$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/87349210-3ffc-3fb2-879e-c64deb3a005a.roa File: 87349210-3ffc-3fb2-879e-c64deb3a005a.roa (raw, json) Hash identifier: 7Dy4kp5ofQYISQrsYbIhp76PKJvY4xy562uNt9zQ0Q0= Subject key identifier: 0C:C4:12:87:0B:E5:8A:78:E7:92:84:D1:30:2B:F6:F7:67:39:5D:39 Certificate issuer: /CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Certificate serial: 010D0C9F4328584E9384FCFF95B7D70BC2F3A100 Authority key identifier: FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/87349210-3ffc-3fb2-879e-c64deb3a005a.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 20406 IP address blocks: 204.16.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:fc:ff:95:b7:d7:0b:c2:f3:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=ed007680-9104-4e8e-8b7b-a504e2b38b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:24:c0:d0:a7:ee:63:cc:a9:70:d4:98:d8:57: ea:99:0b:ca:69:b9:6a:da:b7:8a:3b:e0:80:56:50: 98:78:1f:7a:dd:d0:81:d2:39:2d:b6:cb:dc:02:93: 75:1d:74:12:20:4c:23:f0:e1:22:21:16:41:24:d9: b5:11:36:2d:9a:96:57:51:29:4c:2a:6f:a9:25:58: 9b:62:e9:5a:38:49:f6:8a:87:f4:9c:c9:98:a9:d8: 4d:d3:9d:3a:17:cf:2f:9e:87:cf:b4:19:cd:14:df: 90:0d:fa:6b:ae:57:a2:2e:36:ac:18:c3:81:3f:1a: 47:37:17:e3:db:af:63:b7:3e:13:6d:22:76:98:19: ff:6d:33:e1:5d:02:0b:bf:85:d9:12:53:a8:a7:a3: 73:88:1f:e7:3b:d8:3d:49:b1:a2:62:3a:83:1c:53: 7e:49:53:b5:3d:54:c9:8c:e3:37:7f:89:e6:8b:92: 93:e4:51:e0:91:ae:07:cb:17:43:4b:00:d2:85:ec: 10:2a:d6:2d:74:f1:8d:b6:00:4e:fd:83:35:47:36: 6d:25:3f:79:04:cc:36:cb:49:82:29:5d:1b:ff:c0: 00:ae:ac:bd:bb:38:f5:07:4c:ce:3c:2b:ba:6c:64: d2:21:1a:87:6b:6b:9a:d6:19:75:d7:ac:69:2c:16: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C4:12:87:0B:E5:8A:78:E7:92:84:D1:30:2B:F6:F7:67:39:5D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/87349210-3ffc-3fb2-879e-c64deb3a005a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl X509v3 Authority Key Identifier: keyid:FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer sbgp-ipAddrBlock: critical IPv4: 204.16.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:24:4e:41:89:b2:5c:1a:b7:30:8d:fb:a6:28:c5:6e:18:06: 7f:3e:c4:81:cf:b2:5c:d9:54:88:fb:de:22:18:1a:24:20:17: e3:d3:a1:75:eb:df:21:f7:01:21:ed:94:7c:e6:72:9a:3c:7d: 23:6a:c5:a0:39:da:c3:d6:6d:c6:ea:8f:e3:53:7c:27:c4:52: c5:b7:68:2d:0d:f1:0c:52:bc:65:4c:a6:87:0d:a2:44:eb:69: 48:0c:61:49:c8:28:1a:0d:b0:bd:45:bf:99:0e:59:18:90:51: 1b:7e:a1:4d:16:1b:96:c0:c0:c3:61:26:21:31:2e:ca:41:c4: 9a:0c:e2:bc:f6:e3:22:a2:b3:ff:8b:c6:1d:6d:6f:65:b7:59: 83:93:a9:5a:c3:b3:67:9c:dc:b2:6e:ed:91:31:3b:47:73:ec: 8b:62:fb:0d:8f:fb:c4:b8:e8:60:fb:d9:e8:ed:a9:52:2a:51: 92:40:c4:26:fe:fa:2e:3d:39:5e:fa:f8:8a:72:9f:95:c2:35: 2d:ff:37:f1:3e:fa:d7:4b:4d:a6:f0:f0:e9:df:40:a2:79:5d: af:bc:ff:1c:84:80:46:c2:7a:2a:7e:a6:a0:61:c8:38:07:14: c4:2e:49:76:68:51:67:02:ee:c5:e9:5d:5b:cf:8d:2f:18:12: af:43:f2:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPz/lbfXC8LzoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmVkMjgzMDMtODRmOC00ZWEwLTgyNTItZjdlZTFmNDIw NjUyMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk ZWQwMDc2ODAtOTEwNC00ZThlLThiN2ItYTUwNGUyYjM4YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iTA0KfuY8ypcNSY2FfqmQvKablq2reKO+CA VlCYeB963dCB0jkttsvcApN1HXQSIEwj8OEiIRZBJNm1ETYtmpZXUSlMKm+pJVib YulaOEn2iof0nMmYqdhN0506F88vnofPtBnNFN+QDfprrleiLjasGMOBPxpHNxfj 269jtz4TbSJ2mBn/bTPhXQILv4XZElOop6NziB/nO9g9SbGiYjqDHFN+SVO1PVTJ jOM3f4nmi5KT5FHgka4HyxdDSwDShewQKtYtdPGNtgBO/YM1RzZtJT95BMw2y0mC KV0b/8AArqy9uzj1B0zOPCu6bGTSIRqHa2ua1hl116xpLBaCkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzEEocL5Yp455KE0TAr9vdnOV05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZWQy ODMwMy04NGY4LTRlYTAtODI1Mi1mN2VlMWY0MjA2NTIvODczNDkyMTAtM2ZmYy0z ZmIyLTg3OWUtYzY0ZGViM2EwMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmVkMjgzMDMtODRmOC00ZWEwLTgy NTItZjdlZTFmNDIwNjUyLzJlZDI4MzAzLTg0ZjgtNGVhMC04MjUyLWY3ZWUxZjQy MDY1Mi5jcmwwHwYDVR0jBBgwFoAU+3GIe86h0LFmM8LgJtyftxWxEDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZWQyODMwMy04NGY4LTRlYTAtODI1Mi1mN2Vl MWY0MjA2NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8kTkGJslwatzCN+6YoxW4YBn8+xIHPslzZVIj73iIYGiQgF+PToXXr 3yH3ASHtlHzmcpo8fSNqxaA52sPWbcbqj+NTfCfEUsW3aC0N8QxSvGVMpocNokTr aUgMYUnIKBoNsL1Fv5kOWRiQURt+oU0WG5bAwMNhJiExLspBxJoM4rz24yKis/+L xh1tb2W3WYOTqVrDs2ec3LJu7ZExO0dz7Iti+w2P+8S46GD72ejtqVIqUZJAxCb+ +i49OV76+Ipyn5XCNS3/N/E++tdLTabw8OnfQKJ5Xa+8/xyEgEbCeip+pqBhyDgH FMQuSXZoUWcC7sXpXVvPjS8YEq9D8v4= -----END CERTIFICATE-----Generated at Fri Jul 24 18:42:33 2026 by rpki-client