$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa File: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (raw, json) Hash identifier: tU55CfLBW0hyatybBNga9k7QdgVQT4+h5DASnaX2NcY= Subject key identifier: 99:FE:EB:75:F0:4E:3F:E3:7B:B7:49:FC:38:C9:2C:8E:4B:30:7A:5A Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584F49876ECCAD4CA2C258B94F00 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 204.152.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:6e:cc:ad:4c:a2:c2:58:b9:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4cb62c30-43c3-4a61-9c20-591c12f39541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:55:7b:a6:c6:bd:05:1a:54:35:e3:4e:13: 2f:d1:7f:05:7c:76:dc:51:6d:4b:16:6a:f0:1c:3a: 70:75:09:36:e2:49:a8:59:aa:02:a6:f9:68:4b:55: 24:37:0c:94:08:8f:79:6d:8d:94:4f:a3:72:cc:40: f5:75:c2:4d:31:eb:b9:15:f2:ec:95:f4:0e:26:b4: ba:3b:7d:1a:3b:49:c0:e7:d7:22:a6:37:fa:f3:ba: 28:92:ad:f2:a8:c6:23:49:a8:be:9a:37:b6:4e:5c: 3f:1a:93:18:58:59:67:a2:13:c6:50:06:fc:5d:60: 80:fa:aa:d5:a4:19:c7:85:79:33:6c:a5:08:a2:bc: a4:e2:ab:d3:04:57:22:10:fa:1a:ed:fa:32:49:69: 84:f5:3c:79:43:28:b2:ed:10:6c:a0:bc:b6:97:69: d7:04:1f:ae:74:5a:eb:e2:60:74:c0:23:38:fe:2c: 81:0a:71:6b:f0:5d:02:7f:e0:73:39:4a:25:2a:1e: 61:5c:7b:80:87:7e:37:65:4e:41:cb:f0:f0:63:1d: 49:64:06:de:93:00:39:64:ed:3d:08:ef:8c:77:f2: b1:55:41:2e:31:6b:34:db:55:05:7e:e4:e9:ed:dc: bb:c4:a6:1e:43:cd:57:f8:f2:c3:dc:49:de:37:09: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FE:EB:75:F0:4E:3F:E3:7B:B7:49:FC:38:C9:2C:8E:4B:30:7A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: 204.152.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:59:f3:d6:ba:84:a6:53:ec:ea:74:85:bc:a8:d7:56:80:c4: 55:f3:f3:3d:c1:36:28:82:73:b8:cd:4d:fe:13:6f:96:5d:41: 88:53:f4:2e:12:24:00:6a:ab:0a:ab:98:0f:19:62:f5:99:ba: 62:a6:c9:41:ec:62:8c:5a:3f:d8:7d:47:1c:26:c4:c0:c8:ba: 01:fb:ac:3f:f2:0e:ea:7a:13:8a:de:2a:74:76:a6:68:5a:d6: 3a:88:4c:4f:2c:bd:71:00:67:ae:45:57:7d:0a:45:a7:8f:dd: a6:cc:3d:e5:a9:80:5d:35:67:01:d0:9e:f6:11:9c:2c:59:90: ad:d2:84:67:d4:19:b7:aa:ba:ff:09:b8:e9:f9:7d:aa:b3:c1: 9f:5e:02:2e:f3:77:bb:63:32:5b:4d:17:c3:7e:3d:4d:17:e5: 51:e4:36:a3:20:9a:f0:5f:ce:6b:5c:98:7c:fa:23:20:0d:52: fd:1a:59:67:d5:72:11:f8:53:65:d0:7d:ac:96:17:02:47:8e: ef:a3:8c:74:12:e3:e4:7c:a8:96:38:15:ae:39:aa:96:43:cd: 36:67:89:97:e3:ed:02:cd:52:e0:3d:a0:f0:d1:da:74:48:b9: a3:37:de:13:08:20:83:60:00:82:d8:65:e1:69:16:5c:86:85: f4:ca:39:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh27MrUyiwli5TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGNiNjJjMzAtNDNjMy00YTYxLTljMjAtNTkxYzEyZjM5NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRZVe6bGvQUaVDXjThMv0X8FfHbcUW1LFmrw HDpwdQk24kmoWaoCpvloS1UkNwyUCI95bY2UT6NyzED1dcJNMeu5FfLslfQOJrS6 O30aO0nA59cipjf687ookq3yqMYjSai+mje2Tlw/GpMYWFlnohPGUAb8XWCA+qrV pBnHhXkzbKUIoryk4qvTBFciEPoa7foySWmE9Tx5Qyiy7RBsoLy2l2nXBB+udFrr 4mB0wCM4/iyBCnFr8F0Cf+BzOUolKh5hXHuAh343ZU5By/DwYx1JZAbekwA5ZO09 CO+Md/KxVUEuMWs021UFfuTp7dy7xKYeQ81X+PLD3EneNwlbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn+63XwTj/je7dJ/DjJLI5LMHpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvYTE4YmM4ZTUtMzAzMS0z MzM0LWI3NjUtMzM5MmY1ZDRmZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJZ89a6hKZT7Op0hbyo11aAxFXz8z3BNiiCc7jNTf4Tb5ZdQYhT9C4S JABqqwqrmA8ZYvWZumKmyUHsYoxaP9h9RxwmxMDIugH7rD/yDup6E4reKnR2pmha 1jqITE8svXEAZ65FV30KRaeP3abMPeWpgF01ZwHQnvYRnCxZkK3ShGfUGbequv8J uOn5faqzwZ9eAi7zd7tjMltNF8N+PU0X5VHkNqMgmvBfzmtcmHz6IyANUv0aWWfV chH4U2XQfayWFwJHju+jjHQS4+R8qJY4Fa45qpZDzTZniZfj7QLNUuA9oPDR2nRI uaM33hMIIINgAILYZeFpFlyGhfTKOcs= -----END CERTIFICATE-----Generated at Sat Sep 26 12:37:16 2026 by rpki-client