$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa File: fd95aa17-d91c-36a8-b5f3-5509f5380040.roa (raw, json) Hash identifier: 2G9spU/S47ZGYm2+I1BkLkeEjSQcu+AhvfCX5cMhz2M= Subject key identifier: A2:58:33:27:BC:8A:42:76:34:23:33:FF:59:61:1A:ED:8F:21:D0:36 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584F19FCFAE2D5D36970711BE6C0 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 6407 IP address blocks: 204.48.5.0/24 maxlen: 24 204.48.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fa:e2:d5:d3:69:70:71:1b:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=6b222472-3b9a-4fb6-b422-f45f305fcffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:e2:b6:b3:d8:96:82:d6:a7:b3:b2:7e:2c: d5:68:01:b1:6b:f8:68:1f:46:fd:2c:a4:89:1d:03: fd:fd:6c:b5:e5:d8:8d:6c:84:80:27:a2:9c:72:c9: 0e:8f:0e:5e:78:d5:b3:f6:22:7d:56:d8:3f:0e:59: 69:70:b6:82:c6:b7:f3:9d:cd:3e:0e:3e:c5:2d:4e: 4d:25:ed:e8:65:d1:93:1b:30:18:bc:ca:18:18:c9: b3:92:98:5c:3d:26:42:e7:89:92:cc:f3:4c:0e:03: ae:78:37:74:ce:73:8c:92:20:5f:9a:01:94:ea:ba: 01:f1:f0:ab:a2:7a:65:3a:46:35:7b:a3:52:f5:35: a3:c0:74:9f:01:e7:f6:cf:ce:1d:e3:6e:dc:6c:6f: 41:80:bd:e0:27:ae:08:ec:33:99:2a:77:09:be:ec: d2:6a:f3:3e:36:2e:5f:24:bc:37:9d:bc:04:ab:d4: 63:06:ae:43:2f:34:36:26:db:93:a6:9f:92:ed:b7: 55:92:b2:c9:05:a5:47:8f:7e:e7:a8:39:45:2c:62: 41:b1:05:d9:ac:0b:a3:a4:c1:5a:35:b2:9d:e7:77: fc:12:66:71:1e:9f:ff:40:f9:00:8c:e7:36:88:cb: 90:25:db:08:56:52:b0:a2:eb:c6:38:7b:e0:c9:ad: 07:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:33:27:BC:8A:42:76:34:23:33:FF:59:61:1A:ED:8F:21:D0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/fd95aa17-d91c-36a8-b5f3-5509f5380040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 204.48.5.0-204.48.6.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d8:79:60:96:7f:d7:a6:aa:01:d8:6e:7b:7f:53:45:1d:0e: f8:18:e9:da:a5:ac:c9:8f:14:fb:14:42:6b:6e:d9:29:47:27: 7c:a6:ba:a5:72:3b:ba:4d:15:07:d7:be:c5:ed:26:26:d8:7b: 25:31:45:13:27:38:31:cc:f6:69:7c:08:bb:a8:ee:aa:4b:11: 5a:c1:2a:73:67:f9:f4:c6:d7:80:06:0c:e3:26:81:14:aa:20: ab:e1:f9:af:13:05:a1:07:ef:12:b0:b3:96:77:f2:6c:3b:ee: 7c:8f:e6:98:cd:77:d8:37:58:9e:4e:21:a8:6f:4c:9e:c9:a2: ec:9f:35:a4:86:71:50:77:13:e5:48:c8:01:63:db:65:2d:de: bd:fe:64:1f:21:ce:93:50:98:4c:31:e9:64:dd:81:31:76:9e: 43:56:a3:57:d3:d2:16:52:07:e6:40:60:6d:69:66:f6:c4:8d: 4a:da:d9:db:fa:e5:c6:76:8b:1e:75:83:16:7a:fc:68:dc:5a: 36:f0:d5:e7:7e:a1:67:05:17:11:46:a9:73:a7:bc:72:f2:c6: f1:4a:26:5c:a8:b5:69:90:a8:4f:f4:77:56:fb:af:91:c6:79: 05:1c:17:8f:cb:e9:46:31:8f:dc:6b:ae:f3:d6:16:9e:a1:ab: b8:3b:f0:d0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8Z/Pri1dNpcHEb5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NmIyMjI0NzItM2I5YS00ZmI2LWI0MjItZjQ1ZjMwNWZjZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0jitrPYloLWp7OyfizVaAGxa/hoH0b9LKSJ HQP9/Wy15diNbISAJ6KccskOjw5eeNWz9iJ9Vtg/DllpcLaCxrfznc0+Dj7FLU5N Je3oZdGTGzAYvMoYGMmzkphcPSZC54mSzPNMDgOueDd0znOMkiBfmgGU6roB8fCr onplOkY1e6NS9TWjwHSfAef2z84d427cbG9BgL3gJ64I7DOZKncJvuzSavM+Ni5f JLw3nbwEq9RjBq5DLzQ2JtuTpp+S7bdVkrLJBaVHj37nqDlFLGJBsQXZrAujpMFa NbKd53f8EmZxHp//QPkAjOc2iMuQJdsIVlKwouvGOHvgya0HFQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKJYMye8ikJ2NCMz/1lhGu2PIdA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvZmQ5NWFhMTctZDkxYy0z NmE4LWI1ZjMtNTUwOWY1MzgwMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMMAUD BADMMAYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABNh5YJZ/16aqAdhue39TRR0O+Bjp2qWsyY8U+xRCa27Z KUcnfKa6pXI7uk0VB9e+xe0mJth7JTFFEyc4Mcz2aXwIu6juqksRWsEqc2f59MbX gAYM4yaBFKogq+H5rxMFoQfvErCzlnfybDvufI/mmM132DdYnk4hqG9Mnsmi7J81 pIZxUHcT5UjIAWPbZS3evf5kHyHOk1CYTDHpZN2BMXaeQ1ajV9PSFlIH5kBgbWlm 9sSNStrZ2/rlxnaLHnWDFnr8aNxaNvDV536hZwUXEUapc6e8cvLG8UomXKi1aZCo T/R3VvuvkcZ5BRwXj8vpRjGP3Guu89YWnqGruDvw0A== -----END CERTIFICATE-----Generated at Tue Sep 22 14:08:47 2026 by rpki-client