$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/88489fd1-70a2-3320-a207-c4d855ba4061.roa File: 88489fd1-70a2-3320-a207-c4d855ba4061.roa (raw, json) Hash identifier: SZSopCtPEZOl3qZ2QfFKNDvE5TRRQjuaZGgCLH7Vl6c= Subject key identifier: C3:27:E4:7B:BE:70:14:46:ED:8F:AD:CF:76:09:89:C1:53:27:AE:3D Certificate issuer: /CN=f729fc58-80cc-4645-bde5-79b3fcca33c3 Certificate serial: 010D0C9F4328584F49728D3AC3EC54710F8FD980 Authority key identifier: DD:A2:E9:5D:2C:22:69:3A:1A:C7:DF:18:7E:66:86:E8:12:98:24:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/88489fd1-70a2-3320-a207-c4d855ba4061.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 204.16.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/f729fc58-80cc-4645-bde5-79b3fcca33c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/f729fc58-80cc-4645-bde5-79b3fcca33c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:8d:3a:c3:ec:54:71:0f:8f:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f729fc58-80cc-4645-bde5-79b3fcca33c3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fadb65a9-1eb9-409c-b2d7-d51a50b9daa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:16:79:e1:d2:3c:01:5f:68:e1:4e:74:57: fa:b9:35:09:a7:3f:00:61:f3:40:d9:28:06:be:04: 58:9b:af:85:2e:32:ea:14:a9:5a:b7:59:30:7f:03: 77:27:bc:a7:20:18:80:10:33:ee:26:a2:44:2f:6b: 19:92:26:03:c1:f7:3d:de:65:fe:51:bc:9b:f7:39: 8d:0c:3f:c4:45:27:fe:56:b5:a6:9a:6d:25:20:1c: f1:50:4f:4c:4d:2d:01:b2:a5:5c:98:be:54:59:c8: a6:ca:a2:84:bb:08:ef:2a:dd:25:5e:05:86:e6:30: 3a:6f:dc:ac:6b:1b:d8:6d:97:e5:8b:c3:bd:33:3a: 49:d6:90:07:1d:93:9a:c9:13:5d:99:46:00:f9:ea: 04:f3:4b:fe:3c:51:88:16:04:01:a7:8a:6f:26:92: 2b:82:e0:af:f7:ac:4d:e0:52:10:ea:0e:15:32:cc: 15:83:45:ac:c3:55:5a:6e:97:60:4f:1d:78:1f:c1: e2:6c:6f:c9:ca:aa:ed:87:8c:03:b1:c2:b9:9e:3d: dc:c0:db:7b:7c:73:1b:86:77:78:71:73:ee:48:30: 75:7b:cf:5d:2a:1c:17:26:b3:3b:44:67:66:59:51: c4:97:d2:78:ab:e2:c1:e2:98:d0:d4:e6:8f:42:03: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:27:E4:7B:BE:70:14:46:ED:8F:AD:CF:76:09:89:C1:53:27:AE:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/88489fd1-70a2-3320-a207-c4d855ba4061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3/f729fc58-80cc-4645-bde5-79b3fcca33c3.crl X509v3 Authority Key Identifier: keyid:DD:A2:E9:5D:2C:22:69:3A:1A:C7:DF:18:7E:66:86:E8:12:98:24:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f729fc58-80cc-4645-bde5-79b3fcca33c3.cer sbgp-ipAddrBlock: critical IPv4: 204.16.