$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f/12654174-e975-34d8-bdc2-48afa345262a.roa File: 12654174-e975-34d8-bdc2-48afa345262a.roa (raw, json) Hash identifier: pdgIk0KieSBvLJ8kYqDR0SycyuVuTLKWwmeTUPfPMfs= Subject key identifier: D9:34:3C:FC:7E:74:DC:D7:11:88:82:98:3F:FE:A0:F3:F3:D7:8B:6C Certificate issuer: /CN=b64c666f-4269-45cb-8ed1-5751fe67c25f Certificate serial: 010D0C9F4328584F10378368ADDE822E1D413840 Authority key identifier: 3B:C2:F1:CF:2F:DE:32:DE:7F:35:3A:35:75:A3:16:FC:5C:58:7F:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f/12654174-e975-34d8-bdc2-48afa345262a.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 396982 IP address blocks: 204.52.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f/b64c666f-4269-45cb-8ed1-5751fe67c25f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f/b64c666f-4269-45cb-8ed1-5751fe67c25f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:83:68:ad:de:82:2e:1d:41:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64c666f-4269-45cb-8ed1-5751fe67c25f Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=0e2280b2-823a-4975-8c6a-4623154cf8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:ec:08:34:33:fb:7f:2d:27:5c:de:5d:af: 92:59:e3:52:47:bd:3e:eb:60:89:ed:ae:e8:e1:e8: e9:85:0d:44:9d:d8:7f:b5:93:9a:37:61:e1:ed:27: 9f:c9:6c:9f:1f:ce:29:4d:50:6d:20:8f:39:e4:98: b7:e4:79:f4:c7:69:9b:d1:82:56:36:ac:e5:31:f4: cf:f2:74:e2:f7:2c:cb:92:e8:9c:71:15:06:16:00: 96:d4:79:f0:12:18:7a:50:ea:81:66:d1:9f:71:5d: 57:01:1c:00:58:08:14:43:9e:6e:43:9b:06:d3:40: 8d:1e:cd:76:71:62:9d:ff:25:8e:f1:f9:b2:a3:be: ee:d8:38:75:66:63:97:a3:f7:8d:e5:93:eb:26:61: ff:f3:e0:03:aa:aa:c6:d1:4c:68:09:5c:01:e7:d6: c0:38:7a:60:8a:c7:69:b3:48:44:ba:50:bb:34:e9: 69:e4:06:b1:26:90:01:0e:a0:bc:09:0d:05:3e:6e: e4:5a:7c:1f:8a:cc:10:40:b0:14:3e:06:69:82:fc: 89:c6:db:d3:af:9f:e9:32:6f:42:9d:0c:d4:20:17: aa:26:71:3f:a1:1f:17:2b:10:7d:d4:69:67:3d:03: 60:06:7d:a3:cd:f1:bf:0f:2c:cd:c9:0c:55:4b:0b: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:3C:FC:7E:74:DC:D7:11:88:82:98:3F:FE:A0:F3:F3:D7:8B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f/12654174-e975-34d8-bdc2-48afa345262a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f/b64c666f-4269-45cb-8ed1-5751fe67c25f.crl X509v3 Authority Key Identifier: keyid:3B:C2:F1:CF:2F:DE:32:DE:7F:35:3A:35:75:A3:16:FC:5C:58:7F:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b64c666f-4269-45cb-8ed1-5751fe67c25f.cer sbgp-ipAddrBlock: critical IPv4: 204.52.