$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa File: 3cff4f2a-68ad-3c28-8482-467530c2801c.roa (raw, json) Hash identifier: CeNxc2QhRQlbwf6TU8tmgZnKsbvv4HJuCCBx1o+SUOg= Subject key identifier: 19:62:1C:A2:26:02:B0:0B:8F:0A:EF:06:0D:2C:C3:53:2F:AD:61:21 Certificate issuer: /CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Certificate serial: 010D0C9F4328584EF7176C6901F7AFC460028280 Authority key identifier: 9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 376 IP address blocks: 204.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6c:69:01:f7:af:c4:60:02:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=ceaf6f82-6f14-4f07-941f-d97429836001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:a9:2b:e2:30:57:68:6d:0c:88:0d:45:6f: d1:99:7d:66:88:6c:ff:1e:6e:d1:c6:14:6b:50:51: 9d:1c:18:17:0a:c2:73:d9:93:f2:aa:15:6a:1f:ce: e4:7b:6f:2e:bd:0c:72:2f:25:28:21:f2:5b:1e:c5: ad:01:7b:bc:17:59:f9:99:ab:af:55:fe:f1:0f:40: 56:01:a2:79:92:5c:44:4d:e3:c9:0f:33:13:96:b3: 7a:bc:b3:c1:cf:7d:e6:27:e7:11:47:cc:f0:31:73: 41:fd:19:b1:70:c1:87:5f:ea:c9:29:8b:9c:cc:e4: 9d:00:e0:e3:d4:83:2c:b6:ef:60:b1:9e:58:5f:5f: ae:b9:31:da:c0:0f:c0:d6:33:6d:42:85:c8:0f:99: a5:13:ee:bb:35:95:b4:2c:0b:d2:2f:8e:4f:6b:30: cd:4e:ed:6b:a9:b3:ce:47:dc:e1:82:11:b0:b1:bd: 87:f7:c0:bb:36:3e:f2:ee:ac:e3:d0:2a:5c:92:53: 15:b7:ac:cb:74:15:dc:20:36:e8:e2:4f:c5:bd:b4: c1:e3:5f:a7:83:d3:1f:cf:a2:0b:83:63:cc:a4:ab: f7:bd:e6:a1:31:53:b0:01:25:a0:2f:84:ae:2d:ee: f8:45:96:a9:4f:03:a7:e7:15:39:13:9b:8e:a0:b9: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:62:1C:A2:26:02:B0:0B:8F:0A:EF:06:0D:2C:C3:53:2F:AD:61:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl X509v3 Authority Key Identifier: keyid:9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer sbgp-ipAddrBlock: critical IPv4: 204.28.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0c:db:28:29:c0:d1:ba:70:c9:4a:1e:64:28:a9:3c:3d:de: 7f:84:b7:88:23:79:f8:9f:a5:c6:fe:27:07:56:ff:72:64:0c: 78:2e:bb:c3:84:cd:b4:c2:cb:a1:0e:51:25:28:4f:d2:b2:9d: 85:07:20:2d:51:71:ff:42:5e:00:2f:b2:e2:58:61:d5:9c:2b: 29:a5:e6:4d:dd:d4:84:5a:31:24:28:4a:d9:ed:7e:b2:e8:d5: 12:8b:ea:8a:b6:86:25:0e:28:1f:03:17:ad:df:07:7f:4f:19: 1c:5d:b9:e3:8e:15:5b:d5:3a:2a:a5:94:8d:1b:cc:84:31:7d: 39:ea:8d:97:7d:f4:84:36:c5:86:d0:e3:22:46:93:77:0b:3b: c2:91:1e:c1:c2:20:11:cf:86:6f:8e:d6:63:38:57:47:ae:ff: f1:8e:09:b1:bb:07:b5:af:fe:43:99:67:e1:4f:16:52:bb:e7: dc:d0:00:c4:7d:47:8b:26:96:74:0a:19:ff:a5:aa:d1:60:50: b7:57:7e:ad:b8:51:84:b0:dd:b0:d4:8d:b0:5f:b3:63:c1:0d: e9:50:3f:54:bb:3c:ae:1f:ed:ee:82:1b:28:94:8f:4e:02:32: 68:d1:bd:2b:65:2b:89:46:87:38:a5:95:70:36:f0:9a:83:b5: 0a:39:63:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2xpAfevxGACgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjMzAwZWMtOTkyNy00OTFkLWJkNzctODEwN2NjODll NGYzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2VhZjZmODItNmYxNC00ZjA3LTk0MWYtZDk3NDI5ODM2MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupOpK+IwV2htDIgNRW/RmX1miGz/Hm7RxhRr UFGdHBgXCsJz2ZPyqhVqH87ke28uvQxyLyUoIfJbHsWtAXu8F1n5mauvVf7xD0BW AaJ5klxETePJDzMTlrN6vLPBz33mJ+cRR8zwMXNB/RmxcMGHX+rJKYuczOSdAODj 1IMstu9gsZ5YX1+uuTHawA/A1jNtQoXID5mlE+67NZW0LAvSL45PazDNTu1rqbPO R9zhghGwsb2H98C7Nj7y7qzj0CpcklMVt6zLdBXcIDbo4k/FvbTB41+ng9Mfz6IL g2PMpKv3veahMVOwASWgL4SuLe74RZapTwOn5xU5E5uOoLmdNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBliHKImArALjwrvBg0sw1MvrWEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Mz MDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3Y2M4OWU0ZjMvM2NmZjRmMmEtNjhhZC0z YzI4LTg0ODItNDY3NTMwYzI4MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNjMzAwZWMtOTkyNy00OTFkLWJk NzctODEwN2NjODllNGYzL2MzYzMwMGVjLTk5MjctNDkxZC1iZDc3LTgxMDdjYzg5 ZTRmMy5jcmwwHwYDVR0jBBgwFoAUnN0pukMWDSh68N69hu4dxDQ2cYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2MzMDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3 Y2M4OWU0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8M2ygpwNG6cMlKHmQoqTw93n+Et4gjefifpcb+JwdW/3JkDHguu8OE zbTCy6EOUSUoT9KynYUHIC1Rcf9CXgAvsuJYYdWcKyml5k3d1IRaMSQoStntfrLo 1RKL6oq2hiUOKB8DF63fB39PGRxdueOOFVvVOiqllI0bzIQxfTnqjZd99IQ2xYbQ 4yJGk3cLO8KRHsHCIBHPhm+O1mM4V0eu//GOCbG7B7Wv/kOZZ+FPFlK759zQAMR9 R4smlnQKGf+lqtFgULdXfq24UYSw3bDUjbBfs2PBDelQP1S7PK4f7e6CGyiUj04C MmjRvStlK4lGhzillXA28JqDtQo5Y8Y= -----END CERTIFICATE-----Generated at Sun Sep 27 00:58:25 2026 by rpki-client