$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa File: caa97378-5f08-3b0d-b7e1-827ad74af39f.roa (raw, json) Hash identifier: i030BLtUzwkIdqlOEF4Gq1s2/VEtjzMUiE2HYuEW8ws= Subject key identifier: 41:BB:A9:CF:6E:12:8C:02:3B:57:36:01:7C:BC:73:6F:99:96:2C:3D Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F4328584F497754D6AC7A4E81C26B1A80 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36290 IP address blocks: 204.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:54:d6:ac:7a:4e:81:c2:6b:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec2699d3-b083-4421-ae68-2cde88905b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:ff:3b:58:83:5f:bf:20:ee:d6:91:e4:1f: 53:13:5d:32:28:84:52:44:6c:82:7c:e4:71:4c:bf: 54:62:a7:88:9e:51:f0:a8:8d:00:32:06:21:5a:79: cf:8b:9f:74:79:1b:01:25:65:83:e3:89:47:2a:69: 00:b8:20:8c:38:a5:76:aa:82:74:51:48:86:8a:89: cf:b1:1d:63:f5:6d:9f:ae:4f:b3:49:b7:20:d5:40: 34:2a:16:0e:1d:00:88:51:0e:65:96:12:71:62:81: 04:d3:fd:93:2f:1b:68:0d:64:b3:3a:c2:2e:f9:2a: 68:11:d1:dd:3e:af:d5:2f:a3:d7:66:27:62:7d:18: 36:68:6c:e7:1d:9b:ef:94:c0:29:d8:43:48:7d:58: f3:65:07:11:af:90:f8:68:90:67:13:d9:d6:7a:70: 0f:88:6e:69:a9:82:ea:94:4a:3d:2b:3d:9c:91:ec: dc:ef:9b:be:b0:25:fb:5b:53:df:9f:39:f9:dd:f0: 5b:c8:2b:57:f4:73:9a:18:e6:02:66:c1:86:dc:a1: 77:17:12:d1:07:d3:41:57:c8:50:1d:3b:e6:27:a1: 6a:bd:3b:b3:05:68:0b:31:95:26:44:c1:93:98:53: 8c:19:37:c1:0e:f9:f6:a9:db:4c:ce:66:6f:ce:b3: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:A9:CF:6E:12:8C:02:3B:57:36:01:7C:BC:73:6F:99:96:2C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:63:07:5d:a6:32:31:37:c5:d0:57:ed:27:42:19:ce:29:1a: 0e:06:9c:89:00:5e:55:43:dd:a8:a9:d2:d7:97:3f:bf:c2:f8: a5:a6:04:5e:7d:21:e6:3a:0a:af:7d:38:7d:87:88:72:59:0b: 93:35:a1:8f:a4:31:24:08:d8:bc:11:b1:54:65:ef:7f:f6:b2: 0c:3d:63:81:95:45:30:7b:ca:85:fe:38:44:84:07:db:25:e5: 76:b9:c4:55:ac:71:6c:f3:51:fb:2c:1e:d8:fe:76:32:c1:3e: f0:15:26:1b:3a:85:a3:f8:d9:c2:25:97:fc:b7:e0:ce:e2:09: dd:97:bf:94:72:8a:35:7a:cd:b2:69:6c:d1:9c:6d:8f:ca:8e: 9e:55:86:07:e9:79:c4:91:1b:52:cd:5b:e5:54:ab:aa:72:cc: d0:cd:ca:2b:2d:5d:21:52:05:82:38:a3:24:5b:ba:14:61:88: a3:57:29:33:c2:cd:90:16:a5:8b:4e:89:ea:df:4c:f9:9f:88: bc:f5:e0:f3:15:ec:70:be:27:1b:f1:02:9b:27:54:83:c5:4f: e6:89:33:a6:81:1a:fc:02:69:58:78:f8:22:c5:d3:19:17:3f: a4:f4:56:54:2a:b6:8d:f5:d1:3a:eb:f8:e4:4b:4b:0b:1f:d5: 03:6d:4c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd1TWrHpOgcJrGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWMyNjk5ZDMtYjA4My00NDIxLWFlNjgtMmNkZTg4OTA1YjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnT/O1iDX78g7taR5B9TE10yKIRSRGyCfORx TL9UYqeInlHwqI0AMgYhWnnPi590eRsBJWWD44lHKmkAuCCMOKV2qoJ0UUiGionP sR1j9W2frk+zSbcg1UA0KhYOHQCIUQ5llhJxYoEE0/2TLxtoDWSzOsIu+SpoEdHd Pq/VL6PXZidifRg2aGznHZvvlMAp2ENIfVjzZQcRr5D4aJBnE9nWenAPiG5pqYLq lEo9Kz2ckezc75u+sCX7W1Pfnzn53fBbyCtX9HOaGOYCZsGG3KF3FxLRB9NBV8hQ HTvmJ6FqvTuzBWgLMZUmRMGTmFOMGTfBDvn2qdtMzmZvzrMrXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG7qc9uEowCO1c2AXy8c2+Zliw9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvY2FhOTczNzgtNWYwOC0z YjBkLWI3ZTEtODI3YWQ3NGFmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtjB12mMjE3xdBX7SdCGc4pGg4GnIkAXlVD3aip0teXP7/C+KWmBF59 IeY6Cq99OH2HiHJZC5M1oY+kMSQI2LwRsVRl73/2sgw9Y4GVRTB7yoX+OESEB9sl 5Xa5xFWscWzzUfssHtj+djLBPvAVJhs6haP42cIll/y34M7iCd2Xv5RyijV6zbJp bNGcbY/Kjp5VhgfpecSRG1LNW+VUq6pyzNDNyistXSFSBYI4oyRbuhRhiKNXKTPC zZAWpYtOierfTPmfiLz14PMV7HC+JxvxApsnVIPFT+aJM6aBGvwCaVh4+CLF0xkX P6T0VlQqto310Trr+ORLSwsf1QNtTAs= -----END CERTIFICATE-----Generated at Sun Oct 11 06:47:24 2026 by rpki-client