$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa File: af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa (raw, json) Hash identifier: gSjEpYt0Ue95pMBz3ZhhOnZwOr0PyrCwLOSSS2uxWCI= Subject key identifier: 92:C3:5C:52:0C:78:05:16:CA:DD:77:46:4A:CB:31:88:39:39:FC:28 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584F49888A120A9E2A2A1EDDDD00 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395088 IP address blocks: 204.10.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:8a:12:0a:9e:2a:2a:1e:dd:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e72a9fc-ee04-467d-b8f2-16fef6a74aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:eb:29:7e:fb:6c:9f:2c:d8:f9:22:19:9c: 3b:11:fe:b3:c1:33:e1:20:28:dc:32:93:bd:9f:0c: ef:cf:57:7e:25:95:6f:9f:4e:b4:70:a1:e3:2d:bd: 92:d4:ce:12:68:73:4c:fb:32:6c:42:2c:2f:6a:d1: cb:d3:02:cf:2c:cd:d7:a9:b1:ef:f4:3c:2d:72:11: 31:fd:99:af:bb:d6:2e:38:70:ef:5a:07:4c:12:9b: c3:b7:61:99:32:b4:67:5d:57:97:99:26:26:1a:25: bf:72:5f:b6:f8:ef:2f:fa:7a:fa:fc:5c:8e:98:93: 31:84:ce:4c:e0:84:67:63:35:f7:a7:52:87:d0:35: b0:d8:ae:73:f4:4a:5c:b3:5b:b7:2b:d7:2d:86:58: 72:a5:bd:54:51:16:b0:7d:40:45:08:00:9c:b6:20: c2:d4:a7:5d:ed:77:22:e8:2c:cd:ce:d2:fe:e7:49: db:ad:f3:c3:fc:8c:2b:bd:05:c7:03:b6:a4:9e:32: bd:a3:23:c1:d6:bd:fc:0c:ac:35:0a:40:5f:49:e7: 71:97:7d:65:2b:51:04:0f:1b:de:4c:6f:5d:45:29: 5a:2e:99:c8:7f:3f:eb:fc:d5:1b:aa:80:bd:5e:31: 97:18:7b:73:c3:2d:e5:a9:5b:40:7b:f1:e6:15:f2: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C3:5C:52:0C:78:05:16:CA:DD:77:46:4A:CB:31:88:39:39:FC:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/af2a62df-8c7f-382a-a66d-2b7fdec41b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 204.10.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b1:ba:99:68:c2:12:7c:ca:cd:32:93:f4:64:45:f6:2f:cf: eb:00:fa:3e:a9:86:93:0e:55:98:2c:cc:20:f4:2d:ad:09:78: 54:95:4a:c3:bf:0e:9f:1f:77:c4:61:b0:7e:08:a8:04:53:cc: 9e:54:68:a4:50:8c:f5:49:e3:6c:05:39:79:0a:19:4d:a4:87: b3:d7:bf:be:69:c8:2a:82:51:4c:9e:79:58:a7:80:a4:89:4f: 22:e0:d6:4e:b3:c6:22:42:93:d2:f2:99:e2:2a:00:b2:38:b4: 76:97:f5:e2:b4:1d:1f:5e:7b:6c:8a:c3:3b:0a:43:76:bc:c2: f9:99:6c:ec:f0:77:9a:ed:f6:76:fd:19:21:e3:15:27:4b:dd: bd:47:6f:2e:89:9d:58:9d:c5:6a:e0:92:6b:0a:93:9d:39:3a: d5:77:21:a0:e4:6c:69:74:2e:d4:b9:80:6b:de:1c:50:ac:ed: 57:93:0e:e7:85:3f:18:c5:6a:a0:71:b9:7a:48:46:46:cb:4a: e2:1a:92:21:95:d2:0b:bd:d1:37:79:8c:fa:80:b3:4f:55:70: 3a:d3:42:00:9c:14:60:46:89:f5:25:d7:16:a6:dd:54:ea:bb: 8b:8a:0a:e9:ab:19:f9:93:0a:2a:09:b2:e9:8e:8b:6d:e4:52: 0f:e3:10:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiIoSCp4qKh7d3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2U3MmE5ZmMtZWUwNC00NjdkLWI4ZjItMTZmZWY2YTc0YWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqbrKX77bJ8s2PkiGZw7Ef6zwTPhICjcMpO9 nwzvz1d+JZVvn060cKHjLb2S1M4SaHNM+zJsQiwvatHL0wLPLM3XqbHv9DwtchEx /Zmvu9YuOHDvWgdMEpvDt2GZMrRnXVeXmSYmGiW/cl+2+O8v+nr6/FyOmJMxhM5M 4IRnYzX3p1KH0DWw2K5z9Epcs1u3K9cthlhypb1UURawfUBFCACctiDC1Kdd7Xci 6CzNztL+50nbrfPD/IwrvQXHA7aknjK9oyPB1r38DKw1CkBfSedxl31lK1EEDxve TG9dRSlaLpnIfz/r/NUbqoC9XjGXGHtzwy3lqVtAe/HmFfIjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLDXFIMeAUWyt13RkrLMYg5OfwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvYWYyYTYyZGYtOGM3Zi0z ODJhLWE2NmQtMmI3ZmRlYzQxYjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzArMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGxuplowhJ8ys0yk/RkRfYvz+sA+j6phpMOVZgszCD0La0JeFSVSsO/ Dp8fd8RhsH4IqARTzJ5UaKRQjPVJ42wFOXkKGU2kh7PXv75pyCqCUUyeeVingKSJ TyLg1k6zxiJCk9LymeIqALI4tHaX9eK0HR9ee2yKwzsKQ3a8wvmZbOzwd5rt9nb9 GSHjFSdL3b1Hby6JnVidxWrgkmsKk505OtV3IaDkbGl0LtS5gGveHFCs7VeTDueF PxjFaqBxuXpIRkbLSuIakiGV0gu90Td5jPqAs09VcDrTQgCcFGBGifUl1xam3VTq u4uKCumrGfmTCioJsumOi23kUg/jEAM= -----END CERTIFICATE-----Generated at Fri Sep 25 07:02:45 2026 by rpki-client