$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa File: dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa (raw, json) Hash identifier: qLDP/chP66NVqRjwM+goE0i99SEsSMvbuxh88/m2ihE= Subject key identifier: 44:9F:AF:A3:39:C5:D1:72:32:D3:A2:83:A6:36:46:D0:CD:A6:06:B8 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584F4973E1866E12276ADD352400 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 172.102.218.0/24 maxlen: 24 216.158.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e1:86:6e:12:27:6a:dd:35:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8f448cec-0a67-48e8-8636-06d9daeae0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:41:d9:7b:5a:66:ed:c5:ba:f4:09:92:bf:19: b1:01:cb:d4:38:37:3a:ea:ea:37:bb:2b:c9:b1:08: d3:0e:9d:a9:4a:74:f1:32:a3:c0:1e:98:f6:4e:17: 0d:d5:62:ed:88:5c:87:ae:51:46:8e:16:3c:5c:2d: a9:a5:3d:c0:42:99:56:de:0d:c5:6e:7c:41:dc:72: db:c3:02:87:78:96:05:9b:c1:cd:3d:46:03:7f:2b: 81:d7:a5:66:85:e0:3e:c4:2d:4a:87:cf:4f:5a:a1: 2f:14:c9:c0:71:79:c5:1a:f0:a6:d2:73:8c:88:ad: 6c:ae:d2:68:ce:bb:6c:f9:34:4e:cb:8a:7e:e7:bf: 3c:49:00:f3:08:bf:fc:ba:93:e7:cc:47:d3:8d:76: 4e:55:06:94:7e:f1:65:b9:3e:07:18:94:a8:ad:51: a1:ff:24:d2:77:aa:3f:90:ed:5c:d2:47:d9:7c:46: 98:91:10:21:14:33:00:79:ad:0b:3c:ce:dc:87:26: c4:ce:c2:e5:d4:3e:2e:74:f4:44:79:20:7c:9a:93: 05:6f:ff:76:ab:5b:99:ea:dd:1d:cc:9a:5c:af:6f: a6:4e:19:b0:e8:e9:9d:94:22:39:99:fc:4f:19:f4: 37:49:ef:27:c7:4a:b3:92:62:b9:91:35:22:9c:60: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9F:AF:A3:39:C5:D1:72:32:D3:A2:83:A6:36:46:D0:CD:A6:06:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.218.0/24 216.158.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:26:25:d1:30:0e:ae:c1:44:b7:8b:c9:54:29:4e:9a:5e:70: 25:52:fd:c2:f1:56:c1:28:d0:a1:18:40:4a:ea:3a:a0:05:b2: f5:59:25:a3:06:92:53:f4:36:96:17:76:d9:a7:ed:5e:72:74: 0e:1a:b2:77:e9:86:f1:5a:41:29:44:a5:fc:73:c3:fc:71:a3: 48:55:85:d3:a0:cf:bd:0d:0e:25:f2:fa:25:18:52:1c:40:b0: 1a:a2:a9:50:95:87:2d:3c:d9:d2:35:82:99:f9:9e:98:ac:4a: 60:59:4e:69:ff:61:df:e5:9a:c2:96:b3:c2:26:72:ef:84:57: 80:51:35:b3:d1:d3:42:74:b1:a5:05:df:0e:00:cd:82:4d:1d: 9b:58:2a:ec:44:fd:df:76:a4:1c:d3:29:7e:24:e5:be:a2:27: e1:2c:5f:e0:7b:f2:29:15:99:5a:1a:50:86:9d:ed:f0:93:bd: 46:df:1a:ff:33:74:f0:f9:99:c0:19:6c:1d:1a:3a:17:55:52: e7:43:1d:05:1a:31:3f:62:8a:3d:0e:65:a5:11:aa:36:2a:98: cf:96:f1:b8:e6:4d:eb:39:6d:1b:7a:dc:40:74:28:d2:17:e2: 35:ca:07:f6:9a:3c:74:c5:e0:f3:53:21:99:d3:01:10:d9:c2: 6d:a2:06:56 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc+GGbhInat01JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGY0NDhjZWMtMGE2Ny00OGU4LTg2MzYtMDZkOWRhZWFlMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEHZe1pm7cW69AmSvxmxAcvUODc66uo3uyvJ sQjTDp2pSnTxMqPAHpj2ThcN1WLtiFyHrlFGjhY8XC2ppT3AQplW3g3FbnxB3HLb wwKHeJYFm8HNPUYDfyuB16VmheA+xC1Kh89PWqEvFMnAcXnFGvCm0nOMiK1srtJo zrts+TROy4p+5788SQDzCL/8upPnzEfTjXZOVQaUfvFluT4HGJSorVGh/yTSd6o/ kO1c0kfZfEaYkRAhFDMAea0LPM7chybEzsLl1D4udPREeSB8mpMFb/92q1uZ6t0d zJpcr2+mThmw6OmdlCI5mfxPGfQ3Se8nx0qzkmK5kTUinGDDtwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFESfr6M5xdFyMtOig6Y2RtDNpga4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZGMwMGUxOGQtMjgzNS0z MGIyLWFlZGMtMGY4MTg1ZWM0YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbaAwQA 2J7NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGcmJdEwDq7BRLeLyVQpTppecCVS/cLxVsEo0KEYQErqOqAF svVZJaMGklP0NpYXdtmn7V5ydA4asnfphvFaQSlEpfxzw/xxo0hVhdOgz70NDiXy +iUYUhxAsBqiqVCVhy082dI1gpn5npisSmBZTmn/Yd/lmsKWs8Imcu+EV4BRNbPR 00J0saUF3w4AzYJNHZtYKuxE/d92pBzTKX4k5b6iJ+EsX+B78ikVmVoaUIad7fCT vUbfGv8zdPD5mcAZbB0aOhdVUudDHQUaMT9iij0OZaURqjYqmM+W8bjmTes5bRt6 3EB0KNIX4jXKB/aaPHTF4PNTIZnTARDZwm2iBlY= -----END CERTIFICATE-----Generated at Thu Oct 1 13:22:20 2026 by rpki-client