$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa File: 844a594c-7e4b-3b8f-aaee-aec765543f6a.roa (raw, json) Hash identifier: eUCMdXMPGixM3Ig/pZIaomQwMowv9HHB6n6TqlJZA5M= Subject key identifier: FA:AC:CF:92:D8:FD:A7:FA:08:D4:0B:EA:9C:AE:43:41:79:0F:A8:39 Certificate issuer: /CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Certificate serial: 010D0C9F4328584F331D2CCC0EEDEFD64C35CF20 Authority key identifier: 33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 376 IP address blocks: 204.19.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2c:cc:0e:ed:ef:d6:4c:35:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=a24d6595-5cbb-4550-9385-1614b60758d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:58:31:22:2e:44:89:f1:27:11:96:0d:49: 46:5e:c4:97:75:91:d3:5f:52:c8:f4:5c:19:26:e6: 43:18:cb:ee:86:d3:0e:6b:4a:9b:bc:1b:95:6c:1d: b8:e0:42:e6:67:58:22:cf:59:6f:0e:01:cc:9e:2b: 88:20:fc:47:99:bc:5d:2a:8d:df:da:c4:3f:6d:2f: 39:e1:48:0b:0e:0b:9f:22:7d:c7:a8:ae:5d:d1:43: 6f:10:53:d8:ee:f3:e1:53:d8:6b:17:ed:2e:72:bf: 07:3c:2a:f4:42:0d:8a:81:48:30:ea:38:a9:1a:12: c8:66:a2:db:c2:93:e4:2f:06:44:f9:0b:0b:c8:27: 8f:44:90:64:95:c3:2b:70:0f:81:b3:b9:82:40:a9: 43:c0:43:55:fe:6f:5f:df:57:31:85:e7:c0:ac:15: e9:9b:85:c4:88:27:98:f9:f2:65:25:09:f1:91:b7: 9b:c5:17:34:4c:2c:49:a2:3e:5b:41:c4:a0:78:60: 9f:ce:26:d0:08:59:0a:8e:a5:32:b4:ab:7b:8f:4e: 73:0d:66:e0:08:81:e8:64:51:f1:43:47:07:66:f3: f2:24:31:cb:02:4e:d3:1b:51:7f:58:6d:a8:08:2c: 2b:f7:df:eb:f4:17:ce:40:5e:a3:87:7b:5c:50:1e: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AC:CF:92:D8:FD:A7:FA:08:D4:0B:EA:9C:AE:43:41:79:0F:A8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl X509v3 Authority Key Identifier: keyid:33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer sbgp-ipAddrBlock: critical IPv4: 204.19.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1a:db:7c:43:7c:c4:2a:3f:4b:1d:84:a1:9c:2a:a6:5f:7a: 8f:65:ee:1d:96:31:d0:53:47:e4:b6:43:d1:fb:a7:00:95:82: f1:f7:61:5c:bc:42:9d:dc:e7:68:ef:28:c7:45:f5:f2:bc:2f: 6a:a6:72:d1:68:68:7c:7e:f8:f8:76:83:7b:1b:6f:54:e3:9c: 65:3f:4f:77:d0:a0:3e:c2:90:b4:38:d1:32:38:d7:84:ba:0b: 91:04:d0:35:72:0e:49:af:43:cd:34:6a:3b:4d:bf:c8:c6:b8: 3b:2c:d3:ee:0d:55:9e:91:ea:cf:89:87:31:65:01:ca:83:68: 77:7b:34:48:46:d9:9a:3a:7b:c8:b8:20:0d:e4:fb:c0:3e:a0: e5:5b:cd:b9:36:36:3d:d8:55:66:02:5c:90:09:12:16:8c:ef: 38:d4:84:60:25:f1:ff:a3:cb:c8:a6:66:cd:ca:0c:b1:68:33: a1:11:aa:f8:57:aa:03:70:b4:d8:16:c4:9f:53:17:1e:ba:09: c8:37:f7:b4:f9:74:fa:92:80:15:03:6e:8f:b4:b9:bc:b2:03: 9f:05:fe:96:49:ac:96:9b:4f:64:9d:7f:5c:64:1d:28:8a:48: 19:a7:02:57:b4:7d:ce:36:0b:6a:1e:03:c7:f4:b3:bb:d9:ac: 19:98:99:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSzMDu3v1kw1zyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTgyOTFkNGQtZGE0OC00YjI1LTg0ZDYtM2RmODhmMmZl ZDU0MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk YTI0ZDY1OTUtNWNiYi00NTUwLTkzODUtMTYxNGI2MDc1OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMNYMSIuRInxJxGWDUlGXsSXdZHTX1LI9FwZ JuZDGMvuhtMOa0qbvBuVbB244ELmZ1giz1lvDgHMniuIIPxHmbxdKo3f2sQ/bS85 4UgLDgufIn3HqK5d0UNvEFPY7vPhU9hrF+0ucr8HPCr0Qg2KgUgw6jipGhLIZqLb wpPkLwZE+QsLyCePRJBklcMrcA+Bs7mCQKlDwENV/m9f31cxhefArBXpm4XEiCeY +fJlJQnxkbebxRc0TCxJoj5bQcSgeGCfzibQCFkKjqUytKt7j05zDWbgCIHoZFHx Q0cHZvPyJDHLAk7TG1F/WG2oCCwr99/r9BfOQF6jh3tcUB5ijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqsz5LY/af6CNQL6pyuQ0F5D6g5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xODI5 MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4OGYyZmVkNTQvODQ0YTU5NGMtN2U0Yi0z YjhmLWFhZWUtYWVjNzY1NTQzZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTgyOTFkNGQtZGE0OC00YjI1LTg0 ZDYtM2RmODhmMmZlZDU0LzE4MjkxZDRkLWRhNDgtNGIyNS04NGQ2LTNkZjg4ZjJm ZWQ1NC5jcmwwHwYDVR0jBBgwFoAUM9lgbdXMKovJHNAJgMgAwq5YgtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xODI5MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4 OGYyZmVkNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwa23xDfMQqP0sdhKGcKqZfeo9l7h2WMdBTR+S2Q9H7pwCVgvH3YVy8 Qp3c52jvKMdF9fK8L2qmctFoaHx++Ph2g3sbb1TjnGU/T3fQoD7CkLQ40TI414S6 C5EE0DVyDkmvQ800ajtNv8jGuDss0+4NVZ6R6s+JhzFlAcqDaHd7NEhG2Zo6e8i4 IA3k+8A+oOVbzbk2Nj3YVWYCXJAJEhaM7zjUhGAl8f+jy8imZs3KDLFoM6ERqvhX qgNwtNgWxJ9TFx66Ccg397T5dPqSgBUDbo+0ubyyA58F/pZJrJabT2Sdf1xkHSiK SBmnAle0fc42C2oeA8f0s7vZrBmYmfI= -----END CERTIFICATE-----Generated at Mon Sep 21 09:16:39 2026 by rpki-client