$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa File: caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa (raw, json) Hash identifier: 1/verlZPIfMoIQMmWGjb9weEqU0jqbrQEsxAdEgtu7o= Subject key identifier: 21:6B:B9:DF:30:5E:AC:50:EA:05:6B:D9:33:BE:F8:2B:65:52:51:D0 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F4328584F49756833326465E65B170800 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26480 IP address blocks: 204.19.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:68:33:32:64:65:e6:5b:17:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4e9204da-47a9-4452-8d43-161d241a29d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:45:0b:a6:1a:52:66:c3:6d:49:c0:85:ff: 9b:20:bf:5c:ca:07:f8:6b:13:48:54:c7:5d:9f:5a: 7d:ed:87:15:2a:01:c1:56:f7:9e:c4:1d:18:45:96: dd:e2:f0:06:d4:63:cf:38:b6:72:b0:a9:28:42:17: 77:62:85:5a:40:22:e3:ce:bc:16:cb:e8:5b:8b:6b: 89:ef:c0:df:cf:87:9c:a1:1c:70:4c:69:e5:d0:58: 3c:36:bc:0f:32:e4:9e:43:32:8e:ab:8e:2b:df:02: dc:1e:41:4d:97:e5:76:25:24:cb:82:e2:8d:1e:14: f7:34:a4:d9:eb:46:e7:02:c0:ae:34:de:1b:f7:97: 56:c1:e4:52:f7:62:78:48:e9:52:94:53:5b:5e:62: 09:bb:1b:1b:08:f9:47:fe:73:a5:fb:e1:72:b3:30: ee:c6:db:c6:74:cd:de:f4:a0:da:86:30:24:75:29: 44:ad:74:d4:43:1d:38:f0:a5:b3:b9:5a:0e:8b:69: 98:72:cd:0d:86:b9:ff:73:49:c9:59:63:04:31:2d: 1d:32:67:30:e9:16:68:be:8a:ca:c0:d2:be:fa:40: 19:78:40:58:48:04:21:f6:10:72:66:3c:54:3a:63: b8:5e:8c:22:a0:bc:c7:53:a2:d7:ac:98:c4:e8:66: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6B:B9:DF:30:5E:AC:50:EA:05:6B:D9:33:BE:F8:2B:65:52:51:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/caf9f8c6-9043-3784-8eba-63dcef6e7eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 204.19.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:19:ae:98:47:13:39:20:24:54:40:02:0b:0f:98:74:1b:fc: a4:1d:51:e4:e2:ea:3f:8c:13:6c:9e:c4:3c:b2:0e:f5:77:05: 08:ae:59:53:9a:4f:70:39:2c:fc:80:a8:10:1c:d2:dd:15:00: dc:c0:68:19:e5:1a:2f:eb:f0:82:b9:b3:f3:97:0f:30:67:8b: 54:65:aa:c4:d1:14:7e:b7:45:47:38:c3:ef:aa:0d:5c:23:6c: 3d:66:e5:6a:84:3c:0e:e6:59:7b:ff:8d:8f:65:06:8d:16:8d: e4:83:b8:d5:7f:a4:5b:52:a5:8a:76:f9:fc:52:77:b4:74:80: 7d:db:3b:d5:aa:ba:51:dc:de:ab:ef:be:35:4b:8c:4e:87:4c: 62:7a:54:69:2a:81:31:da:aa:9b:ba:0d:ca:a2:2f:7a:d9:62: 6b:25:8e:cf:bd:e1:2c:d3:d9:c6:20:80:55:d3:58:a6:52:d6: db:21:e0:4c:53:90:a7:03:0b:2b:cc:5a:1c:ac:0c:8a:95:87: d2:3c:62:d8:32:06:84:33:4a:49:a7:1e:cb:cc:38:b8:e1:c7: 1e:3a:19:7d:54:86:6a:87:ec:b7:11:8c:fc:d3:d6:be:9b:49: 0a:84:af:8e:3e:83:83:b7:c2:28:81:79:93:12:4e:50:f2:f7: 2b:34:38:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWgzMmRl5lsXCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGU5MjA0ZGEtNDdhOS00NDUyLThkNDMtMTYxZDI0MWEyOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqhFC6YaUmbDbUnAhf+bIL9cygf4axNIVMdd n1p97YcVKgHBVveexB0YRZbd4vAG1GPPOLZysKkoQhd3YoVaQCLjzrwWy+hbi2uJ 78Dfz4ecoRxwTGnl0Fg8NrwPMuSeQzKOq44r3wLcHkFNl+V2JSTLguKNHhT3NKTZ 60bnAsCuNN4b95dWweRS92J4SOlSlFNbXmIJuxsbCPlH/nOl++FyszDuxtvGdM3e 9KDahjAkdSlErXTUQx048KWzuVoOi2mYcs0Nhrn/c0nJWWMEMS0dMmcw6RZovorK wNK++kAZeEBYSAQh9hByZjxUOmO4XowioLzHU6LXrJjE6GYS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFrud8wXqxQ6gVr2TO++CtlUlHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvY2FmOWY4YzYtOTA0My0z Nzg0LThlYmEtNjNkY2VmNmU3ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzBMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcZrphHEzkgJFRAAgsPmHQb/KQdUeTi6j+ME2yexDyyDvV3BQiuWVOa T3A5LPyAqBAc0t0VANzAaBnlGi/r8IK5s/OXDzBni1RlqsTRFH63RUc4w++qDVwj bD1m5WqEPA7mWXv/jY9lBo0WjeSDuNV/pFtSpYp2+fxSd7R0gH3bO9WqulHc3qvv vjVLjE6HTGJ6VGkqgTHaqpu6DcqiL3rZYmsljs+94SzT2cYggFXTWKZS1tsh4ExT kKcDCyvMWhysDIqVh9I8YtgyBoQzSkmnHsvMOLjhxx46GX1UhmqH7LcRjPzT1r6b SQqEr44+g4O3wiiBeZMSTlDy9ys0OF8= -----END CERTIFICATE-----Generated at Sun Sep 27 23:54:26 2026 by rpki-client