$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa File: 256d24fc-eda3-3794-a5c2-a337859acf22.roa (raw, json) Hash identifier: 14tg+/5olhK/qfG6T6s+wsnpfU3IJflhfaUyHUo4F7E= Subject key identifier: 77:39:8E:1A:EF:5E:FA:CD:40:6E:CD:B9:E5:88:39:3F:13:8F:D6:36 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584F49897571AECA2DB9FECB0180 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 204.152.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:75:71:ae:ca:2d:b9:fe:cb:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=538fc7c9-b5a1-4ac2-a4ef-d12eeac0e9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:7f:43:5d:01:f7:84:03:50:62:ba:98:b5: 29:19:89:78:f4:1f:0d:b5:f7:ff:f1:20:6a:20:53: 2f:1b:0e:92:8a:15:d3:3d:c1:4a:42:f6:98:ea:4c: 6b:d0:8d:84:7d:cc:30:94:6e:00:4f:43:f4:54:eb: 6b:26:ce:dc:92:1a:c1:e6:99:cd:9d:75:d8:df:21: 1e:f4:29:6f:c4:f7:94:12:a2:77:99:ce:e5:c9:94: 69:32:07:43:94:33:b0:8e:2f:49:b2:9e:a4:26:ba: cf:d4:56:28:96:5e:df:31:d2:7b:5c:12:9e:0a:1b: 3a:43:b2:79:da:69:6e:b3:24:75:9f:87:90:a3:f4: a1:6b:ce:4c:43:81:39:85:8e:67:5c:8b:a9:6e:5d: 4a:65:15:a9:f5:f4:99:16:fc:30:02:85:41:0d:d8: fc:d4:b1:37:df:8e:03:50:5c:ef:05:0c:14:8f:0e: 2b:84:dc:71:be:3e:ec:52:5a:c3:a0:f6:e4:ac:70: 6f:c7:3e:da:e1:94:0a:fb:40:8a:5f:e5:f5:08:76: 8d:7f:b7:d9:4c:da:42:67:c4:09:30:b5:64:d8:a9: d1:3a:e7:73:86:0e:e6:83:ea:e1:35:91:56:c5:d1: fb:60:6f:54:1a:17:74:db:c4:ad:48:59:45:d4:2f: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:39:8E:1A:EF:5E:FA:CD:40:6E:CD:B9:E5:88:39:3F:13:8F:D6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: 204.152.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:60:cc:b6:ba:d0:d1:22:99:b2:a2:23:ff:20:ee:78:0a:2e: a4:b7:bc:ef:6d:33:4c:f3:ca:c6:b9:e0:13:18:9d:4c:5c:c6: 24:3d:11:d3:07:2a:cf:b3:b2:26:19:40:5a:54:16:9e:63:86: 2f:cc:c0:f0:7a:60:8d:95:5d:f0:4d:0c:a4:86:9f:bf:70:6d: 51:14:88:7a:67:f2:b1:87:10:08:a1:33:b4:f2:5d:f6:33:9e: 9b:f8:7e:12:6c:68:9d:70:62:8f:9b:3c:72:8c:5d:3c:7a:b8: 4e:66:5b:37:b4:c4:7b:2d:09:d5:06:8f:38:6d:8f:7b:ee:f5: 58:73:12:92:f1:8f:26:02:ca:d0:d1:f4:ba:6f:f6:4d:f0:e4: 79:3f:cb:c1:fc:76:09:f8:9b:2d:84:8e:a5:0d:83:85:d2:3b: 1b:65:46:fb:97:c9:c0:5a:c0:0c:16:a6:a4:7e:ae:0f:fd:ad: 55:cd:6b:23:98:bc:a4:5a:03:0a:67:9a:e9:38:a3:2b:97:79: 4c:36:4f:5c:27:8f:da:0c:f5:ed:28:6d:1a:57:e1:d0:04:0d: 55:a1:0f:24:53:07:6d:7c:fa:18:fc:6e:28:8b:70:bc:0b:d2: bd:0d:9e:e0:1b:cc:cc:4e:b8:5f:49:61:cd:c9:55:83:12:dd: 3d:db:a0:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiXVxrsotuf7LAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTM4ZmM3YzktYjVhMS00YWMyLWE0ZWYtZDEyZWVhYzBlOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1N/Q10B94QDUGK6mLUpGYl49B8Ntff/8SBq IFMvGw6SihXTPcFKQvaY6kxr0I2EfcwwlG4AT0P0VOtrJs7ckhrB5pnNnXXY3yEe 9ClvxPeUEqJ3mc7lyZRpMgdDlDOwji9Jsp6kJrrP1FYoll7fMdJ7XBKeChs6Q7J5 2mlusyR1n4eQo/Sha85MQ4E5hY5nXIupbl1KZRWp9fSZFvwwAoVBDdj81LE3344D UFzvBQwUjw4rhNxxvj7sUlrDoPbkrHBvxz7a4ZQK+0CKX+X1CHaNf7fZTNpCZ8QJ MLVk2KnROudzhg7mg+rhNZFWxdH7YG9UGhd028StSFlF1C8bZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc5jhrvXvrNQG7NueWIOT8Tj9Y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMjU2ZDI0ZmMtZWRhMy0z Nzk0LWE1YzItYTMzNzg1OWFjZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtgzLa60NEimbKiI/8g7ngKLqS3vO9tM0zzysa54BMYnUxcxiQ9EdMH Ks+zsiYZQFpUFp5jhi/MwPB6YI2VXfBNDKSGn79wbVEUiHpn8rGHEAihM7TyXfYz npv4fhJsaJ1wYo+bPHKMXTx6uE5mWze0xHstCdUGjzhtj3vu9VhzEpLxjyYCytDR 9Lpv9k3w5Hk/y8H8dgn4my2EjqUNg4XSOxtlRvuXycBawAwWpqR+rg/9rVXNayOY vKRaAwpnmuk4oyuXeUw2T1wnj9oM9e0obRpX4dAEDVWhDyRTB218+hj8biiLcLwL 0r0NnuAbzMxOuF9JYc3JVYMS3T3boH8= -----END CERTIFICATE-----Generated at Fri Sep 25 08:42:00 2026 by rpki-client