$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa File: d532a486-29c6-3280-81e5-af871505b46c.roa (raw, json) Hash identifier: zBjcGF674d9bQeZisDtz0tyGBkF6tSJB21NOGx5J8Tc= Subject key identifier: 53:C0:82:F9:BF:FA:73:0E:94:97:92:2F:14:DA:6A:26:1F:6C:ED:52 Certificate issuer: /CN=db3948d9-e295-422b-8439-1e057eb4673b Certificate serial: 010D0C9F4328584F498C2BEECF483678AD835000 Authority key identifier: 17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30048 IP address blocks: 204.10.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:2b:ee:cf:48:36:78:ad:83:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db3948d9-e295-422b-8439-1e057eb4673b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4878d2d-ece2-4cff-bc74-b4dca0d40b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:38:0f:d5:35:fb:66:82:e6:6e:76:a7:12:55: 01:e7:25:01:39:8b:6b:c5:e0:b6:ce:71:ff:1b:6c: 28:7e:c2:2b:82:89:7b:dc:30:91:c4:3f:7b:ba:cb: 45:b6:df:99:5b:ae:7c:b4:bc:7f:a7:60:27:4c:ec: b7:dd:3d:1e:24:49:c1:3c:6e:12:1f:17:7a:e5:70: 03:5e:54:68:56:ce:58:fb:51:25:9a:a0:e0:3c:52: 92:92:6d:7e:04:c1:da:56:3a:13:fb:7a:55:3c:79: 53:38:5d:0e:26:06:8a:94:ef:19:f1:e4:fc:f7:c2: ea:26:df:d2:e1:73:5a:ee:4f:95:31:1d:f5:7e:4f: 06:9c:8b:31:8a:39:49:1e:74:a6:ed:b9:7b:af:60: d1:fc:9d:32:44:b5:7f:bd:11:c9:f3:0f:7c:06:d6: 2d:42:13:6d:f8:da:c6:de:09:33:45:d8:86:1e:17: 20:71:b5:91:b3:bf:bc:5e:00:b3:6d:08:8d:9c:5d: fe:b3:41:8f:08:21:fb:e2:77:45:91:8a:4f:44:18: 7a:bb:1f:f7:f4:49:e7:34:25:47:66:27:3c:07:4b: 30:c6:ce:8f:ca:b5:76:fa:a6:dd:55:10:51:2e:95: 24:63:1c:30:3f:97:88:5c:eb:1f:b2:98:7e:95:01: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C0:82:F9:BF:FA:73:0E:94:97:92:2F:14:DA:6A:26:1F:6C:ED:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/d532a486-29c6-3280-81e5-af871505b46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b/db3948d9-e295-422b-8439-1e057eb4673b.crl X509v3 Authority Key Identifier: keyid:17:A5:0F:A3:04:01:04:C5:C1:25:28:64:2F:0D:ED:65:E2:6C:F2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/db3948d9-e295-422b-8439-1e057eb4673b.cer sbgp-ipAddrBlock: critical IPv4: 204.10.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:75:85:9a:70:77:a1:0c:2f:88:78:a5:0c:49:b2:de:68:d4: c1:65:60:07:31:04:26:b6:a7:47:16:f6:6a:bc:26:65:c8:07: 2f:e1:cc:7d:44:76:a9:31:a0:02:30:23:fc:87:4d:3a:7a:f6: 1a:73:c9:2b:08:ee:52:b4:ac:a6:20:de:cc:01:d8:5d:f5:b1: 51:12:db:a5:26:1b:75:ac:56:6e:10:7e:f3:4b:09:79:60:f1: 2e:fb:58:92:52:98:4f:7d:b4:4b:6c:7c:79:29:3b:dd:5f:70: b9:22:c2:a7:07:bc:e8:7c:03:75:5c:ad:d0:5c:f9:32:8c:4a: 04:4b:be:c7:a0:96:4b:e7:5b:4c:2a:17:45:bb:49:48:66:59: a5:f6:dd:54:f4:1d:e0:50:96:57:41:5f:73:22:ed:fa:75:5b: e7:49:46:0d:00:f4:68:68:d0:85:c5:f5:cf:79:f1:2f:85:13: 68:69:15:ee:90:22:b2:38:21:ff:45:53:2c:35:04:b1:4b:45: c5:41:7d:f0:25:21:7e:7d:33:24:bd:2e:48:dc:b7:8a:69:73: 85:bf:ac:33:aa:71:55:d8:95:35:40:a7:bb:24:98:57:80:16: 48:e7:29:f7:c1:e0:ee:31:d1:77:8b:fe:cf:66:03:39:e6:94: 6d:23:85:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjCvuz0g2eK2DUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIzOTQ4ZDktZTI5NS00MjJiLTg0MzktMWUwNTdlYjQ2 NzNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ4NzhkMmQtZWNlMi00Y2ZmLWJjNzQtYjRkY2EwZDQwYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjgP1TX7ZoLmbnanElUB5yUBOYtrxeC2znH/ G2wofsIrgol73DCRxD97ustFtt+ZW658tLx/p2AnTOy33T0eJEnBPG4SHxd65XAD XlRoVs5Y+1ElmqDgPFKSkm1+BMHaVjoT+3pVPHlTOF0OJgaKlO8Z8eT898LqJt/S 4XNa7k+VMR31fk8GnIsxijlJHnSm7bl7r2DR/J0yRLV/vRHJ8w98BtYtQhNt+NrG 3gkzRdiGHhcgcbWRs7+8XgCzbQiNnF3+s0GPCCH74ndFkYpPRBh6ux/39EnnNCVH Zic8B0swxs6PyrV2+qbdVRBRLpUkYxwwP5eIXOsfsph+lQFv6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPAgvm/+nMOlJeSLxTaaiYfbO1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kYjM5 NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1N2ViNDY3M2IvZDUzMmE0ODYtMjljNi0z MjgwLTgxZTUtYWY4NzE1MDViNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZGIzOTQ4ZDktZTI5NS00MjJiLTg0 MzktMWUwNTdlYjQ2NzNiL2RiMzk0OGQ5LWUyOTUtNDIyYi04NDM5LTFlMDU3ZWI0 NjczYi5jcmwwHwYDVR0jBBgwFoAUF6UPowQBBMXBJShkLw3tZeJs8lwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kYjM5NDhkOS1lMjk1LTQyMmItODQzOS0xZTA1 N2ViNDY3M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzArPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJ1hZpwd6EML4h4pQxJst5o1MFlYAcxBCa2p0cW9mq8JmXIBy/hzH1E dqkxoAIwI/yHTTp69hpzySsI7lK0rKYg3swB2F31sVES26UmG3WsVm4QfvNLCXlg 8S77WJJSmE99tEtsfHkpO91fcLkiwqcHvOh8A3VcrdBc+TKMSgRLvseglkvnW0wq F0W7SUhmWaX23VT0HeBQlldBX3Mi7fp1W+dJRg0A9Gho0IXF9c958S+FE2hpFe6Q IrI4If9FUyw1BLFLRcVBffAlIX59MyS9Lkjct4ppc4W/rDOqcVXYlTVAp7skmFeA FkjnKffB4O4x0XeL/s9mAznmlG0jhQo= -----END CERTIFICATE-----Generated at Sat Sep 26 13:29:33 2026 by rpki-client