$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa File: 3f88eb45-1ebb-364d-9949-8283978277cd.roa (raw, json) Hash identifier: Bspwl7TXss7+I+CD3Ea109wnxC5p39uvWJMihR8rgdo= Subject key identifier: 04:F3:50:22:59:2E:E0:41:A3:3A:7F:8D:6E:5E:8A:19:AA:0E:DA:CB Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584F6F230A293769369A8553D090 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 40948 IP address blocks: 204.156.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:0a:29:37:69:36:9a:85:53:d0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=f14a7dc8-681c-4dd9-af19-6d5732775acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:eb:2b:b0:7f:30:01:6b:d0:1d:ba:fd:5e: bc:9c:da:39:0f:ed:81:a8:d9:62:23:70:3e:fa:d0: 0d:5c:52:90:c8:b0:eb:12:ed:dd:27:77:1b:95:56: c7:57:6b:59:a5:70:7c:b5:1e:ee:3a:b8:62:3a:aa: 0a:f0:4a:0c:a1:81:0e:e1:05:ff:7a:60:b4:1e:83: 6c:bf:62:3c:f8:bb:10:98:78:7e:dd:3f:43:d3:86: c3:11:47:12:48:39:dd:56:94:16:71:47:6b:b3:90: 84:19:c0:86:7c:63:b2:9e:0a:27:dc:fb:67:53:ef: c2:54:b4:88:41:6c:7c:2b:79:11:24:04:81:bb:b5: 71:3a:4d:36:27:9e:42:de:9e:88:4d:d2:40:f0:13: 13:e4:98:bf:46:dc:90:ee:ed:45:e5:fa:02:d6:df: 0c:60:a9:26:90:68:67:08:d6:7c:0c:d1:92:8a:ee: f8:8a:df:92:e6:6a:dd:90:65:ef:fb:c4:9f:8b:0b: 41:e7:61:4f:83:0a:b2:82:f7:fb:ee:6b:41:2d:7a: c1:66:46:11:5e:8e:c4:7b:8c:07:00:06:f8:32:0b: c0:90:d5:a4:15:11:35:c3:b8:42:e2:c2:84:82:c5: e5:47:53:8e:c6:75:57:69:c3:11:fb:c5:cf:e3:0c: a0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F3:50:22:59:2E:E0:41:A3:3A:7F:8D:6E:5E:8A:19:AA:0E:DA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/3f88eb45-1ebb-364d-9949-8283978277cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 204.156.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4a:4e:41:0e:c2:de:bd:0b:7c:a2:f1:a3:68:b8:ad:53:b8: a5:0f:e0:71:be:4f:8c:aa:32:8d:05:d0:73:4b:9e:40:55:30: 9e:ff:63:31:5b:d9:9d:12:3e:0f:bb:ec:ff:c1:74:9c:0c:da: 31:fb:11:96:e9:aa:98:25:13:2e:6e:32:9a:ee:91:58:cb:b9: 66:f1:26:c4:59:2b:11:55:0a:83:27:c7:e7:75:72:98:a7:0e: 5a:6b:1c:f7:09:b2:38:bb:2b:75:c2:9f:eb:0b:52:b7:9c:48: 15:64:19:dc:f3:4a:7e:05:84:93:08:0a:10:c7:cf:dd:34:24: cc:4b:5c:61:88:66:ab:f0:06:52:4a:f7:16:1f:fd:02:9f:c2: 4f:2e:d0:1d:05:e7:17:d1:b6:8e:3e:9c:54:54:aa:64:e8:84: 16:04:b9:4e:15:bd:61:14:9b:e2:38:3d:df:c3:20:fd:23:a0: 58:f3:24:58:fd:1f:82:93:3e:3f:24:6b:be:4a:e8:cb:52:84: e8:ae:5f:77:3c:4b:f3:3d:45:19:54:b0:49:66:1c:12:82:8d: b8:92:85:02:c2:b1:53:9f:e2:ed:64:68:30:c3:20:53:f3:7d: 07:a1:ee:b7:4d:af:22:d6:6c:be:a7:70:22:00:9b:47:fd:26: 78:94:7c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwopN2k2moVT0JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjE0YTdkYzgtNjgxYy00ZGQ5LWFmMTktNmQ1NzMyNzc1YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu67rK7B/MAFr0B26/V68nNo5D+2BqNliI3A+ +tANXFKQyLDrEu3dJ3cblVbHV2tZpXB8tR7uOrhiOqoK8EoMoYEO4QX/emC0HoNs v2I8+LsQmHh+3T9D04bDEUcSSDndVpQWcUdrs5CEGcCGfGOyngon3PtnU+/CVLSI QWx8K3kRJASBu7VxOk02J55C3p6ITdJA8BMT5Ji/RtyQ7u1F5foC1t8MYKkmkGhn CNZ8DNGSiu74it+S5mrdkGXv+8SfiwtB52FPgwqygvf77mtBLXrBZkYRXo7Ee4wH AAb4MgvAkNWkFRE1w7hC4sKEgsXlR1OOxnVXacMR+8XP4wygfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATzUCJZLuBBozp/jW5eihmqDtrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvM2Y4OGViNDUtMWViYi0z NjRkLTk5NDktODI4Mzk3ODI3N2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVKTkEOwt69C3yi8aNouK1TuKUP4HG+T4yqMo0F0HNLnkBVMJ7/YzFb 2Z0SPg+77P/BdJwM2jH7EZbpqpglEy5uMprukVjLuWbxJsRZKxFVCoMnx+d1cpin DlprHPcJsji7K3XCn+sLUrecSBVkGdzzSn4FhJMIChDHz900JMxLXGGIZqvwBlJK 9xYf/QKfwk8u0B0F5xfRto4+nFRUqmTohBYEuU4VvWEUm+I4Pd/DIP0joFjzJFj9 H4KTPj8ka75K6MtShOiuX3c8S/M9RRlUsElmHBKCjbiShQLCsVOf4u1kaDDDIFPz fQeh7rdNryLWbL6ncCIAm0f9JniUfCM= -----END CERTIFICATE-----Generated at Sat Oct 10 23:08:21 2026 by rpki-client