$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa File: 1e592f07-9e8d-314e-a936-c681a7544c06.roa (raw, json) Hash identifier: c/2tLGKiDbdEmzJPKt+Yml3NoaXUeAewCICI+m8LM3A= Subject key identifier: 38:70:EB:9E:45:27:5B:2C:64:D8:E6:DE:CC:D3:72:21:6E:61:F8:CD Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F4328584F497362B1CC99F9FD98ACF8E0 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 992 IP address blocks: 204.52.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:62:b1:cc:99:f9:fd:98:ac:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce3c7e2a-e8f7-448d-9da6-4989c64d8ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:09:30:3e:c5:70:31:ac:93:23:b5:16:b9: d0:9b:2e:3a:c3:cd:f0:72:a5:52:7f:a7:15:23:d9: d2:0b:c7:b4:20:08:f0:93:f4:09:33:69:c5:66:52: 5e:78:2e:0d:9b:6f:f0:d2:f3:c7:f2:9b:81:aa:ce: c9:b8:d9:25:d6:fe:28:d0:9f:59:75:f9:18:d5:ec: 71:29:ab:cb:f3:84:08:0f:98:d6:1a:df:80:de:de: 5f:fa:a5:1b:39:15:ee:dd:a7:d9:c3:b7:fa:2b:9d: 42:5f:39:7a:f2:d8:e7:1c:42:d6:64:18:69:e6:a6: 23:a0:a7:09:72:e8:b3:a2:b5:fa:10:cb:2a:23:e7: 46:c5:c4:aa:9c:38:cf:c7:79:2d:4f:a2:f8:c1:16: 91:4c:cf:64:03:6a:50:c6:81:9b:c2:09:ba:65:50: 80:8e:71:83:20:e8:d5:2b:70:3f:92:3e:67:e5:45: a1:bd:a8:08:c0:44:41:64:2a:49:78:00:39:0c:67: 90:7c:7a:cc:d1:31:dd:c4:05:97:b3:04:d4:22:87: 1c:4e:c4:6d:6b:83:4d:aa:60:19:b5:c2:62:e6:00: 2e:25:44:bf:d0:f8:1b:f9:6d:13:f1:5e:67:10:b7: 36:12:0b:dd:bd:6e:c2:6f:cf:df:3f:b2:89:67:d9: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:70:EB:9E:45:27:5B:2C:64:D8:E6:DE:CC:D3:72:21:6E:61:F8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 204.52.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:26:8f:60:66:2b:1b:ca:66:7e:07:68:39:c5:80:ce:f6:f0: af:1f:4c:62:40:6b:58:48:b8:f1:c3:37:8a:3b:1a:48:ad:56: 13:2c:cd:9d:9a:a9:1a:0e:f6:50:2f:c0:94:9f:ba:61:50:31: ff:0f:2e:87:c5:13:3b:28:29:2e:89:a9:e5:81:a0:bf:b3:2f: 17:cf:39:f2:72:2d:61:8a:3e:23:85:64:a8:43:32:35:50:7b: 6f:0a:a4:f2:9b:f6:c8:75:a7:cc:ff:f5:53:21:a4:34:12:68: b7:05:ee:4d:4c:89:94:02:b2:da:dc:4a:a0:6d:0b:a3:cc:52: bb:f4:de:c2:22:1b:85:8d:b6:7f:56:c9:43:40:be:40:f0:50: 71:2c:40:bc:76:4c:05:73:26:92:a6:37:ca:e8:46:c0:c5:eb: ba:54:34:79:c4:6c:31:3f:d7:e2:03:18:e4:bd:e8:fc:fd:05: e9:ad:4e:d9:8c:80:b2:21:09:21:62:a1:c4:bd:dd:a9:ad:35: a3:36:ae:22:7d:8e:c5:01:2b:59:0d:ea:21:0c:bb:46:7b:9f: 82:8a:0a:9a:98:37:40:4f:97:8b:2d:ac:e9:b7:90:56:aa:b2: 8a:b8:fb:b4:b3:7e:7e:b0:49:e2:ea:1e:59:e5:08:0b:c1:92: 8c:a7:9c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2KxzJn5/Zis+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2UzYzdlMmEtZThmNy00NDhkLTlkYTYtNDk4OWM2NGQ4ZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGsJMD7FcDGskyO1FrnQmy46w83wcqVSf6cV I9nSC8e0IAjwk/QJM2nFZlJeeC4Nm2/w0vPH8puBqs7JuNkl1v4o0J9ZdfkY1exx KavL84QID5jWGt+A3t5f+qUbORXu3afZw7f6K51CXzl68tjnHELWZBhp5qYjoKcJ cuizorX6EMsqI+dGxcSqnDjPx3ktT6L4wRaRTM9kA2pQxoGbwgm6ZVCAjnGDIOjV K3A/kj5n5UWhvagIwERBZCpJeAA5DGeQfHrM0THdxAWXswTUIoccTsRta4NNqmAZ tcJi5gAuJUS/0Pgb+W0T8V5nELc2EgvdvW7Cb8/fP7KJZ9mAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhw655FJ1ssZNjm3szTciFuYfjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvMWU1OTJmMDctOWU4ZC0z MTRlLWE5MzYtYzY4MWE3NTQ0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzDTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEmj2BmKxvKZn4HaDnFgM728K8fTGJAa1hIuPHDN4o7GkitVhMszZ2a qRoO9lAvwJSfumFQMf8PLofFEzsoKS6JqeWBoL+zLxfPOfJyLWGKPiOFZKhDMjVQ e28KpPKb9sh1p8z/9VMhpDQSaLcF7k1MiZQCstrcSqBtC6PMUrv03sIiG4WNtn9W yUNAvkDwUHEsQLx2TAVzJpKmN8roRsDF67pUNHnEbDE/1+IDGOS96Pz9BemtTtmM gLIhCSFiocS93amtNaM2riJ9jsUBK1kN6iEMu0Z7n4KKCpqYN0BPl4strOm3kFaq soq4+7Szfn6wSeLqHlnlCAvBkoynnCo= -----END CERTIFICATE-----Generated at Fri Sep 25 18:31:14 2026 by rpki-client