$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/0a425b44-63a8-3d20-90d1-c9958b56c18a.roa File: 0a425b44-63a8-3d20-90d1-c9958b56c18a.roa (raw, json) Hash identifier: a9Z+SLSnSU2j3sAFaLRW7Kl+hjqFMxcD1GQvSLoCY+U= Subject key identifier: 66:93:D7:C0:EA:4F:DF:82:CD:E9:FB:87:42:A7:88:0D:68:03:F3:A0 Certificate issuer: /CN=adf336cd-e30b-4fd4-a132-8eede3026803 Certificate serial: 010D0C9F4328584F4973CFCF32A09ED803C38D80 Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/0a425b44-63a8-3d20-90d1-c9958b56c18a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46 IP address blocks: 204.52.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cf:cf:32:a0:9e:d8:03:c3:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c41ec550-a49f-4b30-8c87-11d54e787b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:6f:16:67:2d:29:62:25:07:c1:83:95:c1: ae:0e:27:b9:40:24:69:30:88:f7:f9:07:d3:45:7e: 03:95:71:f4:21:f1:04:c8:26:f5:6a:25:34:1a:2b: b3:16:cb:f1:92:0d:21:28:f2:a7:0e:6e:21:4f:08: 23:ec:f4:e2:3d:23:17:28:38:8d:f9:15:12:e7:7a: 93:23:ad:8a:83:17:a5:62:9e:91:e2:6b:9d:1c:cd: 29:da:16:2a:af:f0:53:f8:70:65:35:cf:66:c7:e7: 0b:85:b8:41:09:f2:ab:16:62:f8:11:85:ee:95:21: 73:32:bb:68:d6:13:ac:96:72:1c:eb:87:31:e8:dc: 86:27:b6:44:da:95:87:21:28:e2:48:9d:fe:e2:e0: 7d:5e:5c:f3:e3:10:64:98:51:23:3b:ae:2d:de:15: 18:1f:2a:82:45:13:a8:dd:a3:4e:66:95:b6:3b:40: 8d:7f:6e:11:12:30:7b:90:00:66:8a:e2:a7:24:bd: 62:8e:32:11:b0:79:45:95:9d:c7:b9:3b:b1:53:9d: cb:30:f1:78:72:ae:7a:3c:dd:28:96:df:12:99:a9: 93:93:5e:41:04:55:bd:5f:41:07:0f:c4:6e:de:2b: 97:43:a9:3d:f4:b2:b5:d4:71:c7:bc:19:38:61:91: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:D7:C0:EA:4F:DF:82:CD:E9:FB:87:42:A7:88:0D:68:03:F3:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/0a425b44-63a8-3d20-90d1-c9958b56c18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl X509v3 Authority Key Identifier: keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer sbgp-ipAddrBlock: critical IPv4: 204.52.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ae:08:ce:22:d5:8a:31:85:25:a0:09:de:9f:1a:a2:b0:48: 7e:66:b0:bf:dd:7f:cb:28:3d:9b:67:8a:48:89:3a:19:72:91: f8:5d:62:90:a6:7b:c2:03:a6:80:1f:d1:0e:89:5f:b1:89:ff: 02:70:7a:61:79:9d:98:04:b9:a3:1b:31:52:f5:0b:fe:ac:02: c1:25:a8:62:2f:f7:3d:4e:21:dc:ce:0b:1d:5f:02:a6:a5:89: cd:35:0c:85:cf:33:c6:2a:50:e7:90:1e:33:e6:03:6a:67:d8: 1a:51:3a:95:e4:c5:cf:6e:6a:57:28:bb:04:ac:25:b5:a5:1a: 05:68:74:9a:4b:bf:5c:b7:8b:26:04:b7:2c:57:ae:d1:10:e4: f7:ff:2c:77:e7:a9:05:c0:bf:93:6f:ea:31:07:9a:66:89:12: 6b:c1:e5:cc:00:7f:e1:b5:42:73:a5:ce:77:c2:af:bb:9f:c1: d5:ec:9d:33:4e:1b:ba:1e:fa:f9:69:df:a8:69:ba:7a:bb:ac: 50:37:4c:7f:bd:11:18:08:8a:b1:85:e9:d6:cd:7e:02:55:be: 88:13:ea:5a:4e:5b:64:ba:88:b6:6f:9a:d9:7f:3f:c2:db:ac: d3:84:69:8d:4d:9a:44:65:6a:99:22:47:7a:d6:17:96:ee:79: e6:7b:cf:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8/PMqCe2APDjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2 ODAzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzQxZWM1NTAtYTQ5Zi00YjMwLThjODctMTFkNTRlNzg3YjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwVvFmctKWIlB8GDlcGuDie5QCRpMIj3+QfT RX4DlXH0IfEEyCb1aiU0GiuzFsvxkg0hKPKnDm4hTwgj7PTiPSMXKDiN+RUS53qT I62KgxelYp6R4mudHM0p2hYqr/BT+HBlNc9mx+cLhbhBCfKrFmL4EYXulSFzMrto 1hOslnIc64cx6NyGJ7ZE2pWHISjiSJ3+4uB9Xlzz4xBkmFEjO64t3hUYHyqCRROo 3aNOZpW2O0CNf24REjB7kABmiuKnJL1ijjIRsHlFlZ3HuTuxU53LMPF4cq56PN0o lt8SmamTk15BBFW9X0EHD8Ru3iuXQ6k99LK11HHHvBk4YZHUIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaT18DqT9+Czen7h0KniA1oA/OgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGYz MzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvMGE0MjViNDQtNjNhOC0z ZDIwLTkwZDEtYzk5NThiNTZjMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRmMzM2Y2QtZTMwYi00ZmQ0LWEx MzItOGVlZGUzMDI2ODAzL2FkZjMzNmNkLWUzMGItNGZkNC1hMTMyLThlZWRlMzAy NjgwMy5jcmwwHwYDVR0jBBgwFoAUQxPH+lFmkdv8n/tv5ccXECFKVo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVk ZTMwMjY4MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDTXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyuCM4i1YoxhSWgCd6fGqKwSH5msL/df8soPZtnikiJOhlykfhdYpCm e8IDpoAf0Q6JX7GJ/wJwemF5nZgEuaMbMVL1C/6sAsElqGIv9z1OIdzOCx1fAqal ic01DIXPM8YqUOeQHjPmA2pn2BpROpXkxc9ualcouwSsJbWlGgVodJpLv1y3iyYE tyxXrtEQ5Pf/LHfnqQXAv5Nv6jEHmmaJEmvB5cwAf+G1QnOlznfCr7ufwdXsnTNO G7oe+vlp36hpunq7rFA3TH+9ERgIirGF6dbNfgJVvogT6lpOW2S6iLZvmtl/P8Lb rNOEaY1NmkRlapkiR3rWF5bueeZ7z3Y= -----END CERTIFICATE-----Generated at Mon Sep 28 18:49:20 2026 by rpki-client