$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa File: 43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa (raw, json) Hash identifier: urDAwU1DsNHWZtYsc0u6UoAES3CDfiR4kjqgEqhDV/o= Subject key identifier: 34:3C:30:A6:0C:29:96:12:86:2D:E0:CE:23:61:00:12:D2:9B:C9:24 Certificate issuer: /CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Certificate serial: 010D0C9F4328584F49730440AA8BBB4756DF6500 Authority key identifier: 07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 17378 IP address blocks: 204.239.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:04:40:aa:8b:bb:47:56:df:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=58d303d5-efa8-4af6-a851-85ee1c9444bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:79:04:db:df:b6:de:a3:8e:da:d0:2c:50: 99:fd:2d:3c:d8:5a:51:64:06:06:95:20:cd:23:1e: 5b:ee:02:d2:d0:3c:90:64:70:a6:80:bd:db:f9:f0: 93:63:2c:96:3f:ea:4f:1c:bb:68:d1:da:c0:17:cf: 10:62:1e:58:95:48:ef:bf:c7:a5:43:50:c7:ae:fe: 78:bb:65:f7:da:d4:0d:f7:26:d9:1a:ac:26:6e:e2: e4:66:aa:6d:93:81:f0:0e:b1:6c:5c:05:82:0d:92: 26:f0:de:2f:5e:63:8b:ce:a2:49:6d:62:cf:05:04: 94:38:53:89:f5:a5:25:3b:59:47:ae:73:3e:49:4d: 36:97:f9:f1:61:0f:0b:df:0b:52:b4:d8:9d:28:ee: c1:a4:6a:5c:a4:32:8c:b1:cd:40:de:77:17:54:db: fb:15:3a:31:d4:71:13:8b:6d:8a:bd:47:9a:a4:e5: 83:d5:23:db:fe:88:cb:04:d6:cb:56:5d:63:0e:4a: 92:4e:82:6f:36:18:fd:7a:5a:f6:87:03:76:da:1f: 5a:20:1b:13:77:30:02:fa:f5:55:a1:99:e9:29:d7: 78:bd:20:41:17:c7:a7:39:8f:49:0e:b4:31:4c:45: e7:c7:85:73:d7:a9:14:a1:5a:31:e9:20:7e:72:23: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3C:30:A6:0C:29:96:12:86:2D:E0:CE:23:61:00:12:D2:9B:C9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/43ece0ce-ce81-3e8f-88d8-a6d6dc371802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl X509v3 Authority Key Identifier: keyid:07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer sbgp-ipAddrBlock: critical IPv4: 204.239.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:73:1c:51:3f:23:5e:b9:79:28:75:31:be:a1:56:da:09:23: 5f:f3:5a:7a:af:44:df:e6:81:5e:72:0b:d0:16:e3:78:58:ba: 1b:25:39:31:c5:84:37:74:50:8b:25:8c:68:e1:3d:30:5f:c6: 20:73:b2:59:e8:24:8e:ad:40:3e:2e:64:59:5f:f7:7a:e1:99: 44:ac:42:af:35:41:f5:61:a3:70:7d:78:73:75:e1:51:da:39: 6d:bf:9e:51:99:28:05:13:22:3b:14:c8:ba:df:96:bb:48:14: 19:ef:be:d4:77:a8:b9:ac:59:47:64:99:50:f7:fe:2b:73:18: c7:8c:57:dd:f6:fc:72:d9:4d:49:41:37:39:05:0c:06:0f:0d: f4:96:82:2c:94:69:b6:bd:1a:5c:cd:9f:f2:e5:e5:80:5f:2a: 21:4b:f9:a2:d2:3f:3d:ef:56:a1:54:f8:dc:a5:24:6b:a6:c2: 7c:b0:ba:d9:12:55:c0:03:12:34:e9:5a:37:6f:bd:38:10:9a: 97:a3:f7:f0:f2:f6:72:db:d8:61:02:11:3b:1b:77:12:dd:a7: 8f:e3:dc:98:c2:0e:8f:96:7b:da:90:67:0d:85:4d:c0:6e:26: 2a:c6:d4:48:58:7e:79:0e:e2:9f:4a:97:7c:92:5c:00:49:98: 46:cd:2e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwRAqou7R1bfZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5OWMzMTMtNWYyZi00YzUyLTg0YzMtZjcyM2RlZTIz ZjJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NThkMzAzZDUtZWZhOC00YWY2LWE4NTEtODVlZTFjOTQ0NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf95BNvftt6jjtrQLFCZ/S082FpRZAYGlSDN Ix5b7gLS0DyQZHCmgL3b+fCTYyyWP+pPHLto0drAF88QYh5YlUjvv8elQ1DHrv54 u2X32tQN9ybZGqwmbuLkZqptk4HwDrFsXAWCDZIm8N4vXmOLzqJJbWLPBQSUOFOJ 9aUlO1lHrnM+SU02l/nxYQ8L3wtStNidKO7BpGpcpDKMsc1A3ncXVNv7FTox1HET i22KvUeapOWD1SPb/ojLBNbLVl1jDkqSToJvNhj9elr2hwN22h9aIBsTdzAC+vVV oZnpKdd4vSBBF8enOY9JDrQxTEXnx4Vz16kUoVox6SB+ciNhuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ8MKYMKZYShi3gziNhABLSm8kkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5 YzMxMy01ZjJmLTRjNTItODRjMy1mNzIzZGVlMjNmMmEvNDNlY2UwY2UtY2U4MS0z ZThmLTg4ZDgtYTZkNmRjMzcxODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzc5OWMzMTMtNWYyZi00YzUyLTg0 YzMtZjcyM2RlZTIzZjJhL2M3OTljMzEzLTVmMmYtNGM1Mi04NGMzLWY3MjNkZWUy M2YyYS5jcmwwHwYDVR0jBBgwFoAUB6rii6Ts+LSBm04l0gwhyEzpbhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5YzMxMy01ZjJmLTRjNTItODRjMy1mNzIz ZGVlMjNmMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZzHFE/I165eSh1Mb6hVtoJI1/zWnqvRN/mgV5yC9AW43hYuhslOTHF hDd0UIsljGjhPTBfxiBzslnoJI6tQD4uZFlf93rhmUSsQq81QfVho3B9eHN14VHa OW2/nlGZKAUTIjsUyLrflrtIFBnvvtR3qLmsWUdkmVD3/itzGMeMV932/HLZTUlB NzkFDAYPDfSWgiyUaba9GlzNn/Ll5YBfKiFL+aLSPz3vVqFU+NylJGumwnywutkS VcADEjTpWjdvvTgQmpej9/Dy9nLb2GECETsbdxLdp4/j3JjCDo+We9qQZw2FTcBu JirG1EhYfnkO4p9Kl3ySXABJmEbNLl4= -----END CERTIFICATE-----Generated at Tue Sep 29 19:36:07 2026 by rpki-client