$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/c6532c96-1e3a-3192-b384-363cb53b26bb.roa File: c6532c96-1e3a-3192-b384-363cb53b26bb.roa (raw, json) Hash identifier: LlmCVdNV+FVtcunqxpR9C8cofb5AA8IOIcyGxX0P6ZI= Subject key identifier: 73:81:FB:16:1B:9F:10:11:6C:26:AE:A7:BC:4C:93:6D:13:C1:27:C4 Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9 Certificate serial: 010D0C9F4328584F497386D18885024A95CF1380 Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/c6532c96-1e3a-3192-b384-363cb53b26bb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40630 IP address blocks: 204.13.88.0/22 maxlen: 24 208.94.116.0/22 maxlen: 24 2607:ff18::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:86:d1:88:85:02:4a:95:cf:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=449fbdfe-9f67-4684-8475-480b6aa3a4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:e5:6b:9c:7d:d6:84:4b:f8:d5:32:aa:b1: 90:11:fa:57:8f:16:4e:4f:5f:a5:3f:89:12:13:05: bf:84:4e:fb:30:f8:2f:2a:ba:03:04:9e:60:8f:78: 7c:02:dc:10:53:14:c4:65:a4:b4:11:02:d1:16:ab: 7c:4a:4a:4f:75:5f:d3:0b:da:6d:cd:e6:2f:2e:45: 0c:f5:3d:c0:f3:77:41:e4:f3:b7:fa:bb:5a:43:74: 18:90:09:a7:10:41:4e:32:58:06:8b:dd:3e:77:3b: 79:da:bd:b7:20:15:aa:57:4f:b7:b1:f6:e5:4d:2d: 86:d0:fc:d6:36:27:e5:e0:8d:f8:17:9d:66:61:38: af:19:ca:da:29:2e:61:d9:ed:a0:71:7b:9d:98:f6: 88:7d:b8:c1:26:c2:fa:18:93:e8:45:69:4e:40:d9: 50:b5:8e:d4:ae:5b:9a:22:73:4c:fb:1f:77:2b:71: 45:b0:17:cf:9f:0f:2f:77:ac:9f:84:ed:e7:5d:d1: 44:f2:4c:9d:a6:7b:4f:ef:c4:94:76:a9:f3:b0:12: 76:66:7c:23:8e:10:6b:5b:d1:ae:23:ed:54:ed:91: 3c:22:99:c4:77:fb:d8:96:1b:53:1c:b2:ea:87:72: 44:0b:6a:b1:ba:b3:bb:27:75:92:c8:f6:3c:43:6c: 72:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:81:FB:16:1B:9F:10:11:6C:26:AE:A7:BC:4C:93:6D:13:C1:27:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/c6532c96-1e3a-3192-b384-363cb53b26bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl X509v3 Authority Key Identifier: keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer sbgp-ipAddrBlock: critical IPv4: 204.13.88.0/22 208.94.116.0/22 IPv6: 2607:ff18::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:21:11:6f:83:50:1f:3c:65:40:a4:b3:71:86:b0:94:4a:8e: 71:ca:36:c5:c4:bd:28:ee:04:34:6f:c9:14:0b:2d:93:6e:23: 81:dc:36:ae:36:f5:2d:13:8d:9d:37:56:ab:b0:80:90:b7:ae: d4:e8:2a:ec:ca:bb:9e:ae:63:05:ea:ba:81:8b:9a:c1:59:89: 7a:23:d3:4a:04:18:9a:3f:17:5b:f3:3c:ad:37:2b:83:b3:3b: b7:e3:91:84:d2:5a:cd:3c:99:48:78:17:d8:63:51:c5:db:ba: 0f:eb:f0:2b:39:db:1f:82:e0:f4:df:c9:10:48:44:93:f3:46: ea:e4:8c:4d:82:da:66:97:b9:b4:e7:2f:ea:2c:ff:e5:5a:cb: bd:99:92:cf:62:72:1d:0c:da:b6:96:8d:f0:e4:80:08:8f:e4: 7e:72:e0:da:29:6c:a9:34:3c:95:e1:74:9e:2b:9c:14:92:20: 30:b8:92:a3:f3:79:7e:d9:37:93:5e:87:9e:d9:c0:50:8e:47: eb:89:03:a1:13:86:17:70:ec:fc:af:04:f2:16:d0:a1:1a:9d: 8d:35:5e:a3:e4:59:e5:52:fa:26:8f:2c:e5:13:7e:66:5d:7b: 72:96:2c:3c:c6:7b:68:fe:c8:61:75:b8:bf:6e:3d:f4:a8:36: 1b:74:63:73 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9Jc4bRiIUCSpXPE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj YmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDQ5ZmJkZmUtOWY2Ny00Njg0LTg0NzUtNDgwYjZhYTNhNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD3la5x91oRL+NUyqrGQEfpXjxZOT1+lP4kS EwW/hE77MPgvKroDBJ5gj3h8AtwQUxTEZaS0EQLRFqt8SkpPdV/TC9ptzeYvLkUM 9T3A83dB5PO3+rtaQ3QYkAmnEEFOMlgGi90+dzt52r23IBWqV0+3sfblTS2G0PzW Nifl4I34F51mYTivGcraKS5h2e2gcXudmPaIfbjBJsL6GJPoRWlOQNlQtY7Urlua InNM+x93K3FFsBfPnw8vd6yfhO3nXdFE8kydpntP78SUdqnzsBJ2ZnwjjhBrW9Gu I+1U7ZE8IpnEd/vYlhtTHLLqh3JEC2qxurO7J3WSyPY8Q2xyTQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFHOB+xYbnxARbCaup7xMk20TwSfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvYzY1MzJjOTYtMWUzYS0z MTkyLWIzODQtMzYzY2I1M2IyNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl ZGJlZmNiZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA1YAwQC 0F50MA0EAgACMAcDBQAmB/8YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADkhEW+DUB88ZUCks3GGsJRKjnHK NsXEvSjuBDRvyRQLLZNuI4HcNq429S0TjZ03VquwgJC3rtToKuzKu56uYwXquoGL msFZiXoj00oEGJo/F1vzPK03K4OzO7fjkYTSWs08mUh4F9hjUcXbug/r8Cs52x+C 4PTfyRBIRJPzRurkjE2C2maXubTnL+os/+Vay72Zks9ich0M2raWjfDkgAiP5H5y 4NopbKk0PJXhdJ4rnBSSIDC4kqPzeX7ZN5Neh57ZwFCOR+uJA6EThhdw7PyvBPIW 0KEanY01XqPkWeVS+iaPLOUTfmZde3KWLDzGe2j+yGF1uL9uPfSoNht0Y3M= -----END CERTIFICATE-----Generated at Sat Sep 26 08:38:56 2026 by rpki-client