211-96d0-beae3373e874.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 22951 IP address blocks: 204.19.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:c4:1d:44:ed:3b:ad:a9:24:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e218182-d880-48fb-baed-8c63f1bc8249 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=4fddc198-f130-4fd1-8660-a02d53948b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:0e:7f:41:1a:12:fd:09:7f:ae:e4:a2:21: f2:4d:fb:76:72:e3:c7:2f:51:c8:60:27:d0:80:fa: eb:b0:81:95:db:58:3e:ee:6a:83:c5:06:b5:e6:e1: 6f:1d:8f:20:ff:b4:d7:fb:7c:a3:b1:ca:01:19:63: d6:df:a4:e3:3b:21:5e:61:b2:88:9b:63:68:4a:9b: 3f:6f:57:ab:97:ef:e2:74:1e:c7:00:57:e2:f9:91: 04:f1:c3:e9:f6:33:81:0d:a2:b9:d2:cc:ad:ac:af: 48:c6:3a:58:60:27:47:a9:38:ed:8c:e4:3f:b8:89: 28:d4:44:88:c9:74:85:de:ad:7e:5f:98:23:b2:95: 90:04:bc:8e:6d:f1:2b:97:9c:a0:97:1f:f2:b5:b7: 96:83:2a:cc:e3:79:69:b0:17:ab:21:4c:2c:b3:c3: 30:b7:04:a1:b7:e9:a2:2d:81:c1:4c:87:aa:b6:39: fa:06:3e:0f:1d:59:75:15:0f:cc:74:73:2b:c6:6e: 8d:c9:90:49:f6:f9:bf:08:86:97:11:57:65:a0:48: 36:d4:50:93:40:bf:ee:67:44:5f:a3:d8:e5:d1:76: 0f:6c:86:d5:d7:87:46:62:1f:88:85:a0:b3:5c:1b: 57:fc:83:97:bd:a1:c0:a7:18:af:d1:a9:99:dc:d6: df:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F1:98:FC:E2:D1:99:00:06:12:07:25:F3:E5:44:1B:B8:CC:D6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/cfd5f556-bd1f-3211-96d0-beae3373e874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.crl X509v3 Authority Key Identifier: keyid:C6:85:47:30:B6:5C:97:13:CE:68:0F:0C:5D:C3:9A:80:41:D6:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer sbgp-ipAddrBlock: critical IPv4: 204.19.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f4:24:3f:16:1c:2f:2f:70:55:c4:ad:a8:c6:e7:59:f7:e5: 7b:c9:49:1a:b5:99:74:be:ee:f1:0b:1f:be:95:da:ec:72:fc: ed:d9:8b:a9:14:29:5e:05:7d:44:38:a4:79:19:ed:cc:cd:81: 5e:d1:f0:71:03:36:5a:08:a6:7c:dd:26:41:05:49:09:7b:69: 67:50:0b:01:23:81:f0:38:e2:c5:4d:86:3e:06:cf:6c:54:e4: 65:4f:0c:63:bc:24:47:22:3b:cb:5a:db:b1:28:2d:d4:c1:91: 19:1b:ab:9c:77:05:f2:38:19:94:d2:fa:eb:85:a2:e1:84:e1: 16:38:32:7c:9f:71:15:2e:1d:84:04:3d:32:a8:86:58:e8:2c: ac:0a:54:ca:4f:10:c1:2c:06:45:50:e3:f9:83:5f:d5:52:ad: 3d:d7:c0:31:9f:84:86:e9:a5:eb:4f:eb:a6:5d:2d:f7:ef:f2: f1:34:ca:dd:59:02:b9:1b:52:0b:95:c2:72:1f:7f:3e:29:ec: dd:88:54:a6:48:71:86:8c:61:d9:61:25:7d:84:46:61:3d:c6: 50:0e:75:9c:0b:d8:c0:78:e3:a2:51:a3:0a:8b:b9:67:27:70: fc:6f:8f:39:a2:cb:8d:8c:17:60:18:3e:a3:e3:ef:be:74:ca: 0b:6c:73:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fcQdRO07rakk/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyMTgxODItZDg4MC00OGZiLWJhZWQtOGM2M2YxYmM4 MjQ5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NGZkZGMxOTgtZjEzMC00ZmQxLTg2NjAtYTAyZDUzOTQ4YjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUoOf0EaEv0Jf67koiHyTft2cuPHL1HIYCfQ gPrrsIGV21g+7mqDxQa15uFvHY8g/7TX+3yjscoBGWPW36TjOyFeYbKIm2NoSps/ b1erl+/idB7HAFfi+ZEE8cPp9jOBDaK50sytrK9IxjpYYCdHqTjtjOQ/uIko1ESI yXSF3q1+X5gjspWQBLyObfErl5yglx/ytbeWgyrM43lpsBerIUwss8MwtwSht+mi LYHBTIeqtjn6Bj4PHVl1FQ/MdHMrxm6NyZBJ9vm/CIaXEVdloEg21FCTQL/uZ0Rf o9jl0XYPbIbV14dGYh+IhaCzXBtX/IOXvaHApxiv0amZ3NbfawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInxmPzi0ZkABhIHJfPlRBu4zNanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZTIx ODE4Mi1kODgwLTQ4ZmItYmFlZC04YzYzZjFiYzgyNDkvY2ZkNWY1NTYtYmQxZi0z MjExLTk2ZDAtYmVhZTMzNzNlODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmUyMTgxODItZDg4MC00OGZiLWJh ZWQtOGM2M2YxYmM4MjQ5LzJlMjE4MTgyLWQ4ODAtNDhmYi1iYWVkLThjNjNmMWJj ODI0OS5jcmwwHwYDVR0jBBgwFoAUxoVHMLZclxPOaA8MXcOagEHW5+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZTIxODE4Mi1kODgwLTQ4ZmItYmFlZC04YzYz ZjFiYzgyNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX0JD8WHC8vcFXErajG51n35XvJSRq1mXS+7vELH76V2uxy/O3Zi6kU KV4FfUQ4pHkZ7czNgV7R8HEDNloIpnzdJkEFSQl7aWdQCwEjgfA44sVNhj4Gz2xU 5GVPDGO8JEciO8ta27EoLdTBkRkbq5x3BfI4GZTS+uuFouGE4RY4MnyfcRUuHYQE PTKohljoLKwKVMpPEMEsBkVQ4/mDX9VSrT3XwDGfhIbppetP66ZdLffv8vE0yt1Z ArkbUguVwnIffz4p7N2IVKZIcYaMYdlhJX2ERmE9xlAOdZwL2MB446JRowqLuWcn cPxvjzmiy42MF2AYPqPj7750ygtsc1o= -----END CERTIFICATE-----Generated at Wed Oct 14 04:58:58 2026 by rpki-client