$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa File: 0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa (raw, json) Hash identifier: 6Kcb+qaWWQTguAuVwOKiIWEzhbN9fnvlykOcezwEuTA= Subject key identifier: 51:16:BF:BD:1D:71:74:55:66:18:F4:D5:53:18:43:F6:76:17:6E:4E Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584F3E47DFA28F75E4A6EE47F780 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 23465 IP address blocks: 208.186.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:df:a2:8f:75:e4:a6:ee:47:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=2a709f8b-6a34-42d2-ba3d-0c32176757c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:b1:a7:40:80:10:65:ad:34:18:3f:4e:4d: aa:75:73:a5:92:e6:98:e5:b5:ad:a1:5b:13:8f:42: 6c:be:fc:8e:c6:03:fc:72:a4:b3:05:2f:c9:21:6e: 1e:b8:d6:82:47:46:14:c7:ce:2b:b1:b7:7f:e7:45: 17:0b:a1:29:78:f6:03:44:14:b6:d9:82:e8:da:54: 56:30:e6:68:a4:22:6a:21:44:9b:68:35:2c:5c:31: 01:cf:7a:74:e2:66:df:b6:71:c2:90:0b:50:30:7c: d9:00:75:f6:a6:75:25:82:a4:0f:2b:3f:85:e0:8b: dc:5f:4c:59:ce:f8:81:25:c7:da:4a:cf:8e:8c:e6: 25:84:38:01:79:22:09:36:36:af:28:2a:08:23:23: 0e:81:de:1e:4b:7a:5b:a5:64:fe:8c:1f:24:01:87: ab:0c:e6:4d:f9:f2:e4:7a:9a:28:b9:56:43:d0:22: 37:9e:3b:19:72:0f:f1:8d:db:76:69:89:99:a6:2c: 1d:cd:77:fc:f0:f6:6d:d0:c9:f0:bd:a4:c3:56:0d: 06:eb:fc:18:3b:92:06:9d:9b:e8:56:71:77:a4:00: 4b:a5:b0:8c:5c:46:2b:4f:62:0e:03:62:22:07:a1: 51:3c:2f:30:24:5e:10:10:72:78:13:e6:29:78:0d: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:16:BF:BD:1D:71:74:55:66:18:F4:D5:53:18:43:F6:76:17:6E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.186.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f3:4b:6b:5c:66:3e:e4:5d:21:22:30:d0:d7:46:82:81:a9: 9d:4c:6b:0f:1f:4c:0e:cb:e1:df:f4:91:f4:53:c5:60:04:ee: ba:7a:72:82:ca:6c:04:07:02:68:97:e1:31:65:24:10:1d:b6: d4:1f:9b:23:9f:de:ab:eb:0e:99:dc:83:37:7f:8c:9f:50:d0: 84:cf:ef:0e:5b:4a:71:2c:24:0a:81:0a:56:6f:cc:9c:3a:4d: ca:37:7d:b9:5e:51:f8:b5:b6:0c:67:dd:f4:1c:87:ab:eb:0c: 25:9f:14:a5:38:23:46:96:fe:90:69:5a:e9:49:d5:20:d7:98: a0:96:c7:71:a5:10:65:7c:7d:86:c8:93:ac:9d:6f:59:25:40: bb:c2:a9:04:e9:7e:49:af:0e:5c:51:57:ed:d8:fc:a9:52:19: 42:42:b3:82:4a:97:fd:83:19:9f:ff:ab:c4:b2:8a:74:34:85: 38:bc:3e:ca:7f:9c:59:7b:06:06:6e:b8:80:ad:54:f5:de:f7: 9e:e8:e6:4e:7e:1a:1e:d9:0f:f4:6a:02:3f:38:b4:5d:16:78: d6:b7:e7:16:e5:0c:7e:96:d8:d5:68:84:6f:60:a7:5b:15:e3: e7:5b:bd:de:06:b6:e9:19:c4:02:f7:5f:af:d8:96:12:f5:1b: 94:b2:98:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9+ij3Xkpu5H94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MmE3MDlmOGItNmEzNC00MmQyLWJhM2QtMGMzMjE3Njc1N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhOxp0CAEGWtNBg/Tk2qdXOlkuaY5bWtoVsT j0JsvvyOxgP8cqSzBS/JIW4euNaCR0YUx84rsbd/50UXC6EpePYDRBS22YLo2lRW MOZopCJqIUSbaDUsXDEBz3p04mbftnHCkAtQMHzZAHX2pnUlgqQPKz+F4IvcX0xZ zviBJcfaSs+OjOYlhDgBeSIJNjavKCoIIyMOgd4eS3pbpWT+jB8kAYerDOZN+fLk epoouVZD0CI3njsZcg/xjdt2aYmZpiwdzXf88PZt0MnwvaTDVg0G6/wYO5IGnZvo VnF3pABLpbCMXEYrT2IOA2IiB6FRPC8wJF4QEHJ4E+YpeA3NTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEWv70dcXRVZhj01VMYQ/Z2F25OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMGNmZDFlNDMtOTliMC0z YzJmLThiMDQtZjU1ZGQ5ZWIwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7zS2tcZj7kXSEiMNDXRoKBqZ1Maw8fTA7L4d/0kfRTxWAE7rp6coLK bAQHAmiX4TFlJBAdttQfmyOf3qvrDpncgzd/jJ9Q0ITP7w5bSnEsJAqBClZvzJw6 Tco3fbleUfi1tgxn3fQch6vrDCWfFKU4I0aW/pBpWulJ1SDXmKCWx3GlEGV8fYbI k6ydb1klQLvCqQTpfkmvDlxRV+3Y/KlSGUJCs4JKl/2DGZ//q8SyinQ0hTi8Psp/ nFl7BgZuuICtVPXe957o5k5+Gh7ZD/RqAj84tF0WeNa35xblDH6W2NVohG9gp1sV 4+dbvd4GtukZxAL3X6/YlhL1G5SymLg= -----END CERTIFICATE-----Generated at Sun Oct 11 18:52:58 2026 by rpki-client