$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa File: dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa (raw, json) Hash identifier: BDAO2Y6FYgWCfiXw6JSgxwCQTX0TIshzmaBqkSugCWU= Subject key identifier: F1:9B:FF:0B:50:70:1C:63:42:4E:5B:C3:B2:3F:18:6A:82:F9:C3:98 Certificate issuer: /CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Certificate serial: 010D0C9F4328584CAE5E561B2A9D786CE57810F0 Authority key identifier: 26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 18438 IP address blocks: 204.136.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:56:1b:2a:9d:78:6c:e5:78:10:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c8417d67-592f-4611-b254-63b7a257cf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:42:b9:93:40:3d:ac:ca:d3:e0:ae:47:08: 11:a9:f7:d7:59:c5:21:4e:3c:ba:54:e9:46:f5:cf: 4c:ad:bb:ae:0f:da:3e:0a:00:71:a6:4a:b3:94:b8: a7:60:79:ce:2e:87:54:75:58:17:a3:53:c7:16:c9: a2:9a:ef:17:65:87:d0:a7:bc:0f:d5:15:32:6f:b0: e5:c0:e0:89:4e:11:9f:7b:43:7a:c1:36:f7:0f:a8: 8f:a4:2d:e1:78:06:78:6d:95:c0:8a:ef:72:07:93: 91:0d:ce:e4:10:d1:00:cb:64:ab:b8:69:ac:9a:87: e1:04:18:0c:25:95:3d:5d:42:df:42:cb:c9:80:60: a7:12:88:90:0d:10:68:05:97:b1:fd:b4:c5:91:c4: 83:6a:20:28:f0:c4:50:14:0e:8c:0a:3e:05:e3:9b: 93:51:00:e0:76:2b:1c:a4:ce:11:9e:16:7f:75:e8: b7:ff:f5:ca:07:9f:c3:64:4c:61:9d:dc:84:b1:e1: 4d:a1:93:0c:1f:f8:8a:84:88:79:28:ef:53:47:78: 67:cd:b9:b5:16:c2:a9:cc:7a:fc:cd:99:1c:c4:ed: 51:e1:41:2a:fc:da:7d:5c:c3:fd:d3:c0:99:43:39: 7a:36:08:2d:de:cc:84:21:9f:1b:c5:eb:62:c1:3e: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9B:FF:0B:50:70:1C:63:42:4E:5B:C3:B2:3F:18:6A:82:F9:C3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl X509v3 Authority Key Identifier: keyid:26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer sbgp-ipAddrBlock: critical IPv4: 204.136.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2a:d0:06:4a:f6:19:9a:9c:0f:c3:7a:f2:dd:46:0f:ee:52: db:fb:96:0c:9e:8c:02:ae:8e:6d:f3:64:dd:bc:ee:04:ea:71: 11:25:69:a3:75:2a:0f:0b:05:ad:71:b2:e9:13:2b:f5:b4:93: 99:a5:38:38:59:56:e5:12:73:d5:39:bf:30:e4:53:24:2c:dd: 22:c0:f2:f5:ee:0f:49:b2:84:76:92:55:47:d8:b0:d6:31:fc: 8c:df:b7:1d:71:bc:09:9f:9e:72:1d:fd:fa:d0:47:44:b9:e2: 70:94:eb:72:f3:c0:c5:d6:16:d0:b2:a1:48:28:b5:62:d8:79: 54:0f:f1:e9:59:43:16:75:88:eb:65:65:33:c0:88:ac:7c:1d: e1:3b:6c:cf:68:f3:5d:90:58:cb:b4:93:e1:2e:19:66:41:28: 77:18:56:44:b0:0b:58:74:40:33:6e:44:60:83:10:9e:43:1a: 06:4f:52:be:f2:e7:ca:88:cf:de:1a:bc:ef:3e:f8:c5:c3:6f: df:c8:ef:6b:3a:27:f1:67:fe:e2:1f:2b:26:6e:8c:26:b5:6f: 2d:cf:ff:fd:13:2a:a3:f0:79:f9:e0:95:a6:17:4e:df:41:b9: 0e:e4:5b:23:54:65:1a:f9:9b:bf:b9:77:f5:af:ea:88:52:aa: a2:cb:28:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlYbKp14bOV4EPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiM2U1ZWUtMjljOC00OTVlLTk4ZmMtYTIwNmM0ZTE0 OTIyMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Yzg0MTdkNjctNTkyZi00NjExLWIyNTQtNjNiN2EyNTdjZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09lCuZNAPazK0+CuRwgRqffXWcUhTjy6VOlG 9c9MrbuuD9o+CgBxpkqzlLinYHnOLodUdVgXo1PHFsmimu8XZYfQp7wP1RUyb7Dl wOCJThGfe0N6wTb3D6iPpC3heAZ4bZXAiu9yB5ORDc7kENEAy2SruGmsmofhBBgM JZU9XULfQsvJgGCnEoiQDRBoBZex/bTFkcSDaiAo8MRQFA6MCj4F45uTUQDgdisc pM4RnhZ/dei3//XKB5/DZExhndyEseFNoZMMH/iKhIh5KO9TR3hnzbm1FsKpzHr8 zZkcxO1R4UEq/Np9XMP908CZQzl6Nggt3syEIZ8bxetiwT4klQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGb/wtQcBxjQk5bw7I/GGqC+cOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNGIz ZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2YzRlMTQ5MjIvZGNmMWRjMTAtZTM3NS0z ODQ4LThjNDItYTRlOGQzYTEyNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDRiM2U1ZWUtMjljOC00OTVlLTk4 ZmMtYTIwNmM0ZTE0OTIyL2Q0YjNlNWVlLTI5YzgtNDk1ZS05OGZjLWEyMDZjNGUx NDkyMi5jcmwwHwYDVR0jBBgwFoAUJnF1WwkDvEi8KhzRfc2+lfXLWPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNGIzZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2 YzRlMTQ5MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMq0AZK9hmanA/DevLdRg/uUtv7lgyejAKujm3zZN287gTqcRElaaN1 Kg8LBa1xsukTK/W0k5mlODhZVuUSc9U5vzDkUyQs3SLA8vXuD0myhHaSVUfYsNYx /Izftx1xvAmfnnId/frQR0S54nCU63LzwMXWFtCyoUgotWLYeVQP8elZQxZ1iOtl ZTPAiKx8HeE7bM9o812QWMu0k+EuGWZBKHcYVkSwC1h0QDNuRGCDEJ5DGgZPUr7y 58qIz94avO8++MXDb9/I72s6J/Fn/uIfKyZujCa1by3P//0TKqPwefnglaYXTt9B uQ7kWyNUZRr5m7+5d/Wv6ohSqqLLKN8= -----END CERTIFICATE-----Generated at Mon Mar 2 19:27:16 2026 by rpki-client