$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa File: 7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa (raw, json) Hash identifier: oHPii2ojziZ6fHhchEKPyCYv69ZK+7lCDV5xaxQp01Y= Subject key identifier: 7D:B8:88:D8:75:A2:5F:F1:AC:37:92:6E:6C:0C:83:79:42:D1:84:2A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F4974D040B35935356F732D50 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54253 IP address blocks: 204.216.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d0:40:b3:59:35:35:6f:73:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd4da6e0-7b3f-4c40-aaf9-238a338aa4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:fb:e1:34:ba:e3:e0:ce:74:f7:e4:f6:1f: c0:54:7c:d0:3c:22:fb:46:76:c9:41:29:cd:d2:11: 72:26:bd:4b:39:14:72:a8:29:6e:08:8d:48:b8:f2: 14:f7:98:10:cb:76:6a:8f:a2:87:89:7f:98:e7:88: e6:22:0b:32:c9:2f:ad:9f:d3:c3:d3:ec:65:8a:07: f8:18:71:b8:4c:e9:45:96:c1:99:a2:ae:e7:d3:bc: f1:c6:20:8c:98:b5:40:ea:62:5e:63:32:98:85:73: 36:e3:0f:71:c7:da:ad:9f:23:70:de:6d:9a:ee:0e: c8:6a:07:6d:9c:1c:0a:5d:54:64:f7:58:a9:a7:4f: 54:f3:6b:5e:47:1d:41:e7:48:e1:e0:af:a1:52:91: dd:d3:85:7d:75:19:1c:d9:87:7a:3e:b7:76:b2:ef: 38:af:b8:5b:b3:b7:d5:88:7a:3a:32:42:aa:c0:4e: 1a:a2:14:3c:64:f2:aa:a9:a4:64:bc:a3:18:fb:a0: ff:8f:86:b9:4f:ac:d6:aa:d5:1d:05:3d:d9:63:0c: 8b:75:d6:47:81:4a:ac:89:61:96:22:40:65:48:a5: 35:b8:46:73:36:4d:07:ad:02:ec:84:87:4c:21:4e: b5:4f:f3:29:68:f2:59:8c:09:7d:be:0f:27:65:d4: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B8:88:D8:75:A2:5F:F1:AC:37:92:6E:6C:0C:83:79:42:D1:84:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7e981cce-ee03-3015-a8e5-e885cfa8c71e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b3:63:49:68:f6:1a:0c:fd:6b:ad:82:43:97:91:16:ee:9a: 2e:50:84:b4:e6:93:81:45:b9:ad:00:0e:10:cb:d1:33:a7:6b: e9:99:7e:99:3c:de:15:02:d6:77:d0:19:5c:67:a5:ff:dd:55: 8a:aa:7a:39:37:53:06:ae:6d:4d:48:e2:29:14:99:91:06:06: 9f:5f:2c:fa:46:75:8f:ec:a5:ff:fc:98:ac:c3:8b:47:1d:71: ab:90:86:db:92:ee:33:e0:96:56:6b:4e:07:98:98:00:5c:5d: 26:ff:64:a9:43:d3:46:80:24:06:1d:51:06:59:01:2a:a5:ad: 9a:97:b4:a2:17:d1:44:dd:bf:96:7b:50:b9:35:01:cb:1f:91: a4:cc:60:f9:fc:43:dc:14:9f:6c:5a:b7:ed:ac:39:65:4d:d6: 68:4b:50:77:0f:da:0d:b0:5d:18:5a:46:c8:f7:87:c3:9e:67: a0:0a:17:3c:17:cd:b8:7f:8a:a7:0d:89:98:cf:8a:37:74:10: 0c:a0:bf:d8:03:da:ce:95:e1:16:df:fa:83:16:50:56:53:a7: a6:47:b6:58:cf:6f:b1:20:bc:10:13:3b:6e:87:11:54:64:63: 3b:19:14:02:b5:70:13:f3:9e:cd:f6:28:43:d6:48:bf:5f:96: 53:82:c9:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNBAs1k1NW9zLVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ0ZGE2ZTAtN2IzZi00YzQwLWFhZjktMjM4YTMzOGFhNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLb74TS64+DOdPfk9h/AVHzQPCL7RnbJQSnN 0hFyJr1LORRyqCluCI1IuPIU95gQy3Zqj6KHiX+Y54jmIgsyyS+tn9PD0+xligf4 GHG4TOlFlsGZoq7n07zxxiCMmLVA6mJeYzKYhXM24w9xx9qtnyNw3m2a7g7Iagdt nBwKXVRk91ipp09U82teRx1B50jh4K+hUpHd04V9dRkc2Yd6Prd2su84r7hbs7fV iHo6MkKqwE4aohQ8ZPKqqaRkvKMY+6D/j4a5T6zWqtUdBT3ZYwyLddZHgUqsiWGW IkBlSKU1uEZzNk0HrQLshIdMIU61T/MpaPJZjAl9vg8nZdSV9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH24iNh1ol/xrDeSbmwMg3lC0YQqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2U5ODFjY2UtZWUwMy0z MDE1LWE4ZTUtZTg4NWNmYThjNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByzY0lo9hoM/WutgkOXkRbumi5QhLTmk4FFua0ADhDL0TOna+mZfpk8 3hUC1nfQGVxnpf/dVYqqejk3UwaubU1I4ikUmZEGBp9fLPpGdY/spf/8mKzDi0cd cauQhtuS7jPgllZrTgeYmABcXSb/ZKlD00aAJAYdUQZZASqlrZqXtKIX0UTdv5Z7 ULk1AcsfkaTMYPn8Q9wUn2xat+2sOWVN1mhLUHcP2g2wXRhaRsj3h8OeZ6AKFzwX zbh/iqcNiZjPijd0EAygv9gD2s6V4Rbf+oMWUFZTp6ZHtljPb7EgvBATO26HEVRk YzsZFAK1cBPzns32KEPWSL9fllOCyf0= -----END CERTIFICATE-----Generated at Sat Sep 26 07:54:22 2026 by rpki-client