$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa File: 3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa (raw, json) Hash identifier: EolHVOU5oe+GrXT0p2DUQ+FROxYQNL9pEtHjjLIPcyg= Subject key identifier: 1E:A8:57:01:A1:67:C8:E2:71:56:21:20:41:CD:E0:C8:41:71:7B:1E Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584F4C3D78528945D0E6033FDE40 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 33322 IP address blocks: 204.16.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:78:52:89:45:d0:e6:03:3f:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8820ea3e-440f-4d9f-8942-0b0d283b78d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:2b:71:97:20:cd:79:de:f5:56:1e:de:ff: e8:96:79:5c:50:6d:7f:a5:16:fe:07:51:6c:62:d9: b8:b5:04:e2:4e:3a:25:51:af:d6:a3:93:41:de:9a: 35:ec:3b:04:df:38:e9:4b:7a:82:8f:18:dd:93:74: 06:bd:8e:39:3a:9f:47:91:d6:99:56:c9:69:42:64: 6d:c8:e8:c4:5b:e1:87:a5:16:a8:55:75:7f:dc:21: 49:d3:86:8f:9e:8f:29:9b:b6:4d:af:fd:c5:76:10: 0d:61:00:46:db:20:58:a9:52:9e:9c:69:15:c3:7e: de:1e:3b:a0:c8:91:a1:45:c1:e6:f7:76:73:96:a4: 05:a4:36:ab:39:24:66:f9:c2:5b:86:71:96:2b:8e: e1:b7:02:a1:9a:e7:63:99:b3:f4:0b:05:bb:e4:0c: 73:d4:1d:46:a1:4d:2d:5d:6e:40:0a:75:7f:93:a4: 54:23:f2:55:4f:78:69:22:06:20:7c:8d:50:2e:2d: 00:c7:8a:84:05:2d:11:df:c7:50:08:8b:eb:86:7f: f0:ff:c0:5c:94:9d:37:a9:1b:8e:2d:6d:fc:f2:8d: ed:a6:79:40:84:d6:4b:8e:8a:cb:3a:73:03:96:4d: 83:5a:37:e6:c6:11:d0:c7:d8:c0:af:8e:50:9a:cb: 57:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A8:57:01:A1:67:C8:E2:71:56:21:20:41:CD:E0:C8:41:71:7B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.16.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a1:fc:fa:d4:c7:d7:c1:c1:f2:4d:0e:94:0a:3d:92:91:0b: cb:e4:3f:01:39:c7:46:5f:1d:57:06:28:b7:b1:fc:fe:1b:ac: 73:f7:69:43:5f:6e:58:79:e6:b4:f8:03:ff:04:5d:cf:37:a6: 27:8d:29:96:a5:0b:e0:e6:de:eb:be:c0:2d:2c:62:f4:8b:ec: 05:08:bd:ff:12:31:66:6e:89:d2:2c:a0:0e:47:85:a6:31:ad: 95:0f:69:a3:58:33:fc:10:b2:7d:5e:84:20:ec:ed:9a:47:55: cb:35:8e:33:9a:da:a8:48:75:53:cd:ac:ea:60:09:72:6f:f5: 77:51:e3:f2:41:87:69:1e:55:ec:59:1c:a7:0b:73:32:36:ba: 94:a0:f3:77:8e:95:de:12:9a:33:8b:3f:39:e1:91:1b:12:4f: 10:90:53:20:a8:5e:9f:e2:86:da:89:66:8b:95:fc:76:ef:00: b9:85:cb:d3:83:1f:37:61:e2:aa:fe:ff:de:72:24:3e:a3:1c: 05:bd:19:f1:4e:10:f5:23:b9:b1:ca:9d:b2:5e:db:25:2c:68: 30:f1:53:ff:22:16:7d:d3:7c:d9:08:5f:47:96:0e:18:28:6a: 44:79:3d:b1:74:39:07:21:03:d1:1e:15:34:36:99:04:57:ce: c5:9e:b9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXhSiUXQ5gM/3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODgyMGVhM2UtNDQwZi00ZDlmLTg5NDItMGIwZDI4M2I3OGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2wrcZcgzXne9VYe3v/olnlcUG1/pRb+B1Fs Ytm4tQTiTjolUa/Wo5NB3po17DsE3zjpS3qCjxjdk3QGvY45Op9HkdaZVslpQmRt yOjEW+GHpRaoVXV/3CFJ04aPno8pm7ZNr/3FdhANYQBG2yBYqVKenGkVw37eHjug yJGhRcHm93ZzlqQFpDarOSRm+cJbhnGWK47htwKhmudjmbP0CwW75Axz1B1GoU0t XW5ACnV/k6RUI/JVT3hpIgYgfI1QLi0Ax4qEBS0R38dQCIvrhn/w/8BclJ03qRuO LW388o3tpnlAhNZLjorLOnMDlk2DWjfmxhHQx9jAr45QmstXQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6oVwGhZ8jicVYhIEHN4MhBcXseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvM2Q0NThiMTAtMDBkOC0z ZjAwLWEwYzctMmZjNmM5ZGUzMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOh/PrUx9fBwfJNDpQKPZKRC8vkPwE5x0ZfHVcGKLex/P4brHP3aUNf blh55rT4A/8EXc83pieNKZalC+Dm3uu+wC0sYvSL7AUIvf8SMWZuidIsoA5HhaYx rZUPaaNYM/wQsn1ehCDs7ZpHVcs1jjOa2qhIdVPNrOpgCXJv9XdR4/JBh2keVexZ HKcLczI2upSg83eOld4SmjOLPznhkRsSTxCQUyCoXp/ihtqJZouV/HbvALmFy9OD Hzdh4qr+/95yJD6jHAW9GfFOEPUjubHKnbJe2yUsaDDxU/8iFn3TfNkIX0eWDhgo akR5PbF0OQchA9EeFTQ2mQRXzsWeuS0= -----END CERTIFICATE-----Generated at Sun Oct 4 13:44:56 2026 by rpki-client