$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa File: a3cdaf22-fa27-38fe-955b-f9f075407d40.roa (raw, json) Hash identifier: pEU86VjhbVL2/I/gjyFGyKKsmm83fGchXh8VcjR1US0= Subject key identifier: C7:0A:1B:FF:99:08:60:75:B6:6F:6D:BE:E1:2A:C3:86:DE:E0:E0:C7 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584F4973F8B551724760067E31B0 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 270169 IP address blocks: 204.199.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f8:b5:51:72:47:60:06:7e:31:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=48ed2177-4197-4a78-b7dc-01a6a9396cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:78:46:c3:96:e8:37:49:1e:e6:21:2b:0f: 6e:51:78:f5:c9:99:da:ed:b0:bd:e2:89:bb:03:db: 1e:86:bf:2f:b2:a9:a9:a0:c8:ce:ec:19:6f:bb:0b: b8:f4:9a:28:a5:36:16:5c:96:68:c2:05:a1:46:b6: 20:1c:e7:d1:1a:08:74:bc:e2:1b:6a:cd:f1:01:88: 5d:e9:39:e6:56:65:50:c1:1e:d5:37:4a:ee:db:9e: d8:1e:c8:5e:87:ae:f8:b0:24:9d:64:75:b3:30:d7: 15:e8:b2:86:95:06:91:3f:d3:c1:39:0f:28:78:cc: 34:58:39:20:55:87:54:7b:3c:4c:44:24:c1:6e:40: bc:44:5a:2f:f3:00:82:6a:9b:26:2f:62:07:30:44: 3e:99:ef:e1:5f:08:9c:c7:5e:cd:e9:e7:1d:5e:e8: 09:07:90:94:a6:7c:ce:e0:de:11:1d:a6:2b:e8:63: ae:03:5f:13:46:2a:03:2f:1d:79:5e:6d:f0:c0:43: 60:a9:de:1a:e8:d8:cf:56:3c:bd:1f:24:74:cb:ea: 90:93:14:bd:b1:98:7a:f4:db:2a:eb:af:2c:d9:dc: cc:68:de:3a:0a:6a:c8:53:70:0d:57:94:b1:6f:51: 99:ca:b3:5d:88:72:ac:49:36:2d:a5:7f:90:63:4e: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0A:1B:FF:99:08:60:75:B6:6F:6D:BE:E1:2A:C3:86:DE:E0:E0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/a3cdaf22-fa27-38fe-955b-f9f075407d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 204.199.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a2:f2:92:c3:86:ed:e3:6e:37:95:11:8e:0d:17:fe:b1:62: f5:a6:78:15:ba:88:bb:ac:9f:fa:3e:a5:6f:32:0c:e1:f6:3d: a5:b1:d9:81:bc:63:d6:b3:66:96:03:86:8c:4a:1d:3b:51:49: 37:5f:d5:9f:85:d0:02:7f:19:db:34:a4:79:62:6b:57:80:ba: 6f:23:08:9e:aa:b9:7b:1a:e5:e7:91:77:4d:98:b5:d5:6f:7a: fe:97:38:33:38:04:bb:5c:c9:0a:48:86:db:3f:1b:2c:54:9d: 09:8f:c8:11:67:dc:44:52:c6:28:b8:e6:49:2a:98:23:12:65: 33:91:e0:f1:2f:93:4f:9f:1a:3d:b7:9a:84:bd:ad:cc:87:98: 8a:2b:8f:ef:2d:e2:bc:65:2b:de:3b:1d:58:2b:b2:04:b6:18: 7d:e7:68:33:cb:6a:77:a3:b6:8d:ee:ad:cc:4f:1a:00:5a:67: 20:7c:a7:e2:dc:e4:7b:3a:ad:3e:58:74:e3:f7:46:58:e7:df: 91:69:ca:04:1f:09:68:2c:51:8a:5d:61:cc:ef:66:74:fe:c7: 80:5e:ae:82:bd:be:2a:8e:e7:c7:fc:8c:d6:1a:15:93:2d:2b: 7f:f2:9a:bb:18:88:60:4a:85:f8:26:9b:8d:de:f6:74:dc:31: b6:d2:0a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/i1UXJHYAZ+MbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDhlZDIxNzctNDE5Ny00YTc4LWI3ZGMtMDFhNmE5Mzk2Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3R4RsOW6DdJHuYhKw9uUXj1yZna7bC94om7 A9sehr8vsqmpoMjO7Blvuwu49JoopTYWXJZowgWhRrYgHOfRGgh0vOIbas3xAYhd 6TnmVmVQwR7VN0ru257YHsheh674sCSdZHWzMNcV6LKGlQaRP9PBOQ8oeMw0WDkg VYdUezxMRCTBbkC8RFov8wCCapsmL2IHMEQ+me/hXwicx17N6ecdXugJB5CUpnzO 4N4RHaYr6GOuA18TRioDLx15Xm3wwENgqd4a6NjPVjy9HyR0y+qQkxS9sZh69Nsq 668s2dzMaN46CmrIU3ANV5Sxb1GZyrNdiHKsSTYtpX+QY07DtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcKG/+ZCGB1tm9tvuEqw4be4ODHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvYTNjZGFmMjItZmEyNy0z OGZlLTk1NWItZjlmMDc1NDA3ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMfDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmi8pLDhu3jbjeVEY4NF/6xYvWmeBW6iLusn/o+pW8yDOH2PaWx2YG8 Y9azZpYDhoxKHTtRSTdf1Z+F0AJ/Gds0pHlia1eAum8jCJ6quXsa5eeRd02YtdVv ev6XODM4BLtcyQpIhts/GyxUnQmPyBFn3ERSxii45kkqmCMSZTOR4PEvk0+fGj23 moS9rcyHmIorj+8t4rxlK947HVgrsgS2GH3naDPLanejto3urcxPGgBaZyB8p+Lc 5Hs6rT5YdOP3Rljn35FpygQfCWgsUYpdYczvZnT+x4BeroK9viqO58f8jNYaFZMt K3/ymrsYiGBKhfgmm43e9nTcMbbSClk= -----END CERTIFICATE-----Generated at Sat Sep 26 04:30:28 2026 by rpki-client