$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa File: c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa (raw, json) Hash identifier: qU2U7wfGnKdhGa1WUk9VSYKGw8LMpRK6gYQ3vemsG9A= Subject key identifier: 9A:41:0C:1D:98:BC:16:54:7E:59:A7:12:07:19:F0:57:5C:CC:E7:15 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584E815F991CBEEB39D157381A20 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 2152 IP address blocks: 204.102.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:99:1c:be:eb:39:d1:57:38:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=89abcfb8-792f-465f-8808-305453668ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:4e:ff:1d:a4:5b:40:e9:19:78:4d:36:22: d1:d7:bd:6e:32:d7:4e:04:af:c3:75:6c:1e:21:00: 09:dc:33:7a:85:83:b5:ec:1f:03:a0:fc:d9:9e:31: c5:c0:d3:ca:65:44:1a:99:24:9c:b8:08:34:81:08: 9f:ef:55:34:7a:29:76:0e:27:a1:d1:ec:c2:b8:df: e2:c3:fa:29:b8:dc:3e:bf:04:86:cd:3e:5c:65:9c: f6:79:e5:0a:e1:cb:24:2e:a5:df:a1:23:d7:dc:fe: 48:19:69:ea:66:2f:53:ec:7d:f6:29:2f:b5:c3:0f: 6c:e9:23:46:c0:7f:a9:06:53:d4:6c:69:53:50:da: 63:1f:8f:55:81:45:e8:8b:25:ef:bb:86:51:7b:fd: fd:d5:b9:13:c5:a5:44:f6:6b:04:5a:84:63:1e:f0: 98:17:d0:c3:4b:f8:73:c8:00:30:14:60:7d:29:33: f8:9d:55:91:55:9b:3b:0a:3d:aa:0a:c3:f1:be:68: 5e:55:31:7e:cb:3a:eb:71:34:e3:a6:55:91:63:e5: f2:0b:a7:e1:df:36:74:d6:1d:13:12:68:f7:45:d6: cf:fc:d4:95:50:f2:bb:d7:ac:91:38:df:2e:45:25: bc:67:21:88:e6:6d:22:79:b5:9f:57:7b:61:39:3d: ff:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:41:0C:1D:98:BC:16:54:7E:59:A7:12:07:19:F0:57:5C:CC:E7:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 204.102.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:d9:28:be:39:39:b6:5b:cb:46:64:7c:3f:bc:3b:cc:2a:32: e8:27:55:ea:e9:05:7a:f3:1c:cf:83:92:5a:45:56:f0:f4:61: 98:d2:69:41:e4:0f:6e:9e:7d:28:09:ea:a7:60:e8:41:43:cb: 11:c5:77:66:e4:65:9d:68:31:2c:6b:e9:2b:fa:11:ba:c0:9c: be:82:2c:f4:9f:be:eb:5a:b6:c0:10:44:1e:eb:31:65:10:15: cb:f5:2e:27:04:93:84:ce:e6:a3:a4:a7:ce:a6:fd:7e:dd:89: 2c:b4:8d:d5:30:dd:84:25:82:12:a2:bf:3f:da:6a:73:e0:63: fd:83:e7:b1:bc:58:e5:bb:93:6c:2c:ce:93:3b:e8:59:12:f2: f7:80:2a:ed:09:c2:8c:74:06:f4:82:40:24:62:34:d7:48:e4: ae:e6:49:b9:8c:25:73:a6:9b:f2:7a:4d:be:a0:3e:71:f4:9d: a9:07:a9:08:bb:2f:09:4d:e1:0d:f5:9e:8d:a6:d3:d7:ac:97: 05:27:b4:9a:f4:8e:2c:d2:27:fc:17:e7:5e:18:07:2f:72:63: 20:a7:2b:8d:e7:95:b5:f0:4c:52:12:69:11:6c:86:c1:44:ca: 53:63:13:b0:a3:6b:37:9a:43:51:34:d1:99:35:ad:4a:c9:a8: 95:3c:c5:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5kcvus50Vc4GiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk ODlhYmNmYjgtNzkyZi00NjVmLTg4MDgtMzA1NDUzNjY4ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVpO/x2kW0DpGXhNNiLR171uMtdOBK/DdWwe IQAJ3DN6hYO17B8DoPzZnjHFwNPKZUQamSScuAg0gQif71U0eil2Dieh0ezCuN/i w/opuNw+vwSGzT5cZZz2eeUK4cskLqXfoSPX3P5IGWnqZi9T7H32KS+1ww9s6SNG wH+pBlPUbGlTUNpjH49VgUXoiyXvu4ZRe/391bkTxaVE9msEWoRjHvCYF9DDS/hz yAAwFGB9KTP4nVWRVZs7Cj2qCsPxvmheVTF+yzrrcTTjplWRY+XyC6fh3zZ01h0T Emj3RdbP/NSVUPK716yRON8uRSW8ZyGI5m0iebWfV3thOT3/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpBDB2YvBZUflmnEgcZ8FdczOcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYzNlZDcyYzEtMmM2Ny0z MzczLWJmZTktYjM4MjFlMWQ2NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPZKL45ObZby0ZkfD+8O8wqMugnVerpBXrzHM+DklpFVvD0YZjSaUHk D26efSgJ6qdg6EFDyxHFd2bkZZ1oMSxr6Sv6EbrAnL6CLPSfvutatsAQRB7rMWUQ Fcv1LicEk4TO5qOkp86m/X7diSy0jdUw3YQlghKivz/aanPgY/2D57G8WOW7k2ws zpM76FkS8veAKu0Jwox0BvSCQCRiNNdI5K7mSbmMJXOmm/J6Tb6gPnH0nakHqQi7 LwlN4Q31no2m09eslwUntJr0jizSJ/wX514YBy9yYyCnK43nlbXwTFISaRFshsFE ylNjE7CjazeaQ1E00Zk1rUrJqJU8xXk= -----END CERTIFICATE-----Generated at Fri Jul 24 09:13:15 2026 by rpki-client