$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa File: b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa (raw, json) Hash identifier: CsU1p9z2Zo08hwEAHeYubGGcJsIe/hbfRMqgs7nPPkk= Subject key identifier: C3:C5:33:5A:55:64:29:EE:38:B7:31:E0:67:0A:F0:B0:28:4F:6E:72 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584F4C3D4AEE10E9ECB25A89CDC0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 16433 IP address blocks: 204.9.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4a:ee:10:e9:ec:b2:5a:89:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e5d2e2b5-81ee-42c3-930c-d7a9d7ec1028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:4f:18:90:60:7d:49:c6:e5:de:9d:14:37: cb:b6:20:d4:9a:d6:e1:18:b9:24:74:b8:ce:47:9d: f6:dc:5f:aa:16:e9:09:71:78:7d:bd:91:80:07:76: 98:72:3d:bd:aa:b5:6e:84:a1:dd:0f:bc:98:c1:06: c3:a7:a5:6a:2a:eb:cd:b1:c1:ba:d2:43:72:d4:e6: d9:b4:95:25:e0:dd:89:1f:72:88:f1:9c:de:e1:2d: 17:4b:44:e2:c1:e1:b9:6f:f7:a8:55:7b:25:e9:24: 1f:d4:cd:a4:8a:73:2d:c0:36:9f:9d:fd:63:57:e1: a4:4d:a1:ee:45:d3:d9:35:b7:98:3a:f3:1d:f3:db: d0:1c:32:0e:05:4f:7e:22:14:28:8b:0b:19:97:67: 6a:a3:20:28:1a:d9:f9:4e:94:96:8c:14:f2:a2:ea: fb:6d:ba:2b:82:10:05:1a:c9:30:00:36:fa:e0:89: 65:53:dc:79:34:c1:55:84:f8:13:60:61:ab:fb:00: 0b:b1:a8:54:dc:7f:fa:31:75:fd:1e:91:2b:cb:5b: bf:b1:74:26:04:bf:94:93:85:69:57:0e:36:cb:ac: 6c:f3:e3:b6:75:4a:17:c5:cc:25:7d:49:14:f4:af: f3:61:a7:a0:89:63:b2:0c:c6:f3:8f:05:0a:95:87: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:33:5A:55:64:29:EE:38:B7:31:E0:67:0A:F0:B0:28:4F:6E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b06692f4-a6dc-3f17-bbdf-9b3e0ef76706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 204.9.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:13:8b:38:ce:cf:91:a3:03:70:dc:a3:36:f8:c1:bb:74:9c: 6a:c3:84:dd:2c:c2:d0:e3:f6:2f:0b:04:80:a2:a0:51:f3:47: fe:06:6a:b0:91:e7:5f:91:eb:94:3a:f1:09:9c:a4:24:49:49: 2a:db:5d:27:04:22:d2:2d:56:1e:c1:41:2b:bb:a9:11:f5:8e: 85:ec:d6:34:b0:28:c4:f6:6e:12:60:5e:6a:06:77:ae:5d:57: 5c:05:30:22:d7:87:02:53:56:dd:70:12:27:1b:a3:b1:14:e8: 28:ff:88:79:f0:4f:81:25:0d:42:1f:12:9e:22:a4:83:f7:bd: c4:ba:d2:d0:65:2d:2a:43:5e:96:ff:6a:e3:08:d3:8c:b7:00: 50:ef:d7:7d:dc:7c:45:ae:c9:16:b4:3a:27:3d:88:4d:bf:6b: 8b:d3:be:93:4c:9c:37:c0:84:c9:d7:3a:2f:9b:50:ba:e3:a6: c3:c1:66:6b:54:9b:9d:f9:43:df:43:71:f7:6a:80:2d:2e:0c: 5a:e3:1b:f1:49:f0:78:6f:c6:ea:de:e8:23:7a:70:a1:51:0f: 28:59:b7:2a:56:a3:24:d0:f0:8b:14:6b:9d:1d:12:02:9e:33: b6:0c:ab:84:99:e2:76:bb:0a:05:d7:6f:ab:14:30:ef:91:4a: 18:ff:f6:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUruEOnsslqJzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTVkMmUyYjUtODFlZS00MmMzLTkzMGMtZDdhOWQ3ZWMxMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXlPGJBgfUnG5d6dFDfLtiDUmtbhGLkkdLjO R5323F+qFukJcXh9vZGAB3aYcj29qrVuhKHdD7yYwQbDp6VqKuvNscG60kNy1ObZ tJUl4N2JH3KI8Zze4S0XS0TiweG5b/eoVXsl6SQf1M2kinMtwDafnf1jV+GkTaHu RdPZNbeYOvMd89vQHDIOBU9+IhQoiwsZl2dqoyAoGtn5TpSWjBTyour7bborghAF GskwADb64IllU9x5NMFVhPgTYGGr+wALsahU3H/6MXX9HpEry1u/sXQmBL+Uk4Vp Vw42y6xs8+O2dUoXxcwlfUkU9K/zYaegiWOyDMbzjwUKlYdHvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPFM1pVZCnuOLcx4GcK8LAoT25yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjA2NjkyZjQtYTZkYy0z ZjE3LWJiZGYtOWIzZTBlZjc2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMTizjOz5GjA3Dcozb4wbt0nGrDhN0swtDj9i8LBICioFHzR/4GarCR 51+R65Q68QmcpCRJSSrbXScEItItVh7BQSu7qRH1joXs1jSwKMT2bhJgXmoGd65d V1wFMCLXhwJTVt1wEicbo7EU6Cj/iHnwT4ElDUIfEp4ipIP3vcS60tBlLSpDXpb/ auMI04y3AFDv133cfEWuyRa0Oic9iE2/a4vTvpNMnDfAhMnXOi+bULrjpsPBZmtU m535Q99DcfdqgC0uDFrjG/FJ8Hhvxure6CN6cKFRDyhZtypWoyTQ8IsUa50dEgKe M7YMq4SZ4na7CgXXb6sUMO+RShj/9h8= -----END CERTIFICATE-----Generated at Sun Sep 27 02:47:56 2026 by rpki-client