$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cdb0d4bc-d30a-3f9d-ac85-59c9a7325d78.roa File: cdb0d4bc-d30a-3f9d-ac85-59c9a7325d78.roa (raw, json) Hash identifier: /uFoCzy5LxuS3+8KVaSB2lmsbiUpbFH/jIEVeeNfF2E= Subject key identifier: 73:5F:42:90:AA:17:F6:48:7A:69:F0:26:BC:F1:B0:92:C4:8D:B6:84 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584FBC06759F5D2CB8C26591E7A0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cdb0d4bc-d30a-3f9d-ac85-59c9a7325d78.roa Signing time: Thu 05 Nov 2026 02:00:14 +0000 ROA not before: Thu 05 Nov 2026 02:00:14 +0000 ROA not after: Wed 03 Feb 2027 02:00:14 +0000 asID: 62651 IP address blocks: 205.185.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bc:06:75:9f:5d:2c:b8:c2:65:91:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Nov 5 02:00:14 2026 GMT Not After : Feb 3 02:00:14 2027 GMT Subject: CN=3c8520ab-e2ae-4550-9474-f6964fdf33cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4f:4b:9a:ab:b9:8d:e4:4c:4d:4b:34:ea:d9: f7:c5:a8:8e:f8:e8:3a:fc:74:50:d4:90:b9:fa:98: 1b:84:41:4f:14:a2:1b:8e:4e:e9:b8:aa:40:d6:f5: b0:24:e7:2f:7a:6d:23:94:de:9f:cd:e3:7a:6d:29: 52:c7:d8:4f:77:47:2a:f0:a3:08:f5:6c:d9:7d:df: 0e:4b:57:39:37:f7:ba:d6:b1:ff:6e:99:88:c4:8c: cf:f4:57:7e:fc:29:31:5f:a6:aa:5d:6c:97:e3:29: 5f:0f:99:64:d6:40:10:68:44:23:62:8f:f4:28:e2: c6:7e:d2:27:9b:22:40:8c:a4:cb:8b:a2:63:6f:3a: 70:06:ef:9b:dc:bc:26:7e:46:02:3f:b2:c0:c4:e0: b0:2f:3e:02:e9:22:6e:e3:a7:dc:c1:fa:b8:77:e8: ff:ea:a4:bd:69:07:bf:a7:ae:6a:d2:66:90:2d:25: 67:1d:b3:be:7b:f3:2d:df:ab:d4:bc:58:49:17:16: 7b:98:a0:55:d1:f1:86:b9:e7:b2:ab:35:74:d4:7e: 70:36:30:41:70:e1:c2:64:ff:ea:a0:d0:6e:a9:4f: a8:92:a4:a9:db:8f:0e:0e:02:2a:a4:d6:e7:14:a2: 32:eb:c2:36:f4:4d:a3:a4:c4:8b:67:83:53:8f:b5: 39:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:42:90:AA:17:F6:48:7A:69:F0:26:BC:F1:B0:92:C4:8D:B6:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cdb0d4bc-d30a-3f9d-ac85-59c9a7325d78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 205.185.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:80:1f:31:dd:32:89:9d:29:fb:85:07:18:27:6f:98:08:d7: 12:a2:8d:9b:8e:3b:bb:cd:34:84:58:b1:9a:ec:18:f9:5e:57: 46:d8:a4:27:1f:ad:3f:1f:22:cf:e7:47:59:dc:31:bb:1a:39: 67:dc:0d:5f:3c:5c:81:b0:4c:58:2d:ce:04:19:4d:a0:fe:5b: d2:3b:12:8e:fe:14:a3:04:c9:9d:0d:a4:81:48:22:11:b3:46: a1:5e:a4:5d:fd:70:b2:ef:d0:d9:a3:6d:06:dc:fa:90:70:6f: 02:f5:1c:69:75:cf:54:29:bb:36:b4:68:5d:d2:98:63:be:69: ea:e4:cb:27:4d:a5:f5:ef:51:25:c2:a5:9d:b2:8f:5c:11:77: b8:d1:0e:86:9e:68:02:a3:1f:51:df:84:d2:e1:16:13:5c:f2: 61:98:ca:76:33:1f:55:f7:2c:fe:a8:22:e9:25:47:15:df:a9: 0e:7e:a0:19:f8:ea:89:d8:b8:e6:7c:ea:1f:8f:ac:4d:cb:ab: c7:7d:6a:29:f1:83:91:39:1b:a2:f2:64:27:26:87:53:b0:10: d5:ca:8b:2e:9d:ae:f8:9a:c2:60:b8:28:9c:9e:4c:b8:6c:46: 33:ca:a0:78:ce:31:ec:c8:91:58:74:00:f1:ee:85:fc:21:ea: 81:ab:08:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+8BnWfXSy4wmWR56AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MTEwNTAyMDAxNFoXDTI3MDIwMzAyMDAxNFowLzEtMCsGA1UEAxMk M2M4NTIwYWItZTJhZS00NTUwLTk0NzQtZjY5NjRmZGYzM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA209Lmqu5jeRMTUs06tn3xaiO+Og6/HRQ1JC5 +pgbhEFPFKIbjk7puKpA1vWwJOcvem0jlN6fzeN6bSlSx9hPd0cq8KMI9WzZfd8O S1c5N/e61rH/bpmIxIzP9Fd+/CkxX6aqXWyX4ylfD5lk1kAQaEQjYo/0KOLGftIn myJAjKTLi6JjbzpwBu+b3LwmfkYCP7LAxOCwLz4C6SJu46fcwfq4d+j/6qS9aQe/ p65q0maQLSVnHbO+e/Mt36vUvFhJFxZ7mKBV0fGGueeyqzV01H5wNjBBcOHCZP/q oNBuqU+okqSp248ODgIqpNbnFKIy68I29E2jpMSLZ4NTj7U5QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNfQpCqF/ZIemnwJrzxsJLEjbaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvY2RiMGQ0YmMtZDMwYS0z ZjlkLWFjODUtNTljOWE3MzI1ZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6AHzHdMomdKfuFBxgnb5gI1xKijZuOO7vNNIRYsZrsGPleV0bYpCcf rT8fIs/nR1ncMbsaOWfcDV88XIGwTFgtzgQZTaD+W9I7Eo7+FKMEyZ0NpIFIIhGz RqFepF39cLLv0NmjbQbc+pBwbwL1HGl1z1Qpuza0aF3SmGO+aerkyydNpfXvUSXC pZ2yj1wRd7jRDoaeaAKjH1HfhNLhFhNc8mGYynYzH1X3LP6oIuklRxXfqQ5+oBn4 6onYuOZ86h+PrE3Lq8d9ainxg5E5G6LyZCcmh1OwENXKiy6drviawmC4KJyeTLhs RjPKoHjOMezIkVh0APHuhfwh6oGrCLA= -----END CERTIFICATE-----Generated at Thu Nov 5 15:21:59 2026 by rpki-client