$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/830c526b-f58e-3277-aa65-a8ff84ee2d81.roa File: 830c526b-f58e-3277-aa65-a8ff84ee2d81.roa (raw, json) Hash identifier: ZH0zEvIuwgxe71wCMGDiozPeWRQiYbxgw3HMlq9qGYQ= Subject key identifier: 70:FB:BC:4A:30:8E:98:C8:7D:84:61:85:27:5B:92:FF:A0:C7:71:D5 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584FA064825DA26AE1CA5B867200 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/830c526b-f58e-3277-aa65-a8ff84ee2d81.roa Signing time: Mon 26 Oct 2026 04:27:18 +0000 ROA not before: Mon 26 Oct 2026 04:27:18 +0000 ROA not after: Sun 24 Jan 2027 05:27:18 +0000 asID: 7270 IP address blocks: 206.20.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a0:64:82:5d:a2:6a:e1:ca:5b:86:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 26 04:27:18 2026 GMT Not After : Jan 24 05:27:18 2027 GMT Subject: CN=ff62ca59-26a0-42d1-a136-fce201a840dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:43:00:02:74:22:9f:0a:95:3e:f5:fc:2c: 12:77:60:02:f6:10:9e:a7:b5:d6:3f:ce:5f:71:7e: b7:62:64:09:bc:ff:1d:cf:26:85:4d:3c:70:fc:19: d9:7a:95:80:99:83:b0:d8:a5:04:c2:a5:34:cb:f3: 04:95:62:1f:66:3f:39:37:a7:97:12:19:9d:7c:e0: 4f:12:bb:c8:5c:45:b0:74:33:b5:cb:55:04:60:f2: 41:96:45:89:76:9a:28:bc:a7:7b:b9:81:19:77:94: 35:e7:26:3e:e3:09:b1:b8:95:de:20:c3:93:d0:7f: 56:bc:1b:2a:c3:be:e3:b2:39:56:25:fb:c3:2e:26: 4f:8e:73:10:27:49:12:96:92:fb:b1:59:a9:af:e1: ae:80:bc:0b:e5:af:38:ee:e8:e4:ec:2e:ac:03:c3: 72:bf:63:d7:ef:41:23:44:77:81:e0:15:ec:cf:52: a3:02:96:f9:95:c8:8b:11:43:a4:01:0c:79:53:c1: 89:22:ac:a0:55:2b:b8:69:11:c8:f2:23:5c:aa:20: 53:34:a6:d0:33:37:ac:4c:77:1c:2e:f9:d7:1a:73: a4:37:1e:f2:1d:b2:b6:81:51:eb:29:3a:14:1e:53: 93:ed:76:13:9f:73:fe:e2:f6:db:b7:d5:f2:80:58: 80:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FB:BC:4A:30:8E:98:C8:7D:84:61:85:27:5B:92:FF:A0:C7:71:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/830c526b-f58e-3277-aa65-a8ff84ee2d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 206.20.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b3:fc:42:39:56:67:51:28:de:e6:94:7e:d8:a4:43:74:d7: 1a:16:e4:f5:16:80:c0:59:2f:79:d1:3e:b4:c8:99:a5:f5:68: fe:6c:2b:e4:c6:56:29:6c:4a:57:ac:fe:9d:b6:a9:c5:6f:ce: 4d:a3:55:b9:d8:b6:6a:32:08:cc:dc:c6:65:1a:61:53:2b:99: cf:a2:3a:b6:7b:f3:f3:1f:81:2b:30:98:7f:c3:a5:16:1a:09: c1:47:49:37:68:b4:22:4a:22:4b:93:22:b6:b8:cb:6e:2f:dc: ba:a0:3e:29:b3:d2:66:99:f4:07:f6:f4:70:5a:cb:d8:87:7d: 69:da:8e:a7:bd:ef:e3:e9:91:72:5b:00:75:42:4c:4f:f2:bc: 76:29:3e:ae:38:60:bb:6c:f6:fa:6d:12:42:11:0e:75:4b:dd: b8:c5:61:26:ac:11:a6:3a:6f:20:94:e3:ad:64:68:06:d0:74: 3e:21:20:c6:84:c4:f9:98:ad:bf:04:51:ed:81:16:5a:67:84: 49:6b:e8:12:e7:4a:bd:87:a7:f4:cb:fa:8f:49:ef:4f:3b:76: 11:41:5c:ff:9b:3f:06:42:c2:4e:12:c5:65:9b:f7:3c:cb:62: 4c:64:0b:81:04:ba:59:ec:b8:50:db:f4:fa:10:77:dc:6d:13: 3e:be:ac:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+gZIJdomrhyluGcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MTAyNjA0MjcxOFoXDTI3MDEyNDA1MjcxOFowLzEtMCsGA1UEAxMk ZmY2MmNhNTktMjZhMC00MmQxLWExMzYtZmNlMjAxYTg0MGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh91DAAJ0Ip8KlT71/CwSd2AC9hCep7XWP85f cX63YmQJvP8dzyaFTTxw/BnZepWAmYOw2KUEwqU0y/MElWIfZj85N6eXEhmdfOBP ErvIXEWwdDO1y1UEYPJBlkWJdpoovKd7uYEZd5Q15yY+4wmxuJXeIMOT0H9WvBsq w77jsjlWJfvDLiZPjnMQJ0kSlpL7sVmpr+GugLwL5a847ujk7C6sA8Nyv2PX70Ej RHeB4BXsz1KjApb5lciLEUOkAQx5U8GJIqygVSu4aRHI8iNcqiBTNKbQMzesTHcc LvnXGnOkNx7yHbK2gVHrKToUHlOT7XYTn3P+4vbbt9XygFiAQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD7vEowjpjIfYRhhSdbkv+gx3HVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvODMwYzUyNmItZjU4ZS0z Mjc3LWFhNjUtYThmZjg0ZWUyZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzhTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2z/EI5VmdRKN7mlH7YpEN01xoW5PUWgMBZL3nRPrTImaX1aP5sK+TG VilsSles/p22qcVvzk2jVbnYtmoyCMzcxmUaYVMrmc+iOrZ78/MfgSswmH/DpRYa CcFHSTdotCJKIkuTIra4y24v3LqgPimz0maZ9Af29HBay9iHfWnajqe97+PpkXJb AHVCTE/yvHYpPq44YLts9vptEkIRDnVL3bjFYSasEaY6byCU461kaAbQdD4hIMaE xPmYrb8EUe2BFlpnhElr6BLnSr2Hp/TL+o9J7087dhFBXP+bPwZCwk4SxWWb9zzL YkxkC4EEulnsuFDb9PoQd9xtEz6+rAk= -----END CERTIFICATE-----Generated at Wed Oct 28 22:49:44 2026 by rpki-client