$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/67fb0afd-db7a-3f5c-be13-2a1761affb5d.roa File: 67fb0afd-db7a-3f5c-be13-2a1761affb5d.roa (raw, json) Hash identifier: Hd0r3pIBcqSxNbXYsO1keF01Jx3wUruzPM0PZZBA+PM= Subject key identifier: FA:40:6A:50:A4:2D:20:EB:69:0F:C1:CA:DB:B2:7C:16:D0:BA:BC:B1 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584F67AB881A023E79E143F57700 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/67fb0afd-db7a-3f5c-be13-2a1761affb5d.roa Signing time: Mon 05 Oct 2026 20:49:19 +0000 ROA not before: Mon 05 Oct 2026 20:49:19 +0000 ROA not after: Sun 03 Jan 2027 21:49:19 +0000 asID: 46733 IP address blocks: 204.209.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:ab:88:1a:02:3e:79:e1:43:f5:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Oct 5 20:49:19 2026 GMT Not After : Jan 3 21:49:19 2027 GMT Subject: CN=a27ddafa-31f2-482c-8e7d-5d035442ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:43:8e:d1:c5:d5:0f:88:36:3b:35:6c:8b: 87:2c:9e:d0:ec:5c:9d:0f:d0:d1:26:75:8d:95:fb: 1f:e5:4c:3b:3e:eb:49:aa:a9:b3:27:26:2f:c5:36: 50:59:26:17:b4:29:ac:3e:35:93:df:cd:4d:24:71: e0:e8:21:02:a4:4a:39:62:0c:4e:c1:78:bb:52:fa: db:76:2d:f3:f6:52:20:51:75:8c:d0:56:ce:fe:8a: 45:3e:68:1c:84:c8:5f:8e:6a:ba:6f:23:78:e0:c4: 3a:1b:e3:b6:2a:b1:95:a6:a1:12:90:c2:ee:33:ee: 61:86:a2:09:97:6a:79:b2:7e:74:df:48:de:b5:8d: 32:d2:7c:47:0e:2b:6e:c6:fc:3f:58:25:60:6e:2f: db:7f:52:6c:d9:a3:01:c9:81:d0:6a:6e:4d:7a:5b: cb:30:df:ef:a6:ba:ba:a2:7c:0c:eb:db:77:15:98: e9:11:94:c8:92:88:e1:5f:48:45:33:11:1b:c9:7c: ef:ca:da:7e:22:47:b0:dc:bc:dd:77:de:cd:b2:a1: 35:07:3c:8c:fc:b9:94:74:dd:50:97:28:4d:62:f4: c0:16:bb:b1:b3:38:38:03:70:0b:cf:d3:8d:b5:36: 8d:44:ec:8a:f0:68:0d:c4:ec:70:f1:f7:2e:f7:38: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:40:6A:50:A4:2D:20:EB:69:0F:C1:CA:DB:B2:7C:16:D0:BA:BC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/67fb0afd-db7a-3f5c-be13-2a1761affb5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: 204.209.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ff:22:8e:a1:c8:f9:aa:81:f0:c3:6e:31:ad:3c:df:42:ee: 99:0f:c5:7f:8e:cc:ad:97:c6:20:03:26:0e:07:ac:ab:d5:f4: d0:11:c2:e4:b6:74:5c:2a:aa:29:cc:c1:04:f8:77:b0:20:b1: 91:53:d0:a3:87:3c:3e:87:d2:e3:04:71:34:1c:ad:9d:94:74: 00:60:7c:ba:9b:20:b5:dd:84:a9:ae:2f:f3:bb:9a:16:53:ad: 48:bf:a9:64:8c:82:44:2d:59:9a:de:78:58:55:c7:22:a4:90: c1:16:d7:3d:68:93:60:61:2b:1b:19:6a:77:28:d2:ea:cd:4c: 91:a0:9c:d9:23:8d:42:1b:b0:0c:24:2a:d5:78:ad:67:a7:6b: dd:6e:b8:be:b8:b1:08:03:58:2d:84:d5:b9:9b:d8:2c:d7:dc: 41:cf:f3:30:a3:59:1f:44:36:c4:67:ba:82:99:62:21:d9:a7: 0c:08:dc:df:29:75:99:97:c3:d7:14:7f:04:01:22:5c:19:f6: ad:68:86:2d:5f:37:91:dd:6b:e7:76:79:e1:1f:28:84:d9:dd: 15:d7:cc:a3:6a:a3:0a:67:cf:76:53:95:80:a1:43:24:11:c6: 14:b5:8f:fd:4c:5e:dc:83:ec:18:b5:72:55:19:18:48:6e:f0: 99:81:2f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9nq4gaAj554UP1dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MTAwNTIwNDkxOVoXDTI3MDEwMzIxNDkxOVowLzEtMCsGA1UEAxMk YTI3ZGRhZmEtMzFmMi00ODJjLThlN2QtNWQwMzU0NDJhYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNFDjtHF1Q+INjs1bIuHLJ7Q7FydD9DRJnWN lfsf5Uw7PutJqqmzJyYvxTZQWSYXtCmsPjWT381NJHHg6CECpEo5YgxOwXi7Uvrb di3z9lIgUXWM0FbO/opFPmgchMhfjmq6byN44MQ6G+O2KrGVpqESkMLuM+5hhqIJ l2p5sn5030jetY0y0nxHDituxvw/WCVgbi/bf1Js2aMByYHQam5NelvLMN/vprq6 onwM69t3FZjpEZTIkojhX0hFMxEbyXzvytp+Ikew3Lzdd97NsqE1BzyM/LmUdN1Q lyhNYvTAFruxszg4A3ALz9ONtTaNROyK8GgNxOxw8fcu9zgW8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpAalCkLSDraQ/BytuyfBbQuryxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvNjdmYjBhZmQtZGI3YS0z ZjVjLWJlMTMtMmExNzYxYWZmYjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB//Io6hyPmqgfDDbjGtPN9C7pkPxX+OzK2XxiADJg4HrKvV9NARwuS2 dFwqqinMwQT4d7AgsZFT0KOHPD6H0uMEcTQcrZ2UdABgfLqbILXdhKmuL/O7mhZT rUi/qWSMgkQtWZreeFhVxyKkkMEW1z1ok2BhKxsZanco0urNTJGgnNkjjUIbsAwk KtV4rWena91uuL64sQgDWC2E1bmb2CzX3EHP8zCjWR9ENsRnuoKZYiHZpwwI3N8p dZmXw9cUfwQBIlwZ9q1ohi1fN5Hda+d2eeEfKITZ3RXXzKNqowpnz3ZTlYChQyQR xhS1j/1MXtyD7Bi1clUZGEhu8JmBL/A= -----END CERTIFICATE-----Generated at Fri Oct 9 22:58:54 2026 by rpki-client