$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa File: 975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa (raw, json) Hash identifier: HCmfaaZvYcrSiy1FdTy83kQ6Ogkl8mqiBTNUZSMDfbc= Subject key identifier: 77:FE:DE:CC:96:6B:32:EE:3C:44:4E:7F:0A:0A:46:C9:90:F1:E8:7A Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1 Certificate serial: 010D0C9F4328584F480D611EAA71ED8239DF8D00 Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 204.11.172.0/24 maxlen: 24 204.11.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:61:1e:aa:71:ed:82:39:df:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=6fcd6fb1-74c3-4d06-be8f-db161e8553a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:56:47:27:11:e5:59:77:c8:4a:e2:6a:83: 4a:ec:dc:d6:85:9d:dc:dd:2f:01:26:c4:48:a0:b1: cd:ac:64:78:a9:7d:0e:90:5a:4a:16:8f:d6:1b:bd: 5b:11:7c:d0:84:a4:3e:52:58:42:45:16:20:61:41: 07:c4:b0:d6:75:3c:51:07:fd:ae:64:e2:16:14:33: 61:d7:25:bd:1a:94:2f:e7:e3:6c:02:2d:f1:99:15: e0:11:b6:06:96:2d:06:ff:f7:b0:49:67:31:53:47: b6:10:f8:70:14:9c:e2:40:6f:73:c0:9d:fa:07:d4: 9b:5f:a9:92:83:56:c2:d1:2b:cd:1f:a3:94:24:c2: f5:c4:92:f7:71:73:f8:a3:3d:eb:b0:c6:9e:37:91: 82:43:46:8c:9f:b9:e9:03:ab:1d:2d:f0:32:81:d6: 7f:6c:de:b7:88:f4:bb:7a:ce:d1:65:8a:a5:41:a5: 6a:73:5c:95:45:47:d3:56:49:2c:83:77:26:ea:fb: 3e:15:73:df:e3:23:65:40:bd:e6:36:86:20:59:e5: e2:1a:1d:d3:3a:a1:73:97:db:4e:7c:76:27:d0:da: 43:a8:7a:3a:2e:2b:47:7e:c7:1d:e3:36:3b:2a:a0: 1b:1b:7c:41:51:eb:3a:e0:e3:39:1f:05:02:12:5d: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FE:DE:CC:96:6B:32:EE:3C:44:4E:7F:0A:0A:46:C9:90:F1:E8:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/975dc5ec-1af1-3dca-a77b-0b9391264c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl X509v3 Authority Key Identifier: keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:66:08:4e:61:70:23:00:b9:6e:8d:ae:db:b2:9b:c2:df:a0: 6f:0f:14:4f:78:ce:8a:d7:77:6a:ca:70:90:e5:6c:06:9f:b9: f5:1a:55:b3:4b:6a:5d:f7:60:38:8e:3e:18:1f:d6:3a:c7:34: 5c:f5:3a:39:46:2c:8a:7f:14:97:c3:c3:58:d8:d6:e8:36:cc: fe:b9:0e:16:c1:3a:1e:33:5b:89:38:e6:79:89:5f:a2:f2:a6: 2d:2a:79:0c:fa:2e:e4:86:98:dd:ba:42:5f:ff:22:20:e1:55: c5:f0:76:d4:34:7a:f7:d0:e5:f4:eb:89:3e:a6:c4:f2:dc:44: ee:30:7c:00:fd:d0:71:2b:50:9c:89:c4:66:9f:10:2e:ad:61: e5:09:9f:30:e6:80:95:48:48:82:00:79:40:52:51:8f:e4:6f: 77:b0:c0:d8:b7:a5:20:9a:86:53:23:87:46:89:bb:ab:6e:63: 99:9f:1d:d1:70:5f:6f:1f:43:d7:40:b6:6e:25:02:9e:23:3d: 86:64:5f:e2:31:56:af:ea:43:8c:1b:e7:89:37:90:ea:bd:69: 50:60:75:e8:f1:f2:3e:af:b5:92:b9:ad:76:da:bb:a6:a2:fc: c3:2e:94:8a:27:ad:e8:c6:4f:c5:65:27:a7:30:2b:39:05:7b: 23:30:d4:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWEeqnHtgjnfjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NjA1NDEtZGZlOS00M2RmLTgyNzctODZkODNhYTYx MGExMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NmZjZDZmYjEtNzRjMy00ZDA2LWJlOGYtZGIxNjFlODU1M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp65WRycR5Vl3yEriaoNK7NzWhZ3c3S8BJsRI oLHNrGR4qX0OkFpKFo/WG71bEXzQhKQ+UlhCRRYgYUEHxLDWdTxRB/2uZOIWFDNh 1yW9GpQv5+NsAi3xmRXgEbYGli0G//ewSWcxU0e2EPhwFJziQG9zwJ36B9SbX6mS g1bC0SvNH6OUJML1xJL3cXP4oz3rsMaeN5GCQ0aMn7npA6sdLfAygdZ/bN63iPS7 es7RZYqlQaVqc1yVRUfTVkksg3cm6vs+FXPf4yNlQL3mNoYgWeXiGh3TOqFzl9tO fHYn0NpDqHo6LitHfscd4zY7KqAbG3xBUes64OM5HwUCEl1oTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf+3syWazLuPEROfwoKRsmQ8eh6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2 MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4M2FhNjEwYTEvOTc1ZGM1ZWMtMWFmMS0z ZGNhLWE3N2ItMGI5MzkxMjY0YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1NjA1NDEtZGZlOS00M2RmLTgy NzctODZkODNhYTYxMGExLzhkNTYwNTQxLWRmZTktNDNkZi04Mjc3LTg2ZDgzYWE2 MTBhMS5jcmwwHwYDVR0jBBgwFoAUi7I9L4V+VkiemW6Bz6BLaUihXO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4 M2FhNjEwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVmCE5hcCMAuW6Nrtuym8LfoG8PFE94zorXd2rKcJDlbAafufUaVbNL al33YDiOPhgf1jrHNFz1OjlGLIp/FJfDw1jY1ug2zP65DhbBOh4zW4k45nmJX6Ly pi0qeQz6LuSGmN26Ql//IiDhVcXwdtQ0evfQ5fTriT6mxPLcRO4wfAD90HErUJyJ xGafEC6tYeUJnzDmgJVISIIAeUBSUY/kb3ewwNi3pSCahlMjh0aJu6tuY5mfHdFw X28fQ9dAtm4lAp4jPYZkX+IxVq/qQ4wb54k3kOq9aVBgdejx8j6vtZK5rXbau6ai /MMulIonrejGT8VlJ6cwKzkFeyMw1H0= -----END CERTIFICATE-----Generated at Thu Oct 1 10:45:01 2026 by rpki-client