$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa File: 9477d30f-60e1-349b-9381-c5e6e73f84d7.roa (raw, json) Hash identifier: 88/p3EIDLHtPzp7sJx3fqz6ErHsmXYNdlJxp0kbMjbU= Subject key identifier: 22:66:30:06:C7:36:22:35:DE:C7:BD:CA:E9:C3:77:21:47:E7:A9:AC Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584F58CD55418FFBE187C5A62E70 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 400226 IP address blocks: 204.197.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:55:41:8f:fb:e1:87:c5:a6:2e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=2e8ce295-0af1-4de7-954c-28e990764400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:c0:cb:9f:0b:f5:76:0c:8d:a2:3b:03:6b: b8:50:b7:3d:e8:e0:3f:98:41:51:56:91:9c:0d:b1: 43:c0:48:81:eb:bb:88:6e:e3:3b:6d:d3:d0:8f:13: ca:6a:90:01:41:34:42:c2:3e:d5:05:15:0c:92:5d: e4:35:40:4e:46:f2:15:32:15:29:f0:af:ad:45:a7: 77:32:5d:6a:7c:dc:b1:6a:51:f5:89:c3:07:25:eb: f9:d8:87:35:1b:bc:f1:5f:3d:f8:ee:e7:e0:c8:d5: 7e:08:ea:d1:40:d3:a4:e1:51:74:b7:66:a0:d1:e5: e3:e2:bd:6f:3c:5f:72:96:fe:26:49:95:f8:d8:7a: 29:f8:82:d0:b0:ee:ba:c8:5d:b8:7b:f0:8e:d3:95: db:d1:88:2e:6f:46:71:58:24:bc:6f:d1:08:8b:08: ab:38:86:bf:71:d4:f6:d1:ca:a5:5d:7c:cd:e4:02: 14:8f:af:e7:05:57:a7:f3:f3:b6:d6:78:1b:97:9c: d8:a9:8d:2e:ef:47:1e:bd:a1:d3:bc:b8:47:3c:de: 76:45:fd:71:c9:9b:af:b0:e4:71:96:db:33:9b:5b: b8:cd:5e:b6:bf:2e:67:3b:db:96:57:60:8d:26:8d: 51:6a:1e:97:79:e3:57:d1:da:f8:2d:b0:fb:69:52: 74:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:66:30:06:C7:36:22:35:DE:C7:BD:CA:E9:C3:77:21:47:E7:A9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cd:fa:2d:4e:b3:dd:8b:8d:53:91:90:9e:67:54:23:2d:6b: 9a:c0:c1:32:42:53:73:03:21:98:1c:cf:0a:99:ee:d7:06:db: db:3e:a6:41:f4:bf:7c:dc:5c:b0:8a:4b:39:78:fd:c5:80:57: 7d:92:fe:e4:64:d0:6d:f6:1d:d3:88:ac:09:f5:4e:11:f4:c9: ff:d4:60:48:18:6c:05:56:ab:ca:47:66:a8:dc:3a:fd:df:12: b7:59:03:9f:8f:98:2e:2e:53:cd:a9:c2:c6:3b:1a:b3:e0:e8: 36:bf:fd:9d:80:65:96:05:a7:a0:52:a0:5e:64:7d:15:3f:89: 16:27:39:3c:58:19:56:12:a1:79:9b:23:2f:49:7e:31:44:0d: ac:93:7a:5c:c1:77:52:ab:69:75:02:fa:a7:5b:0b:ad:8a:11: 79:cd:dc:c1:61:92:ce:ba:ff:61:76:84:48:e2:36:bd:45:27: 42:4f:4e:2c:fc:39:76:8d:1e:66:fa:2c:27:36:63:86:f5:24: 89:0b:53:81:59:41:34:4e:a5:0a:da:6b:42:15:cf:9d:d7:ac: 6e:7c:8a:21:12:8d:e3:75:22:69:4a:34:da:f4:17:a4:29:2d: 35:f2:8f:93:46:db:08:d1:80:5e:6a:65:fb:d1:53:43:93:8e: 14:bc:d8:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVVBj/vhh8WmLnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk MmU4Y2UyOTUtMGFmMS00ZGU3LTk1NGMtMjhlOTkwNzY0NDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiLAy58L9XYMjaI7A2u4ULc96OA/mEFRVpGc DbFDwEiB67uIbuM7bdPQjxPKapABQTRCwj7VBRUMkl3kNUBORvIVMhUp8K+tRad3 Ml1qfNyxalH1icMHJev52Ic1G7zxXz347ufgyNV+COrRQNOk4VF0t2ag0eXj4r1v PF9ylv4mSZX42Hop+ILQsO66yF24e/CO05Xb0Ygub0ZxWCS8b9EIiwirOIa/cdT2 0cqlXXzN5AIUj6/nBVen8/O21ngbl5zYqY0u70cevaHTvLhHPN52Rf1xyZuvsORx ltszm1u4zV62vy5nO9uWV2CNJo1Rah6XeeNX0dr4LbD7aVJ0sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJmMAbHNiI13se9yunDdyFH56msMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvOTQ3N2QzMGYtNjBlMS0z NDliLTkzODEtYzVlNmU3M2Y4NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvN+i1Os92LjVORkJ5nVCMta5rAwTJCU3MDIZgczwqZ7tcG29s+pkH0 v3zcXLCKSzl4/cWAV32S/uRk0G32HdOIrAn1ThH0yf/UYEgYbAVWq8pHZqjcOv3f ErdZA5+PmC4uU82pwsY7GrPg6Da//Z2AZZYFp6BSoF5kfRU/iRYnOTxYGVYSoXmb Iy9JfjFEDayTelzBd1KraXUC+qdbC62KEXnN3MFhks66/2F2hEjiNr1FJ0JPTiz8 OXaNHmb6LCc2Y4b1JIkLU4FZQTROpQraa0IVz53XrG58iiESjeN1ImlKNNr0F6Qp LTXyj5NG2wjRgF5qZfvRU0OTjhS82FI= -----END CERTIFICATE-----Generated at Fri Oct 9 20:48:05 2026 by rpki-client