$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa File: d23c1663-1dc9-338f-b7d7-799b68465589.roa (raw, json) Hash identifier: /6NQsJjoK++rtjAHEra/MbOS48SJA1HI5jXS/hhpTPM= Subject key identifier: F5:E2:DB:E5:30:E9:13:95:7E:3B:47:FB:DD:BF:76:42:9B:88:0B:E2 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584F49767E98B01581D07BCDDB80 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 77 IP address blocks: 204.9.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7e:98:b0:15:81:d0:7b:cd:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=82610237-4886-49ac-a67a-de4b0fd36326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:39:32:5e:88:59:0e:49:c0:66:69:f1:80:6b: e8:e9:3b:af:cd:76:76:0f:66:00:f9:c3:71:ee:b6: 27:23:41:3a:6d:77:ad:45:c5:19:9e:e0:92:97:5a: fc:41:3d:99:cf:9c:c3:6b:55:cd:0d:e5:56:0c:8d: 10:77:7a:90:4f:a9:3c:6d:2c:db:15:08:8d:12:6b: a6:56:7f:1d:77:ea:90:7e:31:95:ab:0c:a0:79:be: 1c:f5:01:b6:c6:41:2b:63:72:78:01:7e:a2:b8:17: 9a:9c:5b:f5:8b:b1:53:4d:15:12:3d:84:4a:ec:ee: 56:2e:3f:fc:88:7a:39:08:10:f8:8c:f3:46:03:06: 73:97:15:3c:1e:c2:96:29:37:65:a5:ed:e0:7d:62: af:47:13:9e:2b:bc:0f:bb:3f:3c:72:03:86:5b:e4: 24:f2:00:b0:65:2f:dc:53:a5:1c:94:f5:46:11:06: b8:3e:1a:f7:88:f1:cb:2c:70:80:1e:30:0e:d4:be: 57:5a:96:5f:a2:8d:1a:d7:5b:fb:25:43:d5:d9:27: 20:ed:e1:39:f5:49:c3:04:a7:e5:4f:62:6c:90:e3: 72:f7:05:4f:0a:6a:bb:bb:6f:6b:6c:e3:2e:46:f4: bb:90:4b:98:d6:5f:fb:b9:ef:f5:b1:75:c1:9c:e9: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:DB:E5:30:E9:13:95:7E:3B:47:FB:DD:BF:76:42:9B:88:0B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:29:5a:17:9c:c9:2b:2d:d6:b5:d9:6b:fa:1a:89:f5:b7:03: e6:df:e2:2b:a4:5a:92:ce:3a:77:9f:2b:6e:0d:b6:05:a7:2b: 1d:47:9f:66:08:2e:64:a4:44:c2:15:0e:8c:96:ba:e2:8a:9c: 61:06:40:67:d1:f6:e2:9d:f0:5d:9b:28:fb:64:c7:81:b8:36: d8:fa:4b:13:92:0c:05:73:55:02:b5:7e:c2:1d:76:e8:6b:a1: 44:cb:62:66:3a:56:77:1e:0b:f4:16:4c:a5:e1:bf:3f:86:14: d0:7b:f6:02:2c:e7:a9:a1:bc:05:4d:0b:bf:25:dc:67:b5:6a: 4d:b5:4f:f7:dd:c4:b8:e9:a9:6d:02:13:bc:be:6b:5c:9a:db: 57:1e:87:5a:75:e2:e2:59:1c:7e:ad:2f:81:46:cf:0a:ac:1c: 10:f6:e9:9d:b0:64:d2:5c:b4:eb:b6:64:c5:9e:88:a1:ce:26: d9:53:14:48:c5:ce:65:b4:51:c3:82:0f:a3:11:b2:df:cc:ee: 15:05:ea:98:60:c0:6f:9c:e2:15:ed:9a:2e:49:96:fe:33:de: 60:20:77:97:d1:0e:36:72:e3:2b:f3:46:3f:84:cf:18:d1:08: d4:bd:7c:3d:e4:28:b2:29:f0:48:ea:82:21:7d:db:93:67:dd: 97:e3:12:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdn6YsBWB0HvN24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODI2MTAyMzctNDg4Ni00OWFjLWE2N2EtZGU0YjBmZDM2MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzkyXohZDknAZmnxgGvo6TuvzXZ2D2YA+cNx 7rYnI0E6bXetRcUZnuCSl1r8QT2Zz5zDa1XNDeVWDI0Qd3qQT6k8bSzbFQiNEmum Vn8dd+qQfjGVqwygeb4c9QG2xkErY3J4AX6iuBeanFv1i7FTTRUSPYRK7O5WLj/8 iHo5CBD4jPNGAwZzlxU8HsKWKTdlpe3gfWKvRxOeK7wPuz88cgOGW+Qk8gCwZS/c U6UclPVGEQa4Phr3iPHLLHCAHjAO1L5XWpZfoo0a11v7JUPV2Scg7eE59UnDBKfl T2JskONy9wVPCmq7u29rbOMuRvS7kEuY1l/7ue/1sXXBnOmuOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXi2+Uw6ROVfjtH+92/dkKbiAviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvZDIzYzE2NjMtMWRjOS0z MzhmLWI3ZDctNzk5YjY4NDY1NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcpWhecySst1rXZa/oaifW3A+bf4iukWpLOOnefK24NtgWnKx1Hn2YI LmSkRMIVDoyWuuKKnGEGQGfR9uKd8F2bKPtkx4G4Ntj6SxOSDAVzVQK1fsIdduhr oUTLYmY6VnceC/QWTKXhvz+GFNB79gIs56mhvAVNC78l3Ge1ak21T/fdxLjpqW0C E7y+a1ya21ceh1p14uJZHH6tL4FGzwqsHBD26Z2wZNJctOu2ZMWeiKHOJtlTFEjF zmW0UcOCD6MRst/M7hUF6phgwG+c4hXtmi5Jlv4z3mAgd5fRDjZy4yvzRj+EzxjR CNS9fD3kKLIp8EjqgiF925Nn3ZfjEjQ= -----END CERTIFICATE-----Generated at Fri Oct 9 13:39:39 2026 by rpki-client