$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa File: dcd878df-351d-3045-9ba1-a9aee88944f5.roa (raw, json) Hash identifier: irK2xXPho8kXDJj7sAXqTbzhzW0iC6VvytuTCRq1NBk= Subject key identifier: 30:84:CB:3A:AA:45:E2:3A:EC:15:D1:FC:81:06:69:E5:AA:20:FD:F5 Certificate issuer: /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Certificate serial: 010D0C9F4328584FCCC6937E043C6B02FF441E00 Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 11248 IP address blocks: 204.8.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:93:7e:04:3c:6b:02:ff:44:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=e2d78429-6dad-4eed-9da4-5011e2ba2bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:72:f3:9a:ca:eb:9f:04:eb:7b:8f:61:83: 00:3c:66:b9:a7:a9:03:c9:75:35:36:e7:3b:c0:b7: 63:b6:2e:00:d9:a2:ae:ef:42:8f:56:dd:b3:44:e6: f3:f4:ae:6e:c6:9f:ac:87:2c:cb:39:c4:0d:df:da: 45:6e:3c:11:ce:dd:82:67:ef:f8:52:b2:ca:fc:1c: 05:0f:d5:b2:73:ec:53:38:37:df:0b:ab:d2:98:7d: 89:ba:3a:8c:0a:1d:33:c7:d5:6a:ce:93:1f:aa:00: ba:62:fd:7c:5c:50:bb:38:cb:d8:9f:21:24:f2:14: 3c:7d:0c:a9:c9:d0:3b:33:c3:95:aa:5a:e2:08:af: 7c:e7:71:17:84:22:ff:5a:cd:0f:f1:86:cc:84:c0: d2:59:f8:d3:03:96:24:30:3c:88:64:2c:1b:ce:31: ec:c3:8a:54:d2:6d:e0:9c:d9:87:db:1a:3b:d1:5e: 35:6d:d2:05:23:79:48:8d:7e:1a:2d:06:10:df:96: 95:6a:d9:c0:a8:57:13:9b:2b:b9:5c:62:af:c2:55: 15:13:7b:31:c3:3e:d9:c6:c5:d3:30:36:3b:5b:4a: c8:79:57:64:13:59:71:8e:91:69:0e:53:be:bb:25: 1f:17:9f:dc:5b:f6:fe:67:70:00:2b:d9:14:e1:fa: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:84:CB:3A:AA:45:E2:3A:EC:15:D1:FC:81:06:69:E5:AA:20:FD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/dcd878df-351d-3045-9ba1-a9aee88944f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl X509v3 Authority Key Identifier: keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer sbgp-ipAddrBlock: critical IPv4: 204.8.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0b:f2:5d:23:4b:37:4d:43:11:8e:a8:c7:d0:2f:22:c1:95: 89:1c:01:42:ff:f9:86:55:05:d6:55:94:55:1c:96:34:56:b7: d6:2e:c6:97:a1:76:fc:83:7b:3d:2e:66:61:e1:80:7d:1e:71: da:03:27:6f:7f:4f:19:e5:b3:4e:dc:1c:6c:75:be:d9:46:de: 71:85:9b:40:05:4a:b5:1a:bb:d1:83:59:7e:2d:3c:a9:20:c9: 9a:c9:ea:ca:c8:1b:9c:06:92:28:df:98:6b:37:c6:29:04:aa: b3:99:46:36:2a:4c:ce:64:f0:85:bf:24:cc:9f:46:38:58:84: b0:28:6e:39:85:d6:da:ef:71:f8:aa:5a:ef:c3:b8:a5:c6:3e: 37:70:4b:32:be:38:e4:5e:8b:0a:4f:fb:9f:41:1a:ea:a0:41: f7:a1:90:1f:90:58:fc:31:de:be:9a:dd:b4:fb:c6:b4:2f:3a: 7d:27:ed:09:3f:ef:81:a1:4c:de:63:24:24:e3:ee:b2:c9:5e: 8a:46:6f:99:0b:c1:fb:a2:b2:21:81:8f:c0:4e:6a:00:85:62: 2a:e2:8f:02:b6:ec:cd:27:e9:b8:ce:5f:fb:d3:04:08:7b:d8: 0a:69:9b:e7:6f:cb:48:2d:8a:72:f6:90:fa:bf:d7:a4:67:4f: 50:c4:09:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/MxpN+BDxrAv9EHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRlZjY3OWEtYjMxNC00YWQ2LTkwYmItZjdkMmJmYzBj ZGExMB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ZTJkNzg0MjktNmRhZC00ZWVkLTlkYTQtNTAxMWUyYmEyYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv9y85rK658E63uPYYMAPGa5p6kDyXU1Nuc7 wLdjti4A2aKu70KPVt2zRObz9K5uxp+shyzLOcQN39pFbjwRzt2CZ+/4UrLK/BwF D9Wyc+xTODffC6vSmH2JujqMCh0zx9VqzpMfqgC6Yv18XFC7OMvYnyEk8hQ8fQyp ydA7M8OVqlriCK9853EXhCL/Ws0P8YbMhMDSWfjTA5YkMDyIZCwbzjHsw4pU0m3g nNmH2xo70V41bdIFI3lIjX4aLQYQ35aVatnAqFcTmyu5XGKvwlUVE3sxwz7ZxsXT MDY7W0rIeVdkE1lxjpFpDlO+uyUfF5/cW/b+Z3AAK9kU4fpumQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCEyzqqReI67BXR/IEGaeWqIP31MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVm Njc5YS1iMzE0LTRhZDYtOTBiYi1mN2QyYmZjMGNkYTEvZGNkODc4ZGYtMzUxZC0z MDQ1LTliYTEtYTlhZWU4ODk0NGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjRlZjY3OWEtYjMxNC00YWQ2LTkw YmItZjdkMmJmYzBjZGExL2I0ZWY2NzlhLWIzMTQtNGFkNi05MGJiLWY3ZDJiZmMw Y2RhMS5jcmwwHwYDVR0jBBgwFoAUHw20UM5XU32LvCw/nGuJExAZCIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNGVmNjc5YS1iMzE0LTRhZDYtOTBiYi1mN2Qy YmZjMGNkYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUL8l0jSzdNQxGOqMfQLyLBlYkcAUL/+YZVBdZVlFUcljRWt9Yuxpeh dvyDez0uZmHhgH0ecdoDJ29/Txnls07cHGx1vtlG3nGFm0AFSrUau9GDWX4tPKkg yZrJ6srIG5wGkijfmGs3xikEqrOZRjYqTM5k8IW/JMyfRjhYhLAobjmF1trvcfiq Wu/DuKXGPjdwSzK+OOReiwpP+59BGuqgQfehkB+QWPwx3r6a3bT7xrQvOn0n7Qk/ 74GhTN5jJCTj7rLJXopGb5kLwfuisiGBj8BOagCFYirijwK27M0n6bjOX/vTBAh7 2Appm+dvy0gtinL2kPq/16RnT1DECRU= -----END CERTIFICATE-----Generated at Sun Nov 15 13:29:39 2026 by rpki-client