$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa File: 2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa (raw, json) Hash identifier: 7e2BGGvaSSWG7nRm4p2uUEFrQxO6Af0US6gL60lihWc= Subject key identifier: B5:ED:67:60:8D:C6:90:18:D5:51:D1:D4:3C:8E:B3:12:2C:F6:18:67 Certificate issuer: /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Certificate serial: 010D0C9F4328584FCCC6938B04E328968AC48A80 Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 11248 IP address blocks: 204.8.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:93:8b:04:e3:28:96:8a:c4:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=5b0fc381-198e-4983-bb06-bce3eebc8d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:f0:98:4c:5c:d7:62:67:4e:2d:5a:0c:5b: 82:bb:ac:59:51:1b:2c:bc:49:4e:bb:12:e4:84:d7: cc:2b:82:c2:84:6d:63:dc:49:6f:84:be:2f:ed:d1: d9:ef:8b:f2:69:7a:00:bc:be:47:38:2f:59:c9:31: a5:57:ac:c1:84:87:48:2f:de:e5:1a:59:b8:35:16: 6e:02:c0:ad:4e:1c:38:94:07:97:b6:2f:04:1d:f3: c8:65:d4:ab:3b:1d:69:c0:ec:cd:57:a2:37:0f:f6: c2:e6:31:c2:2b:03:71:ee:62:96:37:83:47:95:af: 59:2b:59:5f:41:96:5e:b2:db:5f:5b:a2:d1:39:1e: 8f:9a:3d:6f:20:3e:7e:63:a2:fd:98:e4:ec:9b:9f: 39:27:7e:46:32:ca:71:3a:ce:4f:50:10:db:b8:f0: c9:0f:e6:d8:1c:40:d2:59:e8:87:90:57:a9:f7:eb: 36:b9:7b:91:09:49:34:68:57:1c:8a:d0:f2:64:ac: 94:e1:f1:09:f8:30:3b:a1:41:2f:d6:a4:16:50:23: da:68:2f:a2:d1:cb:f7:50:9b:87:7a:00:e0:83:60: 14:bd:f8:ac:d8:1e:51:19:1b:ed:c0:aa:c1:2c:ab: f0:94:48:b8:cf:bb:6f:9f:97:b7:af:fe:15:df:d5: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:67:60:8D:C6:90:18:D5:51:D1:D4:3C:8E:B3:12:2C:F6:18:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl X509v3 Authority Key Identifier: keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer sbgp-ipAddrBlock: critical IPv4: 204.8.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:79:16:00:53:5e:c9:2d:aa:da:23:78:07:af:b8:8e:44:63: 83:57:87:22:89:9f:e8:e6:07:df:37:6f:84:2b:71:a0:ea:9f: 35:35:fc:25:c3:67:0d:bf:ff:b8:4d:28:23:dd:b0:91:34:58: 9d:69:23:56:41:21:f0:07:a1:75:01:8f:c2:55:a1:82:00:74: 90:00:01:be:8b:4f:ad:36:55:90:b7:14:1b:3a:75:e4:34:13: 38:f0:17:20:c8:67:07:c4:7d:3e:45:e6:8c:d2:4f:b9:46:19: 1b:9f:b8:9a:1b:a2:50:b2:e3:8a:a4:35:4f:d5:e2:7f:6e:9a: 89:89:50:74:f6:8d:9d:c5:1d:03:0c:cc:83:a5:19:83:1b:cf: e5:61:38:18:ee:13:c5:7a:e8:23:02:15:36:80:f8:19:59:e6: 4f:b7:23:67:c3:50:44:38:63:38:57:ca:be:b3:86:d2:fb:fb: 56:5c:f5:02:43:e0:bf:0b:6a:4e:07:e8:04:9e:a3:60:88:12: 49:1b:9a:8b:b0:7f:bc:06:69:c4:68:81:22:db:5a:99:7b:ba: f0:8c:a5:5e:da:3e:83:66:1a:5e:02:86:6c:44:54:66:2f:c2: 24:a8:92:b7:24:e3:ee:f4:62:da:49:26:1f:f3:6b:99:4a:d1: a9:8a:f0:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/MxpOLBOMolorEioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRlZjY3OWEtYjMxNC00YWQ2LTkwYmItZjdkMmJmYzBj ZGExMB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk NWIwZmMzODEtMTk4ZS00OTgzLWJiMDYtYmNlM2VlYmM4ZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZzwmExc12JnTi1aDFuCu6xZURssvElOuxLk hNfMK4LChG1j3ElvhL4v7dHZ74vyaXoAvL5HOC9ZyTGlV6zBhIdIL97lGlm4NRZu AsCtThw4lAeXti8EHfPIZdSrOx1pwOzNV6I3D/bC5jHCKwNx7mKWN4NHla9ZK1lf QZZesttfW6LROR6Pmj1vID5+Y6L9mOTsm585J35GMspxOs5PUBDbuPDJD+bYHEDS WeiHkFep9+s2uXuRCUk0aFccitDyZKyU4fEJ+DA7oUEv1qQWUCPaaC+i0cv3UJuH egDgg2AUvfis2B5RGRvtwKrBLKvwlEi4z7tvn5e3r/4V39VBhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXtZ2CNxpAY1VHR1DyOsxIs9hhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVm Njc5YS1iMzE0LTRhZDYtOTBiYi1mN2QyYmZjMGNkYTEvMmYxNzNlMjctZTFkNC0z NzI4LWIxMGMtN2NmNDQ4ZWVlN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjRlZjY3OWEtYjMxNC00YWQ2LTkw YmItZjdkMmJmYzBjZGExL2I0ZWY2NzlhLWIzMTQtNGFkNi05MGJiLWY3ZDJiZmMw Y2RhMS5jcmwwHwYDVR0jBBgwFoAUHw20UM5XU32LvCw/nGuJExAZCIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVmNjc5YS1iMzE0LTRhZDYtOTBiYi1mN2Qy YmZjMGNkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV5FgBTXsktqtojeAevuI5EY4NXhyKJn+jmB983b4QrcaDqnzU1/CXD Zw2//7hNKCPdsJE0WJ1pI1ZBIfAHoXUBj8JVoYIAdJAAAb6LT602VZC3FBs6deQ0 EzjwFyDIZwfEfT5F5ozST7lGGRufuJobolCy44qkNU/V4n9umomJUHT2jZ3FHQMM zIOlGYMbz+VhOBjuE8V66CMCFTaA+BlZ5k+3I2fDUEQ4YzhXyr6zhtL7+1Zc9QJD 4L8Lak4H6ASeo2CIEkkbmouwf7wGacRogSLbWpl7uvCMpV7aPoNmGl4ChmxEVGYv wiSokrck4+70YtpJJh/za5lK0amK8Jc= -----END CERTIFICATE-----Generated at Sun Nov 15 12:47:31 2026 by rpki-client