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:29:3e:45:e1:68:52:a5:7c:d8:90:b7:47:db:47:b8:d9:3a: e0:61:f0:82:57:48:a2:2a:0c:1b:35:de:49:e1:af:e4:e4:52: 88:4a:1f:38:34:18:fe:0e:ae:c4:b6:cc:d6:f0:58:ae:34:ec: 00:dc:0b:75:19:f7:57:0b:97:97:9b:a1:fb:3d:89:b2:e2:76: 1b:ae:63:96:b7:bc:06:0d:c9:a7:64:da:a5:43:d7:52:88:57: 13:51:f4:22:4a:4f:aa:9d:e3:69:e3:e4:39:ca:26:c2:d4:17: 0c:26:2d:25:6c:51:d0:38:32:c5:56:dd:03:f8:6f:ca:8b:c1: da:0a:03:9b:5a:39:41:a5:11:5f:b0:76:c3:55:89:15:84:e2: 53:75:e2:6c:1a:ab:13:9a:bf:54:08:ec:b5:fc:aa:40:06:69: c0:98:1e:e0:66:de:6d:ae:2e:c6:c5:21:8c:2a:8c:bd:cd:b4: 86:0e:07:aa:26:07:8b:ac:38:88:10:2f:14:b6:42:52:85:26: 02:da:70:28:9e:95:47:d7:4b:f3:62:8d:65:ce:1f:be:e7:64: 9b:9e:3c:e3:60:8b:19:84:27:a6:6d:bf:fd:09:5a:cb:09:4f: 13:55:fa:5b:7c:95:fb:12:19:5b:fb:4c:2f:b2:eb:cb:3f:26: 95:22:4f:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4Nord6CLh1BOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY0YzY2NmYtNDI2OS00NWNiLThlZDEtNTc1MWZlNjdj MjVmMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MGUyMjgwYjItODIzYS00OTc1LThjNmEtNDYyMzE1NGNmOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArczsCDQz+38tJ1zeXa+SWeNSR70+62CJ7a7o 4ejphQ1Endh/tZOaN2Hh7SefyWyfH84pTVBtII855Ji35Hn0x2mb0YJWNqzlMfTP 8nTi9yzLkuiccRUGFgCW1HnwEhh6UOqBZtGfcV1XARwAWAgUQ55uQ5sG00CNHs12 cWKd/yWO8fmyo77u2Dh1ZmOXo/eN5ZPrJmH/8+ADqqrG0UxoCVwB59bAOHpgisdp s0hEulC7NOlp5AaxJpABDqC8CQ0FPm7kWnwfiswQQLAUPgZpgvyJxtvTr5/pMm9C nQzUIBeqJnE/oR8XKxB91GlnPQNgBn2jzfG/DyzNyQxVSws7JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk0PPx+dNzXEYiCmD/+oPPz14tsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iNjRj NjY2Zi00MjY5LTQ1Y2ItOGVkMS01NzUxZmU2N2MyNWYvMTI2NTQxNzQtZTk3NS0z NGQ4LWJkYzItNDhhZmEzNDUyNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjY0YzY2NmYtNDI2OS00NWNiLThl ZDEtNTc1MWZlNjdjMjVmL2I2NGM2NjZmLTQyNjktNDVjYi04ZWQxLTU3NTFmZTY3 YzI1Zi5jcmwwHwYDVR0jBBgwFoAUO8Lxzy/eMt5/NTo1daMW/FxYf5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iNjRjNjY2Zi00MjY5LTQ1Y2ItOGVkMS01NzUx ZmU2N2MyNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4pPkXhaFKlfNiQt0fbR7jZOuBh8IJXSKIqDBs13knhr+TkUohKHzg0 GP4OrsS2zNbwWK407ADcC3UZ91cLl5ebofs9ibLidhuuY5a3vAYNyadk2qVD11KI VxNR9CJKT6qd42nj5DnKJsLUFwwmLSVsUdA4MsVW3QP4b8qLwdoKA5taOUGlEV+w dsNViRWE4lN14mwaqxOav1QI7LX8qkAGacCYHuBm3m2uLsbFIYwqjL3NtIYOB6om B4usOIgQLxS2QlKFJgLacCielUfXS/NijWXOH77nZJuePONgixmEJ6Ztv/0JWssJ TxNV+lt8lfsSGVv7TC+y68s/JpUiT0w= -----END CERTIFICATE-----Generated at Sat Oct 3 22:38:45 2026 by rpki-client