$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa File: 47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa (raw, json) Hash identifier: 0UMOUE7r4n4ON+5gYCs4tZHFZhiT420ROgaHuNZyPKc= Subject key identifier: 30:CC:0F:EB:A1:F9:C5:B1:DA:2A:89:8D:21:4C:DE:2D:82:91:BB:36 Certificate issuer: /CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Certificate serial: 010D0C9F4328584F498B056E18BA92EE633E5B00 Authority key identifier: 71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11507 IP address blocks: 192.139.34.0/24 maxlen: 24 204.209.40.0/23 maxlen: 23 204.209.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:05:6e:18:ba:92:ee:63:3e:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e39bfa7-ed51-4d17-9ce5-536a4b90a62f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2dd83de9-356b-4662-bd3a-1efd77ce8c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:97:32:ec:fd:f3:ab:7d:fc:20:a9:c3:55: c6:31:19:02:58:ab:0d:60:96:ef:3c:f8:45:a4:32: 45:ca:a6:f6:e8:2f:2d:72:9f:e4:3d:0c:94:89:a0: 5d:6d:24:0c:14:e2:3e:c1:35:65:28:34:dc:a5:55: ec:fa:34:70:6c:cb:e8:ee:00:ed:a0:7b:07:d3:46: a7:6c:c8:a7:5e:4c:32:f1:f0:33:f9:84:be:7a:98: f8:5e:ae:d8:01:c7:f0:67:dd:31:d0:8d:89:9d:a7: 27:6b:a0:d9:a0:d6:88:7e:b7:cf:2b:18:85:d7:e0: bf:6f:69:f2:64:69:7c:34:f5:6c:84:e7:ef:3e:3e: ed:55:c1:91:08:ff:eb:49:13:04:79:fd:76:1c:88: 14:fa:58:8c:b9:5a:51:cc:46:57:06:d2:8d:93:c4: 31:e2:cc:a6:e1:73:4c:65:b1:c8:8a:49:e9:bf:96: 76:9b:3d:68:51:e3:6f:44:b9:24:08:b1:12:99:76: de:11:c3:74:ec:c2:60:ca:71:69:a2:d9:3e:33:8c: bb:d2:42:0a:9d:ef:36:69:18:fa:41:6c:72:02:7d: b7:81:6b:29:1f:27:c2:9b:c0:68:dd:c3:f2:b4:b5: 04:6c:be:5f:84:a8:64:69:b2:66:7f:9b:7d:02:e1: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:0F:EB:A1:F9:C5:B1:DA:2A:89:8D:21:4C:DE:2D:82:91:BB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/47754403-719c-32bb-a3a8-8ed2ac68a9f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.crl X509v3 Authority Key Identifier: keyid:71:6B:A2:F9:A0:CF:2C:93:59:CC:DC:54:83:71:40:04:DA:0C:CC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e39bfa7-ed51-4d17-9ce5-536a4b90a62f.cer sbgp-ipAddrBlock: critical IPv4: 192.139.34.0/24 204.209.40.0-204.209.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:70:78:0d:0e:dd:5a:03:15:61:42:51:de:d1:c0:8a:78:a2: 6d:9f:ac:82:dd:f4:f3:34:80:6f:fb:34:2e:b6:89:f1:2b:3c: 5d:ef:de:7e:be:ed:23:17:36:25:9e:79:b0:99:8d:a5:b8:c7: 93:d0:f2:b3:66:17:3e:ec:ec:df:92:51:90:c2:4f:4d:f5:9c: be:a4:0a:ef:48:22:d7:54:ac:bd:f9:4b:fb:f9:73:62:ce:2f: 42:ad:db:09:53:ba:d1:c8:86:47:68:bf:05:94:64:26:c4:94: 4f:23:f1:41:c2:ae:ba:3d:f5:82:85:cb:fd:3c:a3:40:ad:48: ec:7c:8b:73:ff:b8:d7:17:79:ce:e2:25:47:13:4a:76:92:14: 9d:a3:fd:47:74:e0:29:e1:b9:e6:a4:2e:9a:d8:49:d3:dd:22: 1a:78:ed:b3:45:08:7a:f8:57:ce:65:1c:b0:0e:31:89:b1:59: 40:ff:5c:18:5f:31:54:f9:56:78:04:27:66:da:fe:d9:a2:da: 4b:34:77:ae:da:bc:c4:76:45:9b:f0:ba:0a:fe:8c:84:38:c1: ea:c0:27:34:e7:b1:b6:ac:d8:03:03:68:c9:39:d5:13:66:12: 18:74:5d:6d:92:05:35:92:29:41:7e:6a:0a:30:2c:56:64:b9: 5c:df:da:74 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9JiwVuGLqS7mM+WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzOWJmYTctZWQ1MS00ZDE3LTljZTUtNTM2YTRiOTBh NjJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmRkODNkZTktMzU2Yi00NjYyLWJkM2EtMWVmZDc3Y2U4YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4uXMuz986t9/CCpw1XGMRkCWKsNYJbvPPhF pDJFyqb26C8tcp/kPQyUiaBdbSQMFOI+wTVlKDTcpVXs+jRwbMvo7gDtoHsH00an bMinXkwy8fAz+YS+epj4Xq7YAcfwZ90x0I2Jnacna6DZoNaIfrfPKxiF1+C/b2ny ZGl8NPVshOfvPj7tVcGRCP/rSRMEef12HIgU+liMuVpRzEZXBtKNk8Qx4sym4XNM ZbHIiknpv5Z2mz1oUeNvRLkkCLESmXbeEcN07MJgynFpotk+M4y70kIKne82aRj6 QWxyAn23gWspHyfCm8Bo3cPytLUEbL5fhKhkabJmf5t9AuFEJQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFDDMD+uh+cWx2iqJjSFM3i2Ckbs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5 YmZhNy1lZDUxLTRkMTctOWNlNS01MzZhNGI5MGE2MmYvNDc3NTQ0MDMtNzE5Yy0z MmJiLWEzYTgtOGVkMmFjNjhhOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2UzOWJmYTctZWQ1MS00ZDE3LTlj ZTUtNTM2YTRiOTBhNjJmLzNlMzliZmE3LWVkNTEtNGQxNy05Y2U1LTUzNmE0Yjkw YTYyZi5jcmwwHwYDVR0jBBgwFoAUcWui+aDPLJNZzNxUg3FABNoMzCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZTM5YmZhNy1lZDUxLTRkMTctOWNlNS01MzZh NGI5MGE2MmYuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwIsiMAwD BAPM0SgDBADM0SowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAWnB4DQ7dWgMVYUJR3tHAiniibZ+sgt308zSA b/s0LraJ8Ss8Xe/efr7tIxc2JZ55sJmNpbjHk9Dys2YXPuzs35JRkMJPTfWcvqQK 70gi11SsvflL+/lzYs4vQq3bCVO60ciGR2i/BZRkJsSUTyPxQcKuuj31goXL/Tyj QK1I7HyLc/+41xd5zuIlRxNKdpIUnaP9R3TgKeG55qQumthJ090iGnjts0UIevhX zmUcsA4xibFZQP9cGF8xVPlWeAQnZtr+2aLaSzR3rtq8xHZFm/C6Cv6MhDjB6sAn NOextqzYAwNoyTnVE2YSGHRdbZIFNZIpQX5qCjAsVmS5XN/adA== -----END CERTIFICATE-----Generated at Sat Sep 26 18:49:36 2026 by rpki-client