$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa File: a3b93d87-5667-328e-a14c-5284dd2687a0.roa (raw, json) Hash identifier: Cy3Nyl3muDH8SUB61ZibCeakRCoRnKkCNLV8yFsV8YU= Subject key identifier: 73:35:68:B3:EE:3E:60:53:63:61:AE:EA:86:BD:CA:26:68:10:87:81 Certificate issuer: /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Certificate serial: 010D0C9F4328584F4974111F33AD42A102EA0FE0 Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21922 IP address blocks: 204.197.128.0/20 maxlen: 24 216.37.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:11:1f:33:ad:42:a1:02:ea:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=81b25262-d787-4fa6-b2d1-4e1bf2368554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:65:30:e7:6f:9e:6a:00:58:20:b1:86:8a: 2b:f9:0a:a9:ee:35:fa:40:ec:f0:36:b6:50:ea:f4: 91:03:45:fa:71:1f:4f:ea:d9:a7:1b:b3:55:d5:5d: da:00:69:3b:81:c0:1b:83:f7:9e:b2:6c:17:dd:8d: 1d:c1:15:dd:56:1c:22:6b:66:5f:e9:af:08:fa:91: 09:1c:f7:46:6d:35:cd:5a:63:5e:df:ea:ca:bb:f5: 7b:39:a1:55:ef:85:54:b6:dc:06:1a:d5:1e:77:3f: 78:40:e8:06:a3:50:cc:ed:2b:c5:9a:b2:a4:aa:53: c4:33:32:e5:52:68:55:9a:5c:94:6e:04:10:6c:8b: fa:67:04:78:eb:48:58:54:c8:9d:ff:dc:d2:97:de: 6f:38:0e:cf:fe:5a:3a:67:f9:51:92:59:44:eb:e7: da:d2:00:65:ed:d2:b1:d4:d6:c6:10:97:87:14:49: 14:db:ec:e0:86:9e:34:e0:42:9c:6a:4b:6b:ba:51: 42:fd:a9:f3:6f:8f:02:5d:b7:aa:4e:ba:39:28:ec: 24:68:91:ef:45:28:8c:6b:3f:94:79:65:16:79:2b: 9d:51:7e:f8:c5:0a:bd:cf:29:a0:e0:ac:22:55:0a: 92:26:75:28:9d:99:14:e2:9b:02:4e:05:fe:68:d1: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:68:B3:EE:3E:60:53:63:61:AE:EA:86:BD:CA:26:68:10:87:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/a3b93d87-5667-328e-a14c-5284dd2687a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl X509v3 Authority Key Identifier: keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer sbgp-ipAddrBlock: critical IPv4: 204.197.128.0/20 216.37.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:7f:a2:1d:23:73:7e:4a:c0:a6:88:2a:d4:6d:16:53:7a:ca: d4:15:62:63:48:04:66:df:c0:d2:de:e3:05:65:ed:11:37:be: 09:7a:e5:17:71:63:09:d3:78:7e:7b:57:d6:fa:d9:82:ab:cc: fd:d4:45:af:41:b2:53:7c:21:36:7a:81:f6:76:ef:0f:0c:fe: 2e:11:46:fb:3a:c4:d7:87:af:d3:e6:ed:2e:b4:57:33:35:0b: 85:ea:84:c0:d5:e8:7d:72:61:13:e9:e7:d6:71:b3:98:b3:b2: 29:d5:df:c0:30:3f:bc:2a:9e:2b:51:93:71:4b:94:c7:ca:35: 3e:05:3f:8a:dc:f3:b9:9b:b9:d9:a0:8c:bf:79:46:e4:3d:95: 95:33:63:a9:5a:14:66:e9:d4:4c:f8:3e:46:c9:29:35:c5:ee: db:d1:9c:20:e3:4a:1c:8c:81:1c:18:0b:a0:af:10:b7:bb:bf: 74:70:2b:11:0c:e7:25:9e:95:da:1b:0b:16:a4:c1:fb:4a:2b: 2a:9b:8e:e4:77:02:f8:5d:72:bb:3d:80:49:bc:6e:36:ed:fe: 5a:66:4b:64:cc:9d:0b:86:bb:32:19:69:f5:52:43:bb:4c:38: 0e:66:74:5d:0d:6b:2e:1a:cf:cf:d5:ae:86:78:45:a4:65:9a: 16:ad:d5:b6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdBEfM61CoQLqD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi MTc3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODFiMjUyNjItZDc4Ny00ZmE2LWIyZDEtNGUxYmYyMzY4NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw09lMOdvnmoAWCCxhoor+Qqp7jX6QOzwNrZQ 6vSRA0X6cR9P6tmnG7NV1V3aAGk7gcAbg/eesmwX3Y0dwRXdVhwia2Zf6a8I+pEJ HPdGbTXNWmNe3+rKu/V7OaFV74VUttwGGtUedz94QOgGo1DM7SvFmrKkqlPEMzLl UmhVmlyUbgQQbIv6ZwR460hYVMid/9zSl95vOA7P/lo6Z/lRkllE6+fa0gBl7dKx 1NbGEJeHFEkU2+zghp404EKcaktrulFC/anzb48CXbeqTro5KOwkaJHvRSiMaz+U eWUWeSudUX74xQq9zymg4KwiVQqSJnUonZkU4psCTgX+aNEZowIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHM1aLPuPmBTY2Gu6oa9yiZoEIeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvYTNiOTNkODctNTY2Ny0z MjhlLWExNGMtNTI4NGRkMjY4N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0 MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3 YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy ZDIzN2IxNzcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEzMWAAwQF 2CVAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKl/oh0jc35KwKaIKtRtFlN6ytQVYmNIBGbfwNLe4wVl7RE3 vgl65RdxYwnTeH57V9b62YKrzP3URa9BslN8ITZ6gfZ27w8M/i4RRvs6xNeHr9Pm 7S60VzM1C4XqhMDV6H1yYRPp59Zxs5izsinV38AwP7wqnitRk3FLlMfKNT4FP4rc 87mbudmgjL95RuQ9lZUzY6laFGbp1Ez4PkbJKTXF7tvRnCDjShyMgRwYC6CvELe7 v3RwKxEM5yWeldobCxakwftKKyqbjuR3Avhdcrs9gEm8bjbt/lpmS2TMnQuGuzIZ afVSQ7tMOA5mdF0Nay4az8/VroZ4RaRlmhat1bY= -----END CERTIFICATE-----Generated at Sat Oct 3 11:49:39 2026 by rpki-client