$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json) Hash identifier: I6zYpaMWOYR99oSQDCMqERB3s5pjQJwOUDl1s94E8wc= Subject key identifier: CF:3F:1C:6F:21:F2:A6:92:65:B6:1E:01:16:CC:0F:F8:52:81:41:41 Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Certificate serial: 010D0C9F4328584F4976FA6A701031B494CEDE80 Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18612 IP address blocks: 204.14.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:fa:6a:70:10:31:b4:94:ce:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c29fec4c-496a-4ba4-a08c-2b596c03c4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:78:9f:e7:cc:fc:31:c6:a1:f8:88:4b:fb: 90:5b:0c:3d:f5:9b:c0:9f:18:df:ba:ab:40:45:d2: bd:cb:9f:bd:bf:52:e3:f7:2c:e1:4a:2a:fb:68:6e: 6b:40:31:0f:92:61:20:82:7e:4a:80:eb:43:43:5d: 54:6e:b2:03:e2:51:72:f0:72:1d:f0:61:64:b5:dd: 7a:6d:a4:3c:ca:76:3d:ef:31:61:4f:7f:1a:b6:0c: 15:57:f8:e3:f5:e0:a9:7c:89:8d:3b:05:fe:8c:18: da:8c:45:8c:ce:3b:b8:86:aa:07:1c:7f:97:76:64: 63:8e:4e:78:c0:74:85:20:ec:ef:0d:7d:ec:ed:fc: 5d:29:d3:2c:6d:1b:fc:a6:72:a2:38:7a:1d:b6:07: 30:fa:4a:c6:e2:c5:03:b9:5b:f1:7f:bc:15:e8:1b: 01:04:d0:6f:2a:6e:17:b4:dd:9e:b4:c3:59:bb:82: cb:f1:db:2d:10:76:5b:2e:7b:15:02:60:e8:4e:71: 68:92:8e:48:00:d9:09:2d:72:ae:17:5e:50:07:06: 9f:2f:36:cb:f4:1d:d8:16:9e:ef:ba:67:7f:b9:f5: 35:5b:ac:13:2b:d1:9b:09:14:e5:29:e0:d5:e2:01: be:d9:e6:28:3f:e1:b8:b5:dd:b5:b0:96:a2:78:7d: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3F:1C:6F:21:F2:A6:92:65:B6:1E:01:16:CC:0F:F8:52:81:41:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl X509v3 Authority Key Identifier: keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer sbgp-ipAddrBlock: critical IPv4: 204.14.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:23:79:33:51:04:82:b5:b5:e5:33:a3:0b:0f:a1:63:75:66: 82:f7:12:51:4e:8e:1e:cf:b7:2e:c2:4e:d6:7d:75:ba:13:04: 7b:a8:1b:6a:01:01:76:34:98:08:53:7a:25:c2:df:0c:fd:59: 92:6c:7c:16:35:d5:c7:70:6c:e4:37:7e:60:6f:29:4b:d7:d3: 73:b8:34:08:12:ad:d8:ea:ae:6b:56:6a:60:8d:89:bb:29:98: 82:20:8c:56:ff:79:2d:3d:4a:a2:83:21:54:28:dc:49:55:f4: d9:a9:b1:83:e0:4b:f5:9d:5e:a6:76:04:9b:4d:13:0e:58:b4: fb:36:32:fa:ee:a6:ce:5f:b2:d0:e2:bd:ba:9d:38:cf:79:e9: 9e:8d:f7:cd:14:6b:3c:c0:5b:35:2c:d1:5c:0f:40:fe:fe:6f: ef:94:74:7e:1c:f3:a2:37:26:f7:8f:0c:6e:b1:63:0f:df:20: 38:4f:64:88:b3:f8:fe:6c:ef:d7:51:93:ca:8f:5d:cb:fa:cb: 14:83:83:2b:88:c3:1c:cd:b4:26:87:f3:f1:1c:61:30:55:67: ed:98:06:1e:df:88:e4:b2:58:1d:55:f5:8f:77:64:4e:31:31: be:4d:34:d8:82:c6:1e:97:26:49:c8:17:1a:4e:94:35:c6:19: 06:50:3c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdvpqcBAxtJTO3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMDhlNWMtNzllNC00Njk3LWEwMmUtZjM3ZWEyZGIy ODljMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzI5ZmVjNGMtNDk2YS00YmE0LWEwOGMtMmI1OTZjMDNjNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoF4n+fM/DHGofiIS/uQWww99ZvAnxjfuqtA RdK9y5+9v1Lj9yzhSir7aG5rQDEPkmEggn5KgOtDQ11UbrID4lFy8HId8GFktd16 baQ8ynY97zFhT38atgwVV/jj9eCpfImNOwX+jBjajEWMzju4hqoHHH+XdmRjjk54 wHSFIOzvDX3s7fxdKdMsbRv8pnKiOHodtgcw+krG4sUDuVvxf7wV6BsBBNBvKm4X tN2etMNZu4LL8dstEHZbLnsVAmDoTnFoko5IANkJLXKuF15QBwafLzbL9B3YFp7v umd/ufU1W6wTK9GbCRTlKeDV4gG+2eYoP+G4td21sJaieH3jIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8/HG8h8qaSZbYeARbMD/hSgUFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWQw OGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdlYTJkYjI4OWMvZDc3ZjFhOWQtMTUwNC0z N2JlLTk3OWEtN2I2ZTNjZWQ4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFkMDhlNWMtNzllNC00Njk3LWEw MmUtZjM3ZWEyZGIyODljLzYxZDA4ZTVjLTc5ZTQtNDY5Ny1hMDJlLWYzN2VhMmRi Mjg5Yy5jcmwwHwYDVR0jBBgwFoAUIl1mkAJyYRWljfPscpZzsqSMpdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWQwOGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdl YTJkYjI4OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkjeTNRBIK1teUzowsPoWN1ZoL3ElFOjh7Pty7CTtZ9dboTBHuoG2oB AXY0mAhTeiXC3wz9WZJsfBY11cdwbOQ3fmBvKUvX03O4NAgSrdjqrmtWamCNibsp mIIgjFb/eS09SqKDIVQo3ElV9NmpsYPgS/WdXqZ2BJtNEw5YtPs2Mvrups5fstDi vbqdOM956Z6N980UazzAWzUs0VwPQP7+b++UdH4c86I3JvePDG6xYw/fIDhPZIiz +P5s79dRk8qPXcv6yxSDgyuIwxzNtCaH8/EcYTBVZ+2YBh7fiOSyWB1V9Y93ZE4x Mb5NNNiCxh6XJknIFxpOlDXGGQZQPFE= -----END CERTIFICATE-----Generated at Sun Sep 27 23:53:06 2026 by rpki-client