$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa File: 60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa (raw, json) Hash identifier: mypqU53xBrMXvOWxN8D0o2DkuA/I/qwP6Bjc2gxXFKk= Subject key identifier: 43:4A:9B:9F:A1:46:8F:E0:44:1E:F6:5B:0F:55:75:54:0A:2E:0A:2B Certificate issuer: /CN=625741fb-b66a-49be-918d-1b4752e68175 Certificate serial: 010D0C9F4328584F4973DCC82289822135F81900 Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15038 IP address blocks: 204.9.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:dc:c8:22:89:82:21:35:f8:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8138e663-6081-4bff-9f60-bdfc5623172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:73:3a:ff:28:7c:6c:93:26:0d:5e:89:cc: ea:53:06:32:7b:61:b9:b4:26:74:d9:f8:d8:83:3f: a1:7a:4c:da:e2:e6:d2:00:f7:9b:47:72:cb:b2:a6: c8:af:ec:12:09:a1:8c:10:78:9d:3f:96:c4:e3:a4: ad:48:c2:b8:64:9b:67:e7:81:f6:11:c1:4d:79:8a: bc:ae:5c:ca:65:a8:fc:30:91:3b:96:43:13:6f:39: 80:74:8d:7c:40:32:9c:ce:62:2e:24:50:99:e9:b0: 33:5d:11:ed:e8:a4:60:48:4d:eb:fd:fc:ef:f2:f4: f7:c0:97:05:44:5f:8e:20:89:c5:62:c5:8a:2e:96: 25:43:b7:38:8f:d5:16:55:f7:f4:db:06:d1:78:b5: 7d:e0:1e:8e:c7:72:cb:38:84:bb:f9:f3:bd:4e:54: 94:a6:38:24:80:1f:95:8e:45:96:96:58:af:5b:01: c8:2f:85:57:24:8e:00:7b:f1:64:fa:d9:71:0e:25: 1b:61:a4:ba:a6:bc:e1:08:4f:a2:32:23:90:f9:ec: 8e:24:ae:f3:6f:84:51:a1:8e:b7:0d:13:9d:9e:2e: dc:70:55:24:c8:e6:da:ce:de:d0:27:10:ca:3d:55: 76:d2:3a:23:c9:32:81:be:e0:a1:83:a6:54:f0:b3: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4A:9B:9F:A1:46:8F:E0:44:1E:F6:5B:0F:55:75:54:0A:2E:0A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/60217023-5d43-3f9a-b9a4-c4b8c526c0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl X509v3 Authority Key Identifier: keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer sbgp-ipAddrBlock: critical IPv4: 204.9.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:19:83:78:52:23:eb:c7:c3:49:88:ec:4d:d9:04:99:49:2a: a3:d2:36:f0:75:41:4a:7a:04:d5:f9:76:44:32:76:5b:fd:30: 0d:e4:72:97:c1:0f:87:be:66:c8:ef:09:95:06:50:b4:66:dc: 2d:bf:72:62:85:0a:58:c7:bd:61:b5:f9:d3:a6:d0:8a:ac:02: 7e:1c:ba:7a:e9:1a:da:91:4d:ff:48:5a:b0:e7:d8:f0:10:b1: af:1e:57:b6:b4:e3:5f:19:13:29:f6:7e:33:70:c4:bf:eb:96: 72:48:dd:a9:27:54:ad:6b:66:41:77:7e:2d:98:b2:02:53:d3: 9e:54:1a:5c:ed:89:dd:a6:5e:79:14:2e:63:20:b3:ae:1e:cb: 86:63:c7:03:bd:85:10:46:1d:a1:ab:57:78:41:16:b2:eb:37: 8e:12:fd:fb:f7:81:47:f1:e4:18:6a:8e:d3:1f:2a:8b:cb:6b: ff:b4:7c:bd:03:ac:6c:88:aa:2e:16:d6:bf:77:52:fd:3a:b2: e2:88:48:08:ff:a8:f6:42:51:bc:a4:e3:cf:7a:26:b4:81:a4: 74:d5:c4:6c:67:1f:b4:19:ae:a8:8a:b7:db:bd:97:3c:1c:ea: c2:f6:96:15:9d:18:38:4a:e0:79:7a:38:75:bc:8b:bc:10:db: 1f:2d:88:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9zIIomCITX4GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI1NzQxZmItYjY2YS00OWJlLTkxOGQtMWI0NzUyZTY4 MTc1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODEzOGU2NjMtNjA4MS00YmZmLTlmNjAtYmRmYzU2MjMxNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW5zOv8ofGyTJg1eiczqUwYye2G5tCZ02fjY gz+hekza4ubSAPebR3LLsqbIr+wSCaGMEHidP5bE46StSMK4ZJtn54H2EcFNeYq8 rlzKZaj8MJE7lkMTbzmAdI18QDKczmIuJFCZ6bAzXRHt6KRgSE3r/fzv8vT3wJcF RF+OIInFYsWKLpYlQ7c4j9UWVff02wbReLV94B6Ox3LLOIS7+fO9TlSUpjgkgB+V jkWWllivWwHIL4VXJI4Ae/Fk+tlxDiUbYaS6przhCE+iMiOQ+eyOJK7zb4RRoY63 DROdni7ccFUkyObazt7QJxDKPVV20jojyTKBvuChg6ZU8LMYhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENKm5+hRo/gRB72Ww9VdVQKLgorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MjU3 NDFmYi1iNjZhLTQ5YmUtOTE4ZC0xYjQ3NTJlNjgxNzUvNjAyMTcwMjMtNWQ0My0z ZjlhLWI5YTQtYzRiOGM1MjZjMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjI1NzQxZmItYjY2YS00OWJlLTkx OGQtMWI0NzUyZTY4MTc1LzYyNTc0MWZiLWI2NmEtNDliZS05MThkLTFiNDc1MmU2 ODE3NS5jcmwwHwYDVR0jBBgwFoAUAlK0IrCFlJsA/ZZqCvwdM/q0FFkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MjU3NDFmYi1iNjZhLTQ5YmUtOTE4ZC0xYjQ3 NTJlNjgxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoZg3hSI+vHw0mI7E3ZBJlJKqPSNvB1QUp6BNX5dkQydlv9MA3kcpfB D4e+ZsjvCZUGULRm3C2/cmKFCljHvWG1+dOm0IqsAn4cunrpGtqRTf9IWrDn2PAQ sa8eV7a0418ZEyn2fjNwxL/rlnJI3aknVK1rZkF3fi2YsgJT055UGlztid2mXnkU LmMgs64ey4ZjxwO9hRBGHaGrV3hBFrLrN44S/fv3gUfx5BhqjtMfKovLa/+0fL0D rGyIqi4W1r93Uv06suKISAj/qPZCUbyk4896JrSBpHTVxGxnH7QZrqiKt9u9lzwc 6sL2lhWdGDhK4Hl6OHW8i7wQ2x8tiJ4= -----END CERTIFICATE-----Generated at Tue Oct 6 19:36:14 2026 by rpki-client