$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/b3010e93-e63c-308e-9e24-3cf99cb0963e.roa File: b3010e93-e63c-308e-9e24-3cf99cb0963e.roa (raw, json) Hash identifier: 5crkc1J/Q2BD/JpiJyBy17BuHwn9LH8el8EKKao4kzs= Subject key identifier: 36:F4:1D:6B:2D:24:83:D4:23:7B:E4:E8:A3:BB:0F:1F:43:AA:07:89 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584F4975E38729D7C1CA139CCF00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/b3010e93-e63c-308e-9e24-3cf99cb0963e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2152 IP address blocks: 205.154.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e3:87:29:d7:c1:ca:13:9c:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e3eeb38-c3dd-4939-9ee0-5a7c9c245d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c5:86:e5:47:92:6c:fe:69:bc:f7:4d:e7:6b: df:8e:da:cf:98:70:ec:38:ba:55:1d:88:71:cd:e9: 0b:a3:b5:ea:64:e5:ff:ac:bb:61:d7:1c:c4:cb:a8: 6f:14:71:e0:91:49:5a:3c:75:93:30:0f:3f:6e:b1: 5e:f3:49:10:4a:4b:ab:5e:b0:f3:75:69:77:cd:da: 1f:08:0d:24:47:e6:e4:fb:1f:7d:bd:f4:1e:d4:61: 0f:ad:38:36:0e:45:58:81:16:07:94:dc:00:7f:ba: 04:70:d3:b0:c5:ea:51:de:53:bd:ff:cc:d2:53:e5: 9a:b8:47:bf:27:d3:ad:c7:82:7d:d5:94:a8:bf:f2: a7:7c:16:cc:e3:4d:de:b8:87:49:2f:5c:e8:ac:6e: df:eb:10:36:d4:c7:9b:3f:3b:74:31:61:cb:a5:ed: 99:e0:9e:7e:29:7f:06:23:1c:50:5f:a3:b3:30:5e: 6c:78:40:1b:fd:1b:70:8b:dd:52:92:da:c1:08:c0: 08:bf:c1:f5:94:33:8b:93:3c:23:d8:fb:5f:e4:d6: ca:ca:33:54:2e:dd:38:34:90:cd:e4:ad:ed:dd:3e: fb:98:e9:28:49:81:4f:e9:ab:dc:ed:ad:4c:00:9b: dd:72:f9:d3:b1:88:e9:a3:3f:9d:1b:d6:0f:fa:d3: 7b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F4:1D:6B:2D:24:83:D4:23:7B:E4:E8:A3:BB:0F:1F:43:AA:07:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/b3010e93-e63c-308e-9e24-3cf99cb0963e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 205.154.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:fe:fa:ee:f5:d5:da:7e:45:1f:4c:fd:c4:aa:b2:5c:11:c8: f4:26:bd:62:ed:c0:cd:dc:a7:45:6c:80:d7:fb:c5:fc:5b:10: 25:e3:87:ef:a0:e2:31:26:b3:a2:f6:15:7c:45:26:28:de:a5: 92:95:a1:72:fc:d7:e9:f2:7e:e6:36:97:5f:db:7a:da:0a:de: e7:89:43:07:02:d8:6a:ec:ef:0b:36:49:c7:52:4a:a2:52:7d: c1:ea:95:9a:0d:48:d0:8f:89:b9:9e:7f:01:e5:49:56:83:70: 6c:e4:12:04:d1:7c:b2:d5:f1:2a:36:dd:9f:74:7e:0a:5e:06: 72:0f:0e:da:46:e5:16:a0:04:a3:bd:1e:1e:dc:22:43:76:30: 27:e0:3d:13:a2:68:3c:24:b0:cd:8e:b4:f1:34:1b:b1:57:c5: 34:93:d0:7e:50:3b:2b:b6:75:58:ac:b6:e6:77:e7:8f:a8:96: c9:85:ed:59:c0:c6:b0:1f:1d:07:1a:eb:af:df:a4:6c:64:7a: 15:a9:12:f8:ef:e2:f4:f0:ca:2a:49:8b:4e:39:d5:bf:9c:e3: fb:cb:92:9a:f2:22:9c:5a:17:7d:6c:94:64:70:b1:5a:df:04: 9d:3e:9b:4c:08:77:c8:3f:3c:e0:b6:f9:df:de:ef:ca:08:c6: 9b:72:d9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdeOHKdfByhOczwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2UzZWViMzgtYzNkZC00OTM5LTllZTAtNWE3YzljMjQ1ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88WG5UeSbP5pvPdN52vfjtrPmHDsOLpVHYhx zekLo7XqZOX/rLth1xzEy6hvFHHgkUlaPHWTMA8/brFe80kQSkurXrDzdWl3zdof CA0kR+bk+x99vfQe1GEPrTg2DkVYgRYHlNwAf7oEcNOwxepR3lO9/8zSU+WauEe/ J9Otx4J91ZSov/KnfBbM403euIdJL1zorG7f6xA21MebPzt0MWHLpe2Z4J5+KX8G IxxQX6OzMF5seEAb/Rtwi91SktrBCMAIv8H1lDOLkzwj2Ptf5NbKyjNULt04NJDN 5K3t3T77mOkoSYFP6avc7a1MAJvdcvnTsYjpoz+dG9YP+tN7OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb0HWstJIPUI3vk6KO7Dx9DqgeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYjMwMTBlOTMtZTYzYy0z MDhlLTllMjQtM2NmOTljYjA5NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL++u711dp+RR9M/cSqslwRyPQmvWLtwM3cp0VsgNf7xfxbECXjh++g 4jEms6L2FXxFJijepZKVoXL81+nyfuY2l1/betoK3ueJQwcC2Grs7ws2ScdSSqJS fcHqlZoNSNCPibmefwHlSVaDcGzkEgTRfLLV8So23Z90fgpeBnIPDtpG5RagBKO9 Hh7cIkN2MCfgPROiaDwksM2OtPE0G7FXxTST0H5QOyu2dVistuZ354+olsmF7VnA xrAfHQca66/fpGxkehWpEvjv4vTwyipJi0451b+c4/vLkpryIpxaF31slGRwsVrf BJ0+m0wId8g/POC2+d/e78oIxpty2bA= -----END CERTIFICATE-----Generated at Sat Sep 26 07:08:53 2026 by rpki-client