$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa File: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (raw, json) Hash identifier: JD0iTO/QTkqz9TTOZJp8OcnCxS+1nGjeUsAXnDr0IA8= Subject key identifier: 8E:2A:8C:54:5C:C3:E3:BA:93:0F:D2:02:2B:41:B8:89:02:28:17:6F Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584ED861EB1A0B1B9E310B22A980 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 32391 IP address blocks: 204.57.128.0/18 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:eb:1a:0b:1b:9e:31:0b:22:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=d7b7a350-6bc7-4eb7-96c0-c284d0b010ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:e7:f7:2d:f9:94:c1:4c:a0:74:16:b1:10: 82:02:ce:aa:0f:74:47:04:e4:f8:a2:79:13:94:27: 93:c6:a0:c5:ae:1b:80:52:dd:91:ce:8f:04:8b:dc: 3c:d6:87:78:f1:1e:a3:e4:f7:9a:3f:7f:84:ce:aa: cf:a4:a9:81:ea:90:74:97:29:22:05:ef:cf:44:3e: d8:0b:87:1b:3a:30:70:92:10:90:25:03:fe:c9:b1: 51:e7:f1:6c:72:a2:5e:19:da:a4:11:c5:5f:3d:88: 45:ec:7b:83:ef:f6:90:0b:51:57:34:84:85:c2:81: a0:b9:2a:f1:83:d8:b7:5c:75:9b:d6:2d:39:1e:7f: 64:7b:94:18:00:86:c5:45:5e:e4:76:31:43:03:c8: 7b:46:f2:b1:da:d7:23:9a:9b:df:b9:c5:59:e4:0f: 79:33:d6:38:1a:fd:6b:67:29:27:3a:fb:b9:ba:bc: bf:f7:20:f2:8d:f6:69:10:2f:22:2c:ba:51:36:5a: a7:5d:5f:65:c9:6f:f3:1f:1a:bc:ea:a4:f2:a0:78: 7f:a7:00:3d:fa:79:8a:93:9d:0e:1a:fb:c3:36:49: d4:4f:22:bd:f6:b1:89:17:c7:0a:93:24:f4:a7:14: c3:ad:3b:3f:47:fc:df:11:1c:3c:2a:d6:82:35:e9: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2A:8C:54:5C:C3:E3:BA:93:0F:D2:02:2B:41:B8:89:02:28:17:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: 204.57.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8f:3a:d9:ac:d8:1f:e1:77:65:8a:d0:90:90:a8:90:9a:37: 27:ad:74:e2:52:23:64:7e:87:c4:d0:18:4a:47:9b:30:31:c4: 1d:3f:95:35:0d:b2:98:06:69:54:08:5e:4a:30:08:79:d2:63: fb:22:89:e0:c4:59:55:79:1d:91:e2:e3:9e:23:ec:21:5d:31: 22:91:30:a7:1d:a9:1d:68:80:ff:53:bd:51:1f:23:83:64:33: d3:50:7d:1e:e9:97:8d:c0:c5:b9:44:54:61:57:36:cd:77:1a: eb:e4:5e:22:2e:83:4a:1d:17:a4:a6:0e:48:a1:bf:e2:aa:e6: ad:3b:91:0e:89:d9:9c:d1:3d:7a:31:67:bf:b7:67:fe:0e:cc: 0f:9e:ab:e1:2b:43:a3:1d:39:af:fb:f5:3f:35:47:46:44:49: d7:3e:eb:92:b7:99:6b:37:f3:0b:b8:76:f8:10:de:0b:3b:93: a9:9e:f0:d9:a8:33:f1:00:6e:e0:b9:5f:57:88:58:3b:b9:a6: af:49:61:44:0c:25:3c:e4:aa:ca:a6:3a:6a:d1:ca:e4:81:fb: e4:aa:40:fe:ee:f5:36:13:52:77:f0:e5:26:1a:55:b9:31:f8: 48:08:25:4d:a5:30:55:64:c2:da:79:55:20:07:1e:95:b6:00: 89:1f:9f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYesaCxueMQsiqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZDdiN2EzNTAtNmJjNy00ZWI3LTk2YzAtYzI4NGQwYjAxMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiinn9y35lMFMoHQWsRCCAs6qD3RHBOT4onkT lCeTxqDFrhuAUt2Rzo8Ei9w81od48R6j5PeaP3+EzqrPpKmB6pB0lykiBe/PRD7Y C4cbOjBwkhCQJQP+ybFR5/FscqJeGdqkEcVfPYhF7HuD7/aQC1FXNISFwoGguSrx g9i3XHWb1i05Hn9ke5QYAIbFRV7kdjFDA8h7RvKx2tcjmpvfucVZ5A95M9Y4Gv1r ZyknOvu5ury/9yDyjfZpEC8iLLpRNlqnXV9lyW/zHxq86qTyoHh/pwA9+nmKk50O GvvDNknUTyK99rGJF8cKkyT0pxTDrTs/R/zfERw8KtaCNelsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4qjFRcw+O6kw/SAitBuIkCKBdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvZDAwMTI5OTgtZTVkMy0z MmE5LWFkM2EtZGNkN2Y0NjE1NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzDmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2POtms2B/hd2WK0JCQqJCaNyetdOJSI2R+h8TQGEpHmzAxxB0/lTUN spgGaVQIXkowCHnSY/siieDEWVV5HZHi454j7CFdMSKRMKcdqR1ogP9TvVEfI4Nk M9NQfR7pl43AxblEVGFXNs13GuvkXiIug0odF6SmDkihv+Kq5q07kQ6J2ZzRPXox Z7+3Z/4OzA+eq+ErQ6MdOa/79T81R0ZESdc+65K3mWs38wu4dvgQ3gs7k6me8Nmo M/EAbuC5X1eIWDu5pq9JYUQMJTzkqsqmOmrRyuSB++SqQP7u9TYTUnfw5SYaVbkx +EgIJU2lMFVkwtp5VSAHHpW2AIkfnzg= -----END CERTIFICATE-----Generated at Mon Sep 21 09:56:15 2026 by rpki-client