$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa File: c70e9fda-4775-3e35-b953-e37e4d13808d.roa (raw, json) Hash identifier: 1YU1ZWKsnBoxbpd0/HsLfevexPhoT8Rwi3AUpcSNF3E= Subject key identifier: 96:1C:20:B2:79:31:F0:FE:36:94:15:D4:71:9C:86:16:76:FB:B0:EF Certificate issuer: /CN=4c855281-0740-46c1-8432-9952688807bc Certificate serial: 010D0C9F4328584F454288851550710E11268E80 Authority key identifier: 99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 14713 IP address blocks: 204.109.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:88:85:15:50:71:0e:11:26:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c855281-0740-46c1-8432-9952688807bc Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=eab209a6-858f-4327-9bfe-892a078c8e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:a2:73:6b:11:61:16:e4:c7:e9:50:dc:da: ff:b7:31:2a:20:71:b8:85:96:61:ff:e1:1e:99:22: 92:24:1b:fe:f4:de:60:3d:d8:59:31:b1:4b:62:5c: 85:aa:64:14:60:07:d5:2f:36:9c:e5:43:87:7e:f4: 63:bb:ee:c1:66:55:df:f8:cf:91:a4:44:d8:aa:df: 47:40:d5:68:18:f2:29:9e:85:bf:18:ef:90:c4:fc: e9:2b:ce:ab:8a:af:2e:94:75:70:e3:49:0e:83:45: cc:32:b2:b7:53:06:02:04:26:a0:bd:9b:20:ca:74: 5f:cb:9e:9c:37:38:aa:cd:94:e5:04:f8:25:66:b8: 5c:3d:19:2c:93:00:34:4c:03:3d:7c:b3:78:72:a9: 82:73:33:c3:ba:13:09:e7:3b:72:7f:d8:12:52:e3: 25:06:b2:4c:a5:55:7c:14:ea:d1:bd:8a:02:02:2d: 8c:b3:b9:3e:eb:2e:11:72:03:32:c4:75:d9:9c:f8: 61:be:a5:af:20:6b:02:2d:bd:e1:a0:1c:bf:9f:f4: 8f:6a:c5:92:d8:6c:18:9d:ed:67:5d:f6:e6:e8:b4: 48:15:bb:62:c3:4c:74:9a:8b:65:11:49:a8:51:c3: 2b:7e:07:63:3b:22:78:d1:74:ce:23:b5:c3:b9:2f: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1C:20:B2:79:31:F0:FE:36:94:15:D4:71:9C:86:16:76:FB:B0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/c70e9fda-4775-3e35-b953-e37e4d13808d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc/4c855281-0740-46c1-8432-9952688807bc.crl X509v3 Authority Key Identifier: keyid:99:11:74:5F:71:9A:44:B4:E0:54:57:74:0E:1C:27:13:6F:FF:A3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c855281-0740-46c1-8432-9952688807bc.cer sbgp-ipAddrBlock: critical IPv4: 204.109.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4c:81:c7:26:0c:cb:e2:8f:14:10:81:a0:ec:ac:1b:4f:5b: 61:15:1a:a9:a6:fd:32:0d:9c:bd:3e:c8:15:d5:78:1a:90:7f: 08:21:87:08:d5:52:e7:df:fb:47:4d:94:e3:eb:82:ce:84:8c: ad:2f:ca:97:03:7f:42:9d:f3:7f:5e:7e:54:f9:a6:70:d3:3a: 86:d6:eb:c9:53:77:a3:b0:0b:ba:b8:f8:6b:6a:d8:bb:aa:93: 54:61:ff:5d:2f:73:3a:2b:7d:79:e2:ae:3e:d4:ab:be:f8:00: d3:0b:41:b9:69:f9:97:fd:ec:43:90:b1:60:79:72:5b:32:4b: ef:2a:94:53:fe:3c:52:7c:65:6b:88:66:00:64:49:cd:ce:12: c1:4f:6c:cb:33:e3:14:9d:02:49:bd:86:d8:ee:3b:90:52:18: 6d:69:1b:43:7a:3e:dd:0b:9d:24:aa:87:21:da:f3:a1:85:71: 43:a9:ac:00:82:7b:08:58:85:9f:47:05:ad:32:aa:7e:b8:66: 50:a2:5d:62:17:e7:e6:62:a3:ea:c8:ec:55:b5:61:91:ea:02: bf:4e:51:32:45:d9:cd:f9:fe:f3:05:cd:64:73:94:88:c3:2e: 98:e8:5e:4f:ed:46:3a:96:89:1b:ed:a5:81:b3:da:08:dc:ac: 49:dc:3b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoiFFVBxDhEmjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NTUyODEtMDc0MC00NmMxLTg0MzItOTk1MjY4ODgw N2JjMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk ZWFiMjA5YTYtODU4Zi00MzI3LTliZmUtODkyYTA3OGM4ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx+ic2sRYRbkx+lQ3Nr/tzEqIHG4hZZh/+Ee mSKSJBv+9N5gPdhZMbFLYlyFqmQUYAfVLzac5UOHfvRju+7BZlXf+M+RpETYqt9H QNVoGPIpnoW/GO+QxPzpK86riq8ulHVw40kOg0XMMrK3UwYCBCagvZsgynRfy56c NziqzZTlBPglZrhcPRkskwA0TAM9fLN4cqmCczPDuhMJ5ztyf9gSUuMlBrJMpVV8 FOrRvYoCAi2Ms7k+6y4RcgMyxHXZnPhhvqWvIGsCLb3hoBy/n/SPasWS2GwYne1n Xfbm6LRIFbtiw0x0motlEUmoUcMrfgdjOyJ40XTOI7XDuS8XcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYcILJ5MfD+NpQV1HGchhZ2+7DvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1 NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUyNjg4ODA3YmMvYzcwZTlmZGEtNDc3NS0z ZTM1LWI5NTMtZTM3ZTRkMTM4MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGM4NTUyODEtMDc0MC00NmMxLTg0 MzItOTk1MjY4ODgwN2JjLzRjODU1MjgxLTA3NDAtNDZjMS04NDMyLTk5NTI2ODg4 MDdiYy5jcmwwHwYDVR0jBBgwFoAUmRF0X3GaRLTgVFd0DhwnE2//o4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80Yzg1NTI4MS0wNzQwLTQ2YzEtODQzMi05OTUy Njg4ODA3YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzG00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtMgccmDMvijxQQgaDsrBtPW2EVGqmm/TINnL0+yBXVeBqQfwghhwjV Uuff+0dNlOPrgs6EjK0vypcDf0Kd839eflT5pnDTOobW68lTd6OwC7q4+Gtq2Luq k1Rh/10vczorfXnirj7Uq774ANMLQblp+Zf97EOQsWB5clsyS+8qlFP+PFJ8ZWuI ZgBkSc3OEsFPbMsz4xSdAkm9htjuO5BSGG1pG0N6Pt0LnSSqhyHa86GFcUOprACC ewhYhZ9HBa0yqn64ZlCiXWIX5+Zio+rI7FW1YZHqAr9OUTJF2c35/vMFzWRzlIjD LpjoXk/tRjqWiRvtpYGz2gjcrEncO+0= -----END CERTIFICATE-----Generated at Sat Sep 26 13:19:25 2026 by rpki-client