$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa File: 8a599c8a-6f69-352a-9eff-d9583500ded1.roa (raw, json) Hash identifier: LkzMZNNeKFeNMLIZ5S2AxUB+Km9UUtzSOSNTBmWwylk= Subject key identifier: AF:A9:5E:3C:B1:14:17:DB:12:19:40:42:BA:13:BC:12:C0:63:42:D2 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584F4F0819CB212BA0529879A800 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 33322 IP address blocks: 204.10.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:19:cb:21:2b:a0:52:98:79:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=bef1a12a-5fb6-4092-b8a5-8203b8261f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:2c:bd:3d:cc:a6:f1:f1:8d:38:26:00:b2: 44:bc:91:c3:5b:a1:e4:03:a5:2a:16:0a:d4:11:52: 7a:b2:7f:72:90:bd:23:7f:2b:6e:eb:00:bf:80:d7: bd:cc:c0:81:bb:0c:29:52:eb:9f:98:e3:15:32:df: d8:4a:f5:7a:be:3e:85:f1:94:d5:30:a0:c0:4e:be: 74:35:4b:ca:6c:d9:aa:ca:55:01:90:d5:34:ab:86: 90:a7:64:6e:36:54:3a:cb:97:15:e1:4b:f3:c2:08: d9:0f:fd:5f:5f:31:e4:1e:df:73:c3:91:c9:62:0b: 66:19:41:11:e0:f3:66:bb:0b:90:62:30:47:4a:0e: fa:57:2e:fe:ce:34:d3:36:57:32:56:bd:e5:c2:33: 6a:6e:f4:e7:5b:1e:0a:16:d2:96:98:d7:5a:31:67: 5a:42:d9:89:47:25:46:6a:c6:0d:5e:3a:2f:23:53: 77:51:80:a4:a3:bc:27:be:52:2c:70:4e:27:20:af: d3:dc:d1:c6:c2:c1:86:0e:18:22:bf:e5:99:1f:db: 9a:93:20:ba:c5:01:4f:93:fd:e4:df:70:f5:9e:fd: 10:be:82:42:68:fd:74:e6:d2:66:e5:a6:02:c0:e5: ca:62:36:84:ef:66:9f:dd:4a:c5:8e:f8:70:5e:1f: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A9:5E:3C:B1:14:17:DB:12:19:40:42:BA:13:BC:12:C0:63:42:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.10.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:08:a8:cb:98:f3:36:a7:c7:ce:a7:62:32:c6:c2:72:eb:fa: d8:3b:ff:57:83:40:e0:20:79:e4:2f:41:bb:61:df:38:ad:73: b9:7a:9e:3e:c5:57:fd:3f:6f:56:99:6c:67:f7:a9:8b:07:78: 76:6b:0d:52:95:be:73:0a:c7:ce:2f:fc:10:4f:cf:7e:12:98: 39:cf:78:81:13:e7:bc:54:36:33:81:af:d0:8a:9d:ff:88:ec: 56:0e:e3:89:c3:43:9b:58:2b:6a:3b:4d:08:1d:41:42:9a:fe: a5:f4:96:2d:97:5e:e4:c1:fb:55:6e:ec:9c:db:d0:23:a4:d9: 7c:c4:55:bb:3a:c5:4b:fa:bf:9e:79:12:98:3d:a6:1c:05:4b: f6:11:69:a4:35:d8:1b:dc:07:9f:72:9e:d1:96:10:35:f8:0f: 57:72:0d:3f:94:cd:21:96:d4:fc:77:61:da:da:0e:4e:73:ac: c3:13:53:ec:a7:38:77:87:35:cd:cb:84:20:09:fb:d8:9a:77: 64:b9:8b:2d:c1:c3:7f:db:f0:e9:8f:16:aa:f5:02:84:d5:19: 32:30:98:db:12:08:cc:f1:1f:ae:51:0b:0b:d1:96:03:23:c7: 5c:71:e3:8e:7a:a7:fc:0d:76:ac:cd:4a:2b:dd:16:48:26:70: d9:05:30:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBnLISugUph5qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YmVmMWExMmEtNWZiNi00MDkyLWI4YTUtODIwM2I4MjYxZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ssvT3MpvHxjTgmALJEvJHDW6HkA6UqFgrU EVJ6sn9ykL0jfytu6wC/gNe9zMCBuwwpUuufmOMVMt/YSvV6vj6F8ZTVMKDATr50 NUvKbNmqylUBkNU0q4aQp2RuNlQ6y5cV4UvzwgjZD/1fXzHkHt9zw5HJYgtmGUER 4PNmuwuQYjBHSg76Vy7+zjTTNlcyVr3lwjNqbvTnWx4KFtKWmNdaMWdaQtmJRyVG asYNXjovI1N3UYCko7wnvlIscE4nIK/T3NHGwsGGDhgiv+WZH9uakyC6xQFPk/3k 33D1nv0QvoJCaP105tJm5aYCwOXKYjaE72af3UrFjvhwXh/fBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+pXjyxFBfbEhlAQroTvBLAY0LSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOGE1OTljOGEtNmY2OS0z NTJhLTllZmYtZDk1ODM1MDBkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUIqMuY8zanx86nYjLGwnLr+tg7/1eDQOAgeeQvQbth3zitc7l6nj7F V/0/b1aZbGf3qYsHeHZrDVKVvnMKx84v/BBPz34SmDnPeIET57xUNjOBr9CKnf+I 7FYO44nDQ5tYK2o7TQgdQUKa/qX0li2XXuTB+1Vu7Jzb0COk2XzEVbs6xUv6v555 Epg9phwFS/YRaaQ12BvcB59yntGWEDX4D1dyDT+UzSGW1Px3YdraDk5zrMMTU+yn OHeHNc3LhCAJ+9iad2S5iy3Bw3/b8OmPFqr1AoTVGTIwmNsSCMzxH65RCwvRlgMj x1xx4456p/wNdqzNSivdFkgmcNkFMNM= -----END CERTIFICATE-----Generated at Sun Oct 4 23:06:35 2026 by rpki-client