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:69:14:f9:e8:b5:0d:d1:ee:88:4c:e0:a0:42:2a:72:ee:bb: e1:e3:f8:ea:e2:e1:95:5b:d2:d3:34:c4:12:5c:2b:c7:1c:c7: fc:30:15:ce:ac:97:d0:24:0b:f5:e1:4a:64:61:f9:18:5a:68: 45:e9:60:d7:94:fd:f9:b8:37:6f:af:6e:b5:17:5a:d2:c0:53: fa:11:05:f2:7f:60:23:08:cb:13:3d:57:16:7e:b1:23:bc:c6: 46:bd:3e:eb:5a:81:45:b4:73:f4:1e:a6:d2:3e:c0:fc:88:f0: 0a:a5:71:ec:4a:88:a1:0f:a2:52:37:9a:14:e4:2e:dc:bf:cf: 84:a0:d9:a1:bc:46:a4:1c:50:1f:2b:ba:87:15:31:ad:85:ea: 0d:91:a9:b9:67:47:2f:a9:31:78:bb:38:ed:12:8b:e8:de:19: 1b:41:e6:e2:5a:8d:8d:78:fa:73:67:61:a5:9c:0a:3a:51:a5: 64:42:e3:96:4a:25:78:36:8c:8b:48:f0:4b:3b:c0:d2:ad:6a: f8:85:df:1e:6c:e5:44:4e:e7:dc:07:60:99:e7:7c:39:4a:5e: bd:9b:7c:34:20:05:77:7a:2c:1b:00:77:fb:73:ac:64:73:4f: d3:42:81:59:c9:d0:b0:8b:91:d7:34:db:fd:b9:89:8f:fc:7c: a4:ee:5d:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jco06w+xUcQ+P2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcyOWZjNTgtODBjYy00NjQ1LWJkZTUtNzliM2ZjY2Ez M2MzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmFkYjY1YTktMWViOS00MDljLWIyZDctZDUxYTUwYjlkYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssMWeeHSPAFfaOFOdFf6uTUJpz8AYfNA2SgG vgRYm6+FLjLqFKlat1kwfwN3J7ynIBiAEDPuJqJEL2sZkiYDwfc93mX+Ubyb9zmN DD/ERSf+VrWmmm0lIBzxUE9MTS0BsqVcmL5UWcimyqKEuwjvKt0lXgWG5jA6b9ys axvYbZfli8O9MzpJ1pAHHZOayRNdmUYA+eoE80v+PFGIFgQBp4pvJpIrguCv96xN 4FIQ6g4VMswVg0Wsw1VabpdgTx14H8HibG/Jyqrth4wDscK5nj3cwNt7fHMbhnd4 cXPuSDB1e89dKhwXJrM7RGdmWVHEl9J4q+LB4pjQ1OaPQgMaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMn5Hu+cBRG7Y+tz3YJicFTJ649MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNzI5 ZmM1OC04MGNjLTQ2NDUtYmRlNS03OWIzZmNjYTMzYzMvODg0ODlmZDEtNzBhMi0z MzIwLWEyMDctYzRkODU1YmE0MDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjcyOWZjNTgtODBjYy00NjQ1LWJk ZTUtNzliM2ZjY2EzM2MzL2Y3MjlmYzU4LTgwY2MtNDY0NS1iZGU1LTc5YjNmY2Nh MzNjMy5jcmwwHwYDVR0jBBgwFoAU3aLpXSwiaToax98YfmaG6BKYJEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNzI5ZmM1OC04MGNjLTQ2NDUtYmRlNS03OWIz ZmNjYTMzYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFpFPnotQ3R7ohM4KBCKnLuu+Hj+Ori4ZVb0tM0xBJcK8ccx/wwFc6s l9AkC/XhSmRh+RhaaEXpYNeU/fm4N2+vbrUXWtLAU/oRBfJ/YCMIyxM9VxZ+sSO8 xka9PutagUW0c/QeptI+wPyI8AqlcexKiKEPolI3mhTkLty/z4Sg2aG8RqQcUB8r uocVMa2F6g2RqblnRy+pMXi7OO0Si+jeGRtB5uJajY14+nNnYaWcCjpRpWRC45ZK JXg2jItI8Es7wNKtaviF3x5s5URO59wHYJnnfDlKXr2bfDQgBXd6LBsAd/tzrGRz T9NCgVnJ0LCLkdc02/25iY/8fKTuXcw= -----END CERTIFICATE-----Generated at Sat Sep 26 05:46:05 2026 by rpki-client