$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa File: e4f21359-fbdd-3835-adf4-0aa226c665da.roa (raw, json) Hash identifier: IYPJzozfTchASTVwWfy5hbC3WJnbVUyWkso0lB0pDFY= Subject key identifier: F0:9E:DA:45:C9:D7:A4:40:43:45:E4:52:34:2F:60:B3:48:7B:FB:15 Certificate issuer: /CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Certificate serial: 010D0C9F4328584F225D06162D23B25B1DDE5C00 Authority key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 205.233.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:06:16:2d:23:b2:5b:1d:de:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=a1d6d0b3-1501-409d-89f2-4a54d4312209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:c5:f4:fe:0f:b7:18:0b:06:31:1a:24:b3: 58:45:86:f5:f2:4f:79:a2:a3:d5:58:4a:7a:41:fd: 30:bc:43:ad:ae:7f:a9:35:76:02:11:07:5c:e6:29: 7d:62:1e:10:94:0c:21:fa:0b:0b:06:ed:23:85:33: 8b:e9:09:bd:4d:fb:c4:1c:3e:af:25:6a:07:00:c1: a9:1f:ed:51:5a:77:ba:ee:a1:f2:b0:84:23:5f:ae: a9:01:9b:03:1b:52:ee:c0:75:f5:18:16:ef:8e:31: 96:2f:06:f3:aa:74:99:59:24:31:fb:24:b1:de:82: cd:53:21:a4:01:b0:26:96:1a:7e:aa:6c:46:92:8f: eb:b1:1f:56:a7:03:c0:c6:e7:d4:d0:e0:a7:cf:98: cc:1e:35:aa:79:d4:da:3e:dd:1b:20:cb:d2:03:45: 5d:66:b6:5a:c0:7e:be:5a:e1:c7:15:eb:ef:30:1b: 22:bd:3f:b7:21:83:b0:16:3f:03:25:14:23:d0:bc: dd:89:08:0f:f5:7b:53:24:d7:b8:c6:21:6e:c2:da: ff:17:d7:05:2c:ab:6c:6e:1e:dc:19:2c:c9:be:f9: 50:6b:40:b1:fa:09:6e:22:7c:f1:fa:1e:83:9e:41: 41:75:88:e7:af:e7:99:e1:11:f4:d5:ef:1d:ad:fc: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9E:DA:45:C9:D7:A4:40:43:45:E4:52:34:2F:60:B3:48:7B:FB:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/e4f21359-fbdd-3835-adf4-0aa226c665da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.crl X509v3 Authority Key Identifier: keyid:13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer sbgp-ipAddrBlock: critical IPv4: 205.233.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dc:4a:47:bd:e6:56:20:69:86:27:35:67:ec:dd:60:ad:c4: 9f:af:dd:ed:4e:4f:45:70:f9:d7:68:d3:b6:24:e5:49:2f:5d: 95:fe:7c:31:ad:7a:3e:5f:d9:54:f8:8b:9f:4f:63:11:93:d8: d6:e9:f5:98:39:89:20:2a:3a:31:3c:33:29:a9:01:a1:b4:0b: fb:0a:fa:06:d5:93:da:c6:d6:0f:93:44:6f:2b:b3:85:6f:84: e9:e9:17:e0:96:d7:37:b5:8c:22:54:4f:e9:4d:62:95:e3:dc: cd:89:32:b8:fa:32:3d:99:e2:79:79:b4:f1:bd:f8:89:b4:da: 17:48:6f:4f:43:1d:5a:f2:a0:03:cd:76:e7:f5:5d:64:fa:11: a3:7c:bf:14:38:a9:22:0c:0c:55:c2:0e:6d:38:3a:27:9b:ed: 66:48:9a:f5:89:0a:3b:09:5d:6c:63:71:d9:ad:36:70:b6:8f: 56:ab:ca:c7:72:9b:ac:81:fa:dd:cb:5b:f2:fd:f8:9c:74:c7: bb:71:f3:a0:19:bf:a0:11:39:11:e1:32:82:9a:18:4d:31:03: a6:3e:87:cf:22:48:f5:80:54:a4:67:ea:89:f9:00:ed:63:e7: 00:91:7e:a5:85:5c:c0:7d:10:cc:e9:e4:4b:5b:a5:01:ca:88: 6d:92:76:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQYWLSOyWx3eXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2Qw OTE5MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk YTFkNmQwYjMtMTUwMS00MDlkLTg5ZjItNGE1NGQ0MzEyMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvprF9P4PtxgLBjEaJLNYRYb18k95oqPVWEp6 Qf0wvEOtrn+pNXYCEQdc5il9Yh4QlAwh+gsLBu0jhTOL6Qm9TfvEHD6vJWoHAMGp H+1RWne67qHysIQjX66pAZsDG1LuwHX1GBbvjjGWLwbzqnSZWSQx+ySx3oLNUyGk AbAmlhp+qmxGko/rsR9WpwPAxufU0OCnz5jMHjWqedTaPt0bIMvSA0VdZrZawH6+ WuHHFevvMBsivT+3IYOwFj8DJRQj0LzdiQgP9XtTJNe4xiFuwtr/F9cFLKtsbh7c GSzJvvlQa0Cx+gluInzx+h6DnkFBdYjnr+eZ4RH01e8drfy/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCe2kXJ16RAQ0XkUjQvYLNIe/sVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEw ODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvZTRmMjEzNTktZmJkZC0z ODM1LWFkZjQtMGFhMjI2YzY2NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjVhMDg0OTItYjNiMS00YWExLWI1 NmQtMDFhOThmN2QwOTE5LzI1YTA4NDkyLWIzYjEtNGFhMS1iNTZkLTAxYTk4Zjdk MDkxOS5jcmwwHwYDVR0jBBgwFoAUEwn6IXzXjp6k3qQG3jOvyyTaawYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5 OGY3ZDA5MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzen0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfcSke95lYgaYYnNWfs3WCtxJ+v3e1OT0Vw+ddo07Yk5UkvXZX+fDGt ej5f2VT4i59PYxGT2Nbp9Zg5iSAqOjE8MympAaG0C/sK+gbVk9rG1g+TRG8rs4Vv hOnpF+CW1ze1jCJUT+lNYpXj3M2JMrj6Mj2Z4nl5tPG9+Im02hdIb09DHVryoAPN duf1XWT6EaN8vxQ4qSIMDFXCDm04Oieb7WZImvWJCjsJXWxjcdmtNnC2j1arysdy m6yB+t3LW/L9+Jx0x7tx86AZv6ARORHhMoKaGE0xA6Y+h88iSPWAVKRn6on5AO1j 5wCRfqWFXMB9EMzp5EtbpQHKiG2SdpM= -----END CERTIFICATE-----Generated at Fri Sep 25 21:37:55 2026 by rpki-client