$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/fa271416-37ca-305f-afe4-21f5c53a5b17.roa File: fa271416-37ca-305f-afe4-21f5c53a5b17.roa (raw, json) Hash identifier: 1NBtlvVUOZv8hidzYtTkV6hHVokyc57eetVP1MZkHQc= Subject key identifier: 75:9B:07:83:B7:FE:68:6C:CF:3D:52:F2:5D:85:63:67:5D:5F:FD:7C Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584FA063B45E03F04DED587E24D0 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/fa271416-37ca-305f-afe4-21f5c53a5b17.roa Signing time: Mon 26 Oct 2026 04:25:41 +0000 ROA not before: Mon 26 Oct 2026 04:25:41 +0000 ROA not after: Sun 24 Jan 2027 05:25:41 +0000 asID: 7270 IP address blocks: 206.20.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a0:63:b4:5e:03:f0:4d:ed:58:7e:24:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 26 04:25:41 2026 GMT Not After : Jan 24 05:25:41 2027 GMT Subject: CN=eb03fd3e-d684-475f-a63d-bb06c224bf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:ff:26:8e:7d:57:01:77:64:19:ec:86:d7: bc:83:fa:d6:90:02:7f:51:c1:7d:0d:b3:73:b1:84: 10:72:40:5a:e2:4f:6e:5f:51:90:ca:58:8a:af:04: 9f:5b:9b:74:ba:40:8d:9e:d9:75:c9:e9:50:5c:5c: ad:3c:48:5b:d0:1c:1e:8e:3e:7c:15:5c:eb:ce:e1: c0:41:12:38:be:79:0a:0b:b0:68:1d:97:35:02:fa: 99:06:0c:13:30:bd:69:79:6c:ba:06:7e:01:77:e2: a8:e6:89:6f:f1:d9:0a:3d:3e:a4:55:75:12:1e:39: 10:1c:b3:c6:a0:80:b6:31:8f:18:62:20:d6:43:5f: 19:18:95:d5:f4:61:a3:d8:b5:d6:9c:06:6d:a2:d9: fc:99:22:42:a4:f8:f7:42:b1:28:6d:a0:02:7e:56: f3:75:7a:38:e4:44:3e:d6:de:6f:17:0f:fa:04:ba: f5:c2:38:0a:7d:6e:7a:4f:8a:90:4c:a1:ff:25:eb: d9:59:ec:be:1d:1a:60:fc:49:b5:f8:4d:28:b6:54: c1:c5:be:04:60:5c:72:7e:1a:0b:c8:3d:c4:a5:9f: 7a:5e:62:28:36:7e:53:8e:01:73:72:9f:d5:91:79: ea:ca:42:be:ff:32:15:91:9d:40:a1:d9:53:80:59: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9B:07:83:B7:FE:68:6C:CF:3D:52:F2:5D:85:63:67:5D:5F:FD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/fa271416-37ca-305f-afe4-21f5c53a5b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 206.20.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:52:86:16:bc:ca:9b:a9:cb:66:d0:a0:7f:7e:ca:e8:a2:86: b2:1f:f2:86:37:f9:08:02:6e:d5:b9:19:ef:c9:3d:91:ad:1b: 4c:1a:03:1d:76:16:66:74:f3:b6:a9:c1:99:c2:b7:d5:fd:b1: c2:d0:93:23:53:bf:08:6f:02:61:da:ae:fb:d4:35:88:37:af: ad:09:9c:e3:29:f1:71:79:02:a6:4c:27:3a:66:72:67:1f:cf: 33:ad:46:9c:50:b9:57:52:5a:61:b0:ff:7c:91:d7:bd:89:ba: 37:4b:5f:27:a5:f7:1d:36:33:c5:65:e7:e5:b5:b5:64:58:b3: 10:7d:fa:b7:85:f2:18:65:af:4b:36:d9:0e:0d:46:a5:5f:2e: 26:d5:20:80:9e:38:65:75:38:74:61:23:be:dd:01:43:b4:c9: 5f:ac:87:e1:19:cd:fc:1c:49:a5:ff:07:45:a4:84:44:82:99: c3:3a:b9:09:ff:93:a4:fc:9e:97:5a:57:fa:02:a6:5f:ab:24: 2a:b7:89:da:02:5f:1a:f5:60:7a:a8:d7:55:0d:28:2b:4f:d5: 2f:ae:f1:3e:8b:6e:a5:82:0e:3c:be:39:6b:0e:32:f7:57:71: 30:2b:14:dd:d3:bb:c7:fe:09:92:7d:fc:65:84:cc:cd:41:44: 98:d7:2a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+gY7ReA/BN7Vh+JNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MTAyNjA0MjU0MVoXDTI3MDEyNDA1MjU0MVowLzEtMCsGA1UEAxMk ZWIwM2ZkM2UtZDY4NC00NzVmLWE2M2QtYmIwNmMyMjRiZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKn/Jo59VwF3ZBnshte8g/rWkAJ/UcF9DbNz sYQQckBa4k9uX1GQyliKrwSfW5t0ukCNntl1yelQXFytPEhb0Bwejj58FVzrzuHA QRI4vnkKC7BoHZc1AvqZBgwTML1peWy6Bn4Bd+Ko5olv8dkKPT6kVXUSHjkQHLPG oIC2MY8YYiDWQ18ZGJXV9GGj2LXWnAZtotn8mSJCpPj3QrEobaACflbzdXo45EQ+ 1t5vFw/6BLr1wjgKfW56T4qQTKH/JevZWey+HRpg/Em1+E0otlTBxb4EYFxyfhoL yD3EpZ96XmIoNn5TjgFzcp/VkXnqykK+/zIVkZ1AodlTgFmP2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWbB4O3/mhszz1S8l2FY2ddX/18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZmEyNzE0MTYtMzdjYS0z MDVmLWFmZTQtMjFmNWM1M2E1YjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzhTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVShha8ypupy2bQoH9+yuiihrIf8oY3+QgCbtW5Ge/JPZGtG0waAx12 FmZ087apwZnCt9X9scLQkyNTvwhvAmHarvvUNYg3r60JnOMp8XF5AqZMJzpmcmcf zzOtRpxQuVdSWmGw/3yR172JujdLXyel9x02M8Vl5+W1tWRYsxB9+reF8hhlr0s2 2Q4NRqVfLibVIICeOGV1OHRhI77dAUO0yV+sh+EZzfwcSaX/B0WkhESCmcM6uQn/ k6T8npdaV/oCpl+rJCq3idoCXxr1YHqo11UNKCtP1S+u8T6LbqWCDjy+OWsOMvdX cTArFN3Tu8f+CZJ9/GWEzM1BRJjXKio= -----END CERTIFICATE-----Generated at Wed Oct 28 15:02:00 2026 by rpki-client