$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/270a22eb-778a-32a0-a019-99cdc0c9f513.roa File: 270a22eb-778a-32a0-a019-99cdc0c9f513.roa (raw, json) Hash identifier: 4CJ8fwCrRNgAu9mK7w+XzxLDmQL1B4BBQA7oVSTTo9M= Subject key identifier: C8:A4:93:D9:DC:CF:23:B3:B2:8C:AA:93:84:5E:88:87:7F:50:1F:3F Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584F51D2AA47FCB8CD0DD51AAB00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/270a22eb-778a-32a0-a019-99cdc0c9f513.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 3257 IP address blocks: 204.139.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:aa:47:fc:b8:cd:0d:d5:1a:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=3e7cfafa-1718-408d-9c8d-18cc43f8e502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0c:fd:f6:c5:81:b1:ea:35:54:14:ac:52:30: 0a:b5:12:86:30:33:0f:c0:94:e4:fa:27:ed:f4:8a: 93:61:74:a1:30:c2:fe:18:52:d7:af:e9:60:65:56: 39:49:02:64:91:6d:b8:57:c9:4c:10:f0:d8:a7:e4: 84:b8:5d:25:d6:e2:4a:6e:76:45:b5:02:e2:02:56: 15:88:ab:12:ea:ab:c9:bc:2a:e5:dc:d4:94:ae:de: 8e:58:0a:ed:07:93:45:42:8b:89:55:d8:8d:c0:0c: 8d:58:ce:a2:e3:70:71:d7:40:1d:f3:00:b6:bf:30: 3c:24:26:b2:56:05:dc:ae:f1:93:25:e6:e5:45:9f: ab:e9:d2:e8:f7:7b:d3:4f:9f:d4:d9:3a:f5:a6:b1: 30:17:14:fe:a3:8d:fb:ea:2a:e9:7a:1e:1f:25:fb: da:93:63:38:d7:21:40:af:6b:4c:7a:dc:77:57:67: 20:46:4c:77:e6:c5:f6:05:25:f5:04:43:43:5c:c0: 21:48:aa:1c:f6:81:0c:e4:c8:c0:8c:d1:26:a7:19: 81:be:2c:ee:85:56:19:28:62:12:8a:04:13:e2:e5: d9:96:3b:94:5f:35:c0:56:5b:8f:c3:21:83:0d:e9: f0:89:cf:d3:f5:b7:f9:c2:71:b8:fb:43:60:38:78: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A4:93:D9:DC:CF:23:B3:B2:8C:AA:93:84:5E:88:87:7F:50:1F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/270a22eb-778a-32a0-a019-99cdc0c9f513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 204.139.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:44:f2:fd:e8:14:20:fe:8d:dd:29:6e:9f:23:4e:43:e5:58: 80:f1:b5:0e:c5:af:91:ee:1d:af:eb:d3:3b:6b:4a:02:e0:ab: c7:91:5b:ee:8a:59:11:e1:b6:f7:23:73:a6:f8:94:9e:23:4d: 1f:db:78:4e:6e:ec:72:a8:44:57:ee:2d:76:32:0b:ce:6e:f1: 1d:09:43:3e:b8:7f:63:12:80:2d:0f:27:ac:f4:1b:9b:7e:d3: f4:d5:d5:c9:bd:74:6f:77:da:d8:96:e5:8c:d0:1d:4b:07:14: 91:5c:31:2e:fd:7d:ab:b5:3d:24:c9:cb:56:0b:6a:47:3e:68: 62:5f:9d:d3:2b:3b:ff:ac:e8:38:75:5d:66:12:d3:19:c3:3a: 07:db:19:08:09:e6:aa:94:a0:2e:97:bb:b8:c8:89:b4:bf:42: ba:5f:43:c6:be:16:4f:52:fb:2e:ac:96:22:0d:51:4d:8b:fd: 06:f0:4e:c7:d9:5a:7d:eb:9c:9d:54:38:13:2c:2d:6f:b1:5a: a6:3d:ec:ac:83:71:b5:d4:80:21:a3:07:6d:f1:87:6c:b1:1a: 84:aa:c0:96:fd:80:36:38:87:27:19:73:50:03:e0:8b:c0:ff: 71:51:6e:58:c5:16:ee:55:d8:85:75:50:d2:c0:1a:20:4d:93: fe:1b:43:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qpH/LjNDdUaqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk M2U3Y2ZhZmEtMTcxOC00MDhkLTljOGQtMThjYzQzZjhlNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwz99sWBseo1VBSsUjAKtRKGMDMPwJTk+ift 9IqTYXShMML+GFLXr+lgZVY5SQJkkW24V8lMEPDYp+SEuF0l1uJKbnZFtQLiAlYV iKsS6qvJvCrl3NSUrt6OWArtB5NFQouJVdiNwAyNWM6i43Bx10Ad8wC2vzA8JCay VgXcrvGTJeblRZ+r6dLo93vTT5/U2Tr1prEwFxT+o4376irpeh4fJfvak2M41yFA r2tMetx3V2cgRkx35sX2BSX1BENDXMAhSKoc9oEM5MjAjNEmpxmBvizuhVYZKGIS igQT4uXZljuUXzXAVluPwyGDDenwic/T9bf5wnG4+0NgOHjDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMikk9nczyOzsoyqk4ReiId/UB8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjcwYTIyZWItNzc4YS0z MmEwLWEwMTktOTljZGMwYzlmNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzIsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZE8v3oFCD+jd0pbp8jTkPlWIDxtQ7Fr5HuHa/r0ztrSgLgq8eRW+6K WRHhtvcjc6b4lJ4jTR/beE5u7HKoRFfuLXYyC85u8R0JQz64f2MSgC0PJ6z0G5t+ 0/TV1cm9dG932tiW5YzQHUsHFJFcMS79fau1PSTJy1YLakc+aGJfndMrO/+s6Dh1 XWYS0xnDOgfbGQgJ5qqUoC6Xu7jIibS/QrpfQ8a+Fk9S+y6sliINUU2L/QbwTsfZ Wn3rnJ1UOBMsLW+xWqY97KyDcbXUgCGjB23xh2yxGoSqwJb9gDY4hycZc1AD4IvA /3FRbljFFu5V2IV1UNLAGiBNk/4bQ7Q= -----END CERTIFICATE-----Generated at Mon Sep 28 05:53:25 2026 by rpki-client