$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa File: df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa (raw, json) Hash identifier: fiaPglKVUNeZr9HPPmRsiUZaj64QYOEmV6HxFCRPSoo= Subject key identifier: 16:4C:53:D9:6B:96:D6:BA:FA:A0:7F:51:F0:F5:E4:4F:E2:07:C2:55 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584F6292DAB8502A5BA9EC369AC0 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396952 IP address blocks: 204.238.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:da:b8:50:2a:5b:a9:ec:36:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1dade9ff-ba7d-470a-9c0f-291a245945b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ba:e3:c8:d8:6f:31:ff:70:60:c1:69:6e:ff: 21:b3:43:cb:b7:f5:fb:6b:df:45:31:38:5c:14:f5: 93:b0:fc:e4:1c:96:f3:95:ad:b6:3a:02:54:a6:a2: 4f:a0:3a:bf:61:df:77:a9:e6:88:dc:97:61:23:49: b2:a2:65:3e:b8:b9:d9:a9:0c:54:fd:14:b9:dc:d9: 00:bf:49:76:e2:00:fa:5a:c8:6a:20:5b:dc:a1:d7: 61:c5:29:e2:50:16:69:b0:b5:94:00:ba:7c:d7:34: 6c:37:58:9f:c7:3c:51:0c:81:ba:33:34:bb:71:45: 65:5f:88:b5:db:45:6f:7f:fb:04:62:6e:61:b2:6e: 34:b4:1e:9f:0c:71:ee:c5:0c:97:a5:6b:48:7a:04: e3:a2:92:87:5a:11:87:0a:d2:6e:b7:d0:cc:bd:fa: fd:85:4a:52:ec:bc:97:70:cb:2e:c0:1b:a8:ee:66: bc:df:2d:f0:60:d0:9f:96:9e:87:ed:d0:bd:c7:ea: 83:0d:6b:d8:ae:79:e8:84:e5:60:7e:8c:f0:75:ca: a7:15:29:28:2b:11:10:dd:e5:b3:ed:43:b4:1e:ed: b5:73:90:27:a4:ae:2a:ed:9d:1d:8d:50:37:31:d2: 4f:11:a3:10:c6:5e:b4:ea:a6:dc:6e:79:98:32:f9: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4C:53:D9:6B:96:D6:BA:FA:A0:7F:51:F0:F5:E4:4F:E2:07:C2:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 204.238.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:63:e9:fa:33:e7:c0:2c:3b:5f:a1:6d:e1:64:21:01:f9:1d: 61:35:77:fa:da:2f:26:7f:c7:dc:58:70:ad:98:cc:c4:87:1f: bc:79:3d:8c:36:73:6c:cb:f6:f2:6c:a0:c4:22:9e:32:c0:54: 98:21:45:63:8a:29:dd:5c:1e:73:da:0d:3c:03:44:d5:cc:7a: ed:93:85:fb:20:18:5d:fd:2e:44:68:c3:40:ff:48:bc:6b:2c: 49:58:fb:5c:47:e0:3e:ed:46:e5:1c:fd:2b:d2:bd:76:20:bc: 87:6b:32:d8:4c:b9:1d:20:16:ac:8f:ea:74:16:22:a2:0f:1f: f4:8c:c9:ad:ef:82:8a:d8:c0:0e:f0:ee:99:99:b0:69:64:14: a1:af:d3:bb:e5:4d:52:1b:ba:6d:c1:a5:c5:9b:5e:d8:81:eb: 56:1e:07:2b:a9:3f:1a:84:19:a1:21:a5:52:b5:d9:bc:70:f0: 10:74:81:43:75:cf:f4:60:a6:2d:01:0c:3c:53:dd:54:74:dc: 95:3e:24:82:1c:86:ee:09:d2:21:34:74:4b:61:08:b8:3f:e1: 82:d6:12:b2:dd:a4:99:ff:bd:70:44:aa:11:53:ac:6c:0b:29: 7f:e9:83:10:80:e9:d6:db:dc:09:63:05:f7:0f:e8:f2:44:09: 17:d0:82:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktq4UCpbqew2msAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWRhZGU5ZmYtYmE3ZC00NzBhLTljMGYtMjkxYTI0NTk0NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbrjyNhvMf9wYMFpbv8hs0PLt/X7a99FMThc FPWTsPzkHJbzla22OgJUpqJPoDq/Yd93qeaI3JdhI0myomU+uLnZqQxU/RS53NkA v0l24gD6WshqIFvcoddhxSniUBZpsLWUALp81zRsN1ifxzxRDIG6MzS7cUVlX4i1 20Vvf/sEYm5hsm40tB6fDHHuxQyXpWtIegTjopKHWhGHCtJut9DMvfr9hUpS7LyX cMsuwBuo7ma83y3wYNCflp6H7dC9x+qDDWvYrnnohOVgfozwdcqnFSkoKxEQ3eWz 7UO0Hu21c5AnpK4q7Z0djVA3MdJPEaMQxl606qbcbnmYMvkPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZMU9lrlta6+qB/UfD15E/iB8JVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvZGYzN2NjOGYtY2E2My0z M2RkLTllOTYtMzRiZDJjZDMxMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFj6foz58AsO1+hbeFkIQH5HWE1d/raLyZ/x9xYcK2YzMSHH7x5PYw2 c2zL9vJsoMQinjLAVJghRWOKKd1cHnPaDTwDRNXMeu2ThfsgGF39LkRow0D/SLxr LElY+1xH4D7tRuUc/SvSvXYgvIdrMthMuR0gFqyP6nQWIqIPH/SMya3vgorYwA7w 7pmZsGlkFKGv07vlTVIbum3BpcWbXtiB61YeByupPxqEGaEhpVK12bxw8BB0gUN1 z/Rgpi0BDDxT3VR03JU+JIIchu4J0iE0dEthCLg/4YLWErLdpJn/vXBEqhFTrGwL KX/pgxCA6dbb3AljBfcP6PJECRfQgmk= -----END CERTIFICATE-----Generated at Mon Oct 12 03:59:57 2026 by rpki-client