$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa File: 40c350d8-3bc0-3793-8928-ecb678b7c49c.roa (raw, json) Hash identifier: LMPZ6vWdzbpqGexmHS21zP295PR3mz9FoEJWOwFAq4s= Subject key identifier: 58:39:F3:FA:1D:38:0C:75:17:4D:96:A5:96:2E:DB:E0:BC:4A:B5:C4 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584F4973961B7AB1CB1D0E548000 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14593 IP address blocks: 204.48.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:96:1b:7a:b1:cb:1d:0e:54:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=956945d9-e7b0-44ec-aa06-e2e59165e3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:a0:ef:dc:72:fd:e9:12:e1:1a:16:44:c5: 0e:47:b6:db:77:6b:28:37:79:58:16:5e:c7:19:4f: 18:fd:67:6b:ff:45:36:78:c6:de:5b:8e:90:64:5d: 11:82:b6:e5:80:e2:29:5a:9c:5f:d2:f4:9a:42:c4: 30:99:f7:bc:c9:4b:39:d2:64:c1:65:38:0a:97:90: ae:75:b7:50:63:9c:84:6b:58:04:a2:57:12:c2:1a: c3:1e:47:a5:86:a7:e8:44:75:7c:55:51:59:18:87: be:7b:39:fe:1e:cd:9b:fa:59:fc:57:62:fe:53:ab: 2b:31:57:7a:53:42:e1:51:a1:7e:24:51:81:65:1c: c0:74:0e:53:dc:84:af:14:8d:09:3e:a2:5c:44:30: 7d:88:d1:6f:f8:fd:79:5e:e6:12:e5:ac:f4:4f:25: 30:7e:ab:ae:5e:c5:7e:78:ba:29:f9:70:05:8d:b6: 0e:22:9c:1a:0a:e0:ed:33:0b:06:88:21:fe:3b:8b: ed:f8:69:86:9c:c2:d7:42:79:0d:68:3e:6e:90:3c: ce:e1:33:fd:54:72:f8:4b:04:9c:d4:b2:85:1b:76: c5:3e:09:e2:4c:fe:5e:48:1f:74:0f:54:4e:d9:c4: 71:f1:dd:aa:18:10:3b:7a:3b:44:b5:45:64:f4:67: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:F3:FA:1D:38:0C:75:17:4D:96:A5:96:2E:DB:E0:BC:4A:B5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 204.48.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:84:e8:b7:b7:bf:01:24:af:8f:e2:ea:d0:6c:c3:ae:30:b0: ea:7a:c6:ab:00:0b:40:55:14:7c:cd:a8:91:16:af:d1:49:a1: fe:70:fd:07:e1:c3:63:fa:20:24:5d:2d:2c:67:6b:65:60:37: 20:76:4b:58:15:1c:65:c1:cf:90:3c:c1:4a:1c:96:18:ce:7e: 39:fa:99:23:7b:ea:66:b5:5c:bd:4f:03:17:88:78:fe:95:b7: 3f:c6:b0:f7:a1:df:32:a4:91:3c:65:ef:4d:18:ce:6b:2b:a1: a9:26:da:1c:de:b3:f5:b8:82:0f:80:cd:ea:50:8a:41:ea:23: 1a:ec:37:ce:df:0a:12:d5:9a:d3:48:52:7c:ac:4b:a9:75:99: 37:40:d0:03:07:1c:93:1b:37:45:49:a8:54:a4:1d:4a:94:54: 3d:e7:47:22:da:76:07:60:ae:e6:d0:02:a8:81:5b:e5:7c:2e: 4a:6a:51:a4:cf:4c:af:09:63:e7:73:52:23:76:35:57:1b:1e: 74:e3:07:d4:8c:41:d5:78:2c:45:e8:dc:41:3a:5e:ba:74:a1: 52:77:3f:b8:df:21:b1:f7:49:21:39:58:6c:1f:85:e5:5d:10: de:fc:e4:0c:b4:26:1b:4d:3a:87:a8:59:de:a5:8c:f5:8d:a4: 22:d3:97:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5YberHLHQ5UgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTU2OTQ1ZDktZTdiMC00NGVjLWFhMDYtZTJlNTkxNjVlM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFWg79xy/ekS4RoWRMUOR7bbd2soN3lYFl7H GU8Y/Wdr/0U2eMbeW46QZF0RgrblgOIpWpxf0vSaQsQwmfe8yUs50mTBZTgKl5Cu dbdQY5yEa1gEolcSwhrDHkelhqfoRHV8VVFZGIe+ezn+Hs2b+ln8V2L+U6srMVd6 U0LhUaF+JFGBZRzAdA5T3ISvFI0JPqJcRDB9iNFv+P15XuYS5az0TyUwfquuXsV+ eLop+XAFjbYOIpwaCuDtMwsGiCH+O4vt+GmGnMLXQnkNaD5ukDzO4TP9VHL4SwSc 1LKFG3bFPgniTP5eSB90D1RO2cRx8d2qGBA7ejtEtUVk9GekHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg58/odOAx1F02WpZYu2+C8SrXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvNDBjMzUwZDgtM2JjMC0z NzkzLTg5MjgtZWNiNjc4YjdjNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzDAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeE6Le3vwEkr4/i6tBsw64wsOp6xqsAC0BVFHzNqJEWr9FJof5w/Qfh w2P6ICRdLSxna2VgNyB2S1gVHGXBz5A8wUoclhjOfjn6mSN76ma1XL1PAxeIeP6V tz/GsPeh3zKkkTxl700Yzmsroakm2hzes/W4gg+AzepQikHqIxrsN87fChLVmtNI UnysS6l1mTdA0AMHHJMbN0VJqFSkHUqUVD3nRyLadgdgrubQAqiBW+V8LkpqUaTP TK8JY+dzUiN2NVcbHnTjB9SMQdV4LEXo3EE6Xrp0oVJ3P7jfIbH3SSE5WGwfheVd EN785Ay0JhtNOoeoWd6ljPWNpCLTl3A= -----END CERTIFICATE-----Generated at Tue Sep 29 04:26:13 2026 by rpki-client