$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/c586ccab-130f-3b75-83c3-c6a96397f2ca.roa File: c586ccab-130f-3b75-83c3-c6a96397f2ca.roa (raw, json) Hash identifier: u+ywBQ06WB4IK9bMIBcmLZQQjkJF8ntTLJWcpwJUZS4= Subject key identifier: 91:B9:72:19:0B:26:0A:6C:6F:F7:0A:E8:A7:4F:FA:04:16:8D:76:B9 Certificate issuer: /CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Certificate serial: 010D0C9F4328584F35E7C49D3423B26E5D8B5700 Authority key identifier: FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/c586ccab-130f-3b75-83c3-c6a96397f2ca.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 20406 IP address blocks: 204.16.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c4:9d:34:23:b2:6e:5d:8b:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ed28303-84f8-4ea0-8252-f7ee1f420652 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=689e54e9-8052-4bfd-b410-e64b0be9bd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:b9:c9:96:f1:11:c7:75:dd:1e:c9:11:cc: b6:7a:a7:88:b2:5f:26:91:49:85:62:9d:dc:61:ec: 57:3e:1c:0d:26:e9:d2:32:c3:6f:65:5c:b4:45:bd: fc:8c:de:16:07:b3:b0:8b:06:af:03:40:76:22:cb: 0c:f7:c7:30:0e:c0:1b:ea:e0:4c:29:f8:91:76:3f: fc:f9:cf:f9:fd:0b:ba:24:23:4f:eb:27:65:e8:80: d2:11:9d:3b:46:34:e4:49:ae:55:6b:53:fa:a7:e7: e8:d3:d0:66:df:11:17:e5:87:d7:cd:f2:2e:aa:db: 91:72:27:70:0f:17:86:b4:83:c1:07:ab:91:73:bb: 30:cf:fd:84:7c:8a:63:ce:0c:d8:2e:36:5b:5d:21: d8:93:96:0d:ec:fd:1d:f2:4a:3c:3b:ba:ef:af:c5: 90:a2:e9:f6:26:7a:09:43:0d:11:b9:34:26:f4:4c: 38:c7:9c:48:46:91:63:45:8b:7e:7e:0a:b3:e4:6e: 74:1b:37:6b:a1:f2:4b:88:b5:01:b1:7d:2b:07:54: 1a:16:bb:66:7e:4e:2b:39:44:b0:9d:1d:26:4c:de: 46:44:3b:7a:f4:77:7d:be:89:d8:70:02:67:b6:f3: ff:f4:1a:3a:e4:0d:c0:d2:3a:c3:69:9a:35:cf:06: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B9:72:19:0B:26:0A:6C:6F:F7:0A:E8:A7:4F:FA:04:16:8D:76:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/c586ccab-130f-3b75-83c3-c6a96397f2ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652/2ed28303-84f8-4ea0-8252-f7ee1f420652.crl X509v3 Authority Key Identifier: keyid:FB:71:88:7B:CE:A1:D0:B1:66:33:C2:E0:26:DC:9F:B7:15:B1:10:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2ed28303-84f8-4ea0-8252-f7ee1f420652.cer sbgp-ipAddrBlock: critical IPv4: 204.16.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:43:d2:f4:f4:2b:91:28:4f:9d:7e:a7:09:74:22:1a:46:54: 7b:ec:b1:ce:b5:c2:2e:10:85:80:62:bd:fe:5c:19:57:e9:a9: c8:fe:34:fa:be:42:53:47:d3:95:d9:c1:a7:64:13:e5:80:67: 54:6d:21:08:10:5b:e7:fd:22:64:df:c4:61:e0:c5:ad:20:25: c3:e4:e2:41:57:2e:97:f3:8d:41:16:11:a6:35:51:f4:76:45: a7:65:76:86:71:a4:79:97:e9:16:5a:81:ca:af:55:c6:61:46: 91:64:1e:fd:90:27:4b:35:a2:ea:17:4c:37:fb:bc:e8:04:f6: e1:66:f9:d8:6d:38:ad:6f:ca:9b:88:54:1d:c3:79:5a:6d:f5: f2:de:b8:45:26:32:94:6a:a0:06:f6:17:d7:ef:72:52:50:48: 4d:fd:0b:4d:82:37:9e:ba:af:b3:e7:f2:cd:c1:d6:0b:81:65: 9c:ee:d5:0f:cd:11:f0:c1:e9:c3:7b:8b:28:c0:94:66:b0:b3: ee:d5:e6:d2:c6:f5:2a:9f:a0:33:48:63:34:db:ad:1d:af:d4: 7b:1b:93:f5:e5:22:f6:ea:9f:6e:b3:7e:3d:ac:c7:e3:76:15: 9a:11:99:af:6f:35:9e:42:d9:30:9e:59:20:a1:54:fd:c8:90: 4e:23:ea:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158SdNCOybl2LVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmVkMjgzMDMtODRmOC00ZWEwLTgyNTItZjdlZTFmNDIw NjUyMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk Njg5ZTU0ZTktODA1Mi00YmZkLWI0MTAtZTY0YjBiZTliZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifS5yZbxEcd13R7JEcy2eqeIsl8mkUmFYp3c YexXPhwNJunSMsNvZVy0Rb38jN4WB7OwiwavA0B2IssM98cwDsAb6uBMKfiRdj/8 +c/5/Qu6JCNP6ydl6IDSEZ07RjTkSa5Va1P6p+fo09Bm3xEX5YfXzfIuqtuRcidw DxeGtIPBB6uRc7swz/2EfIpjzgzYLjZbXSHYk5YN7P0d8ko8O7rvr8WQoun2JnoJ Qw0RuTQm9Ew4x5xIRpFjRYt+fgqz5G50GzdrofJLiLUBsX0rB1QaFrtmfk4rOUSw nR0mTN5GRDt69Hd9vonYcAJntvP/9Bo65A3A0jrDaZo1zwbQ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG5chkLJgpsb/cK6KdP+gQWjXa5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZWQy ODMwMy04NGY4LTRlYTAtODI1Mi1mN2VlMWY0MjA2NTIvYzU4NmNjYWItMTMwZi0z Yjc1LTgzYzMtYzZhOTYzOTdmMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmVkMjgzMDMtODRmOC00ZWEwLTgy NTItZjdlZTFmNDIwNjUyLzJlZDI4MzAzLTg0ZjgtNGVhMC04MjUyLWY3ZWUxZjQy MDY1Mi5jcmwwHwYDVR0jBBgwFoAU+3GIe86h0LFmM8LgJtyftxWxEDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZWQyODMwMy04NGY4LTRlYTAtODI1Mi1mN2Vl MWY0MjA2NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJD0vT0K5EoT51+pwl0IhpGVHvssc61wi4QhYBivf5cGVfpqcj+NPq+ QlNH05XZwadkE+WAZ1RtIQgQW+f9ImTfxGHgxa0gJcPk4kFXLpfzjUEWEaY1UfR2 RadldoZxpHmX6RZagcqvVcZhRpFkHv2QJ0s1ouoXTDf7vOgE9uFm+dhtOK1vypuI VB3DeVpt9fLeuEUmMpRqoAb2F9fvclJQSE39C02CN566r7Pn8s3B1guBZZzu1Q/N EfDB6cN7iyjAlGaws+7V5tLG9SqfoDNIYzTbrR2v1Hsbk/XlIvbqn26zfj2sx+N2 FZoRma9vNZ5C2TCeWSChVP3IkE4j6j4= -----END CERTIFICATE-----Generated at Tue Oct 13 20:58:04 2026 by rpki-client