$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa File: df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa (raw, json) Hash identifier: SxdomrqYpuPg3Y/hE9UYtKomQl1AgZ8rPV0X4ATYA+0= Subject key identifier: DE:86:B1:88:9C:EA:BC:23:E0:B3:8B:EE:27:0A:81:FC:04:B1:5A:F4 Certificate issuer: /CN=37d983de-280d-4374-a056-b21eb13451dd Certificate serial: 010D0C9F4328584F0672308D0BF5149C74C63B80 Authority key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 33604 IP address blocks: 204.13.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:30:8d:0b:f5:14:9c:74:c6:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d983de-280d-4374-a056-b21eb13451dd Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=4c8a22a1-3ec5-4a9c-9abe-06c191ffca4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9a:88:79:5e:80:3b:18:2a:42:75:14:c0:0f: 60:ae:2f:b9:bb:cb:1f:2d:b8:47:58:84:49:ca:80: 0c:cf:5b:48:4d:c7:82:07:d6:6e:11:fc:f4:c6:a1: fb:f0:69:c3:a2:06:e8:fa:3f:f7:8c:ed:1b:6d:38: cd:de:fc:ce:59:4e:5f:f8:07:2c:df:8b:aa:dd:d0: d7:43:19:95:12:f1:66:af:9e:8a:f2:18:79:88:bb: ae:25:d0:c2:ea:58:e3:4d:5b:e1:f0:68:a6:8c:12: 66:90:21:5e:37:fb:43:72:88:da:f7:64:4b:be:20: 8f:d6:06:54:31:7f:5a:d4:78:3d:f6:93:f9:22:87: 8c:48:b8:b9:26:9e:93:17:7f:9d:ed:66:2f:a2:4f: 36:6c:0d:66:21:59:59:2e:11:85:15:56:0f:b8:72: 36:52:7b:9a:98:ca:85:56:cf:0d:ce:92:15:66:d6: aa:cd:4a:f5:a1:a0:65:bc:19:74:3d:67:f3:ca:b4: 4c:fa:48:e0:6d:bf:e9:4f:c0:d4:12:78:05:72:50: 45:32:c1:21:b7:fb:42:5f:89:1b:87:eb:5e:cc:3b: 47:25:2a:1a:87:36:20:f8:d6:3d:ed:ba:9e:aa:f2: 8c:7c:d5:2d:ca:d9:a6:96:9f:37:0c:91:e2:01:11: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:86:B1:88:9C:EA:BC:23:E0:B3:8B:EE:27:0A:81:FC:04:B1:5A:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl X509v3 Authority Key Identifier: keyid:A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer sbgp-ipAddrBlock: critical IPv4: 204.13.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3f:e2:c3:fb:0a:ab:e8:48:b3:25:05:d1:72:83:14:f2:49: 0a:03:96:61:86:6b:8e:22:27:9f:21:df:f9:0d:1f:eb:b5:c9: 92:fe:26:d0:4e:aa:37:08:15:de:ee:54:2d:5e:3f:7b:b9:73: 65:d0:99:bb:61:49:88:d7:d2:7f:68:d2:a4:be:21:b7:44:a1: c9:3a:26:03:6c:ae:92:47:30:57:0f:6a:0d:90:af:74:1d:fd: 32:46:7b:8a:e6:46:18:ac:d6:9e:a3:b7:9a:20:75:b9:4d:3a: 9b:61:7a:67:90:51:0d:43:3d:56:68:53:d9:31:a0:ff:49:4a: d3:30:14:08:1e:a6:14:c0:f9:95:96:a5:01:0a:2c:f5:44:9f: 59:32:22:f9:78:8c:c0:2c:17:47:17:8e:97:f1:62:96:54:29: d1:e8:3b:53:ff:9f:7f:c2:da:e7:35:fc:32:29:69:36:93:b7: 68:c1:a8:7f:8e:64:25:97:a9:c3:80:f2:d8:81:32:81:9e:b6: 17:57:68:e6:d4:c0:9f:c3:c8:cf:bf:9d:aa:03:f4:2e:59:cb: e6:2e:c9:da:65:1a:c4:f2:4a:f3:00:3c:c6:41:14:e9:a2:9f: 90:13:3b:bf:33:70:97:df:f0:21:a6:90:c9:04:8c:42:01:37: 6a:66:e2:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjCNC/UUnHTGO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdkOTgzZGUtMjgwZC00Mzc0LWEwNTYtYjIxZWIxMzQ1 MWRkMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NGM4YTIyYTEtM2VjNS00YTljLTlhYmUtMDZjMTkxZmZjYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZqIeV6AOxgqQnUUwA9gri+5u8sfLbhHWIRJ yoAMz1tITceCB9ZuEfz0xqH78GnDogbo+j/3jO0bbTjN3vzOWU5f+Acs34uq3dDX QxmVEvFmr56K8hh5iLuuJdDC6ljjTVvh8GimjBJmkCFeN/tDcoja92RLviCP1gZU MX9a1Hg99pP5IoeMSLi5Jp6TF3+d7WYvok82bA1mIVlZLhGFFVYPuHI2UnuamMqF Vs8NzpIVZtaqzUr1oaBlvBl0PWfzyrRM+kjgbb/pT8DUEngFclBFMsEht/tCX4kb h+tezDtHJSoahzYg+NY97bqeqvKMfNUtytmmlp83DJHiARHClwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6GsYic6rwj4LOL7icKgfwEsVr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zN2Q5 ODNkZS0yODBkLTQzNzQtYTA1Ni1iMjFlYjEzNDUxZGQvZGY4ODYzYTktYzljMi0z OTVhLTk5YzktN2YwMzNkOWIxN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzdkOTgzZGUtMjgwZC00Mzc0LWEw NTYtYjIxZWIxMzQ1MWRkLzM3ZDk4M2RlLTI4MGQtNDM3NC1hMDU2LWIyMWViMTM0 NTFkZC5jcmwwHwYDVR0jBBgwFoAUpe6pxbt2LCB+w6LvNsi5JtK1B7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zN2Q5ODNkZS0yODBkLTQzNzQtYTA1Ni1iMjFl YjEzNDUxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY/4sP7CqvoSLMlBdFygxTySQoDlmGGa44iJ58h3/kNH+u1yZL+JtBO qjcIFd7uVC1eP3u5c2XQmbthSYjX0n9o0qS+IbdEock6JgNsrpJHMFcPag2Qr3Qd /TJGe4rmRhis1p6jt5ogdblNOpthemeQUQ1DPVZoU9kxoP9JStMwFAgephTA+ZWW pQEKLPVEn1kyIvl4jMAsF0cXjpfxYpZUKdHoO1P/n3/C2uc1/DIpaTaTt2jBqH+O ZCWXqcOA8tiBMoGethdXaObUwJ/DyM+/naoD9C5Zy+YuydplGsTySvMAPMZBFOmi n5ATO78zcJff8CGmkMkEjEIBN2pm4ik= -----END CERTIFICATE-----Generated at Mon Oct 5 05:19:50 2026 by rpki-client