$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1/0cd04eb9-f8f6-3242-aca5-9e7ee05dd820.roa File: 0cd04eb9-f8f6-3242-aca5-9e7ee05dd820.roa (raw, json) Hash identifier: prHEddIf8OylCoz5trVzohP7DeCBUzo3+s2Xffriq3A= Subject key identifier: B2:88:60:00:E6:3B:34:B7:CE:6E:09:72:EB:73:99:AF:61:8D:F7:F0 Certificate issuer: /CN=0bb768a3-a8cc-4632-ba11-88faa90c40d1 Certificate serial: 010D0C9F4328584F6D9CD4C311F604E465F47A00 Authority key identifier: 44:27:1B:44:24:38:5C:2D:78:9E:B1:50:5C:44:1B:AB:B1:1F:CD:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1/0cd04eb9-f8f6-3242-aca5-9e7ee05dd820.roa Signing time: Wed 07 Oct 2026 23:54:33 +0000 ROA not before: Wed 07 Oct 2026 23:54:33 +0000 ROA not after: Wed 06 Jan 2027 00:54:33 +0000 asID: 400449 IP address blocks: 207.229.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1/0bb768a3-a8cc-4632-ba11-88faa90c40d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1/0bb768a3-a8cc-4632-ba11-88faa90c40d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:9c:d4:c3:11:f6:04:e4:65:f4:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb768a3-a8cc-4632-ba11-88faa90c40d1 Validity Not Before: Oct 7 23:54:33 2026 GMT Not After : Jan 6 00:54:33 2027 GMT Subject: CN=8143802c-65f9-45ec-8ca3-1f3fbc1276d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:07:dd:e5:f4:3d:8b:35:36:24:32:0d:6a: 71:c9:dd:f2:5a:ef:64:06:d8:f1:17:60:d1:a8:d0: 71:4c:d8:10:5f:52:78:f7:c3:61:13:eb:31:43:5f: 31:f1:34:55:49:f0:f0:fe:ef:30:1c:9e:40:42:71: 2b:a5:dc:ca:dc:6c:c4:33:77:6b:5a:24:c8:c0:64: aa:cb:c4:e7:54:21:cf:63:d0:7a:8d:09:65:9c:e1: 3d:a2:8e:77:b1:67:cd:4c:81:c7:04:4a:c1:66:dc: 28:1d:ab:f3:03:5b:04:b2:dd:d2:0a:a6:4a:dc:e5: d0:b1:bd:9c:ea:eb:39:a8:14:f8:1b:ff:0c:2d:4c: b7:a5:7b:13:b3:14:47:69:da:7c:c6:c7:c0:03:63: 47:06:a5:ef:07:6b:24:3e:23:40:f4:41:33:bd:c5: be:19:75:2c:2b:97:54:1d:14:8f:e9:fb:9e:04:b7: 86:bd:f7:f5:50:60:bd:b4:19:46:1f:f6:86:cb:78: d4:a2:db:c3:a7:62:87:9a:1c:c2:77:ad:56:80:0b: e1:13:76:82:89:38:b7:88:91:6a:ba:15:bd:3c:f4: 45:b8:03:2f:e6:f3:c0:f7:71:bd:74:8b:e0:50:0a: 51:66:62:7d:09:78:56:2e:b9:3b:78:a6:3c:4a:ff: a1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:88:60:00:E6:3B:34:B7:CE:6E:09:72:EB:73:99:AF:61:8D:F7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1/0cd04eb9-f8f6-3242-aca5-9e7ee05dd820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1/0bb768a3-a8cc-4632-ba11-88faa90c40d1.crl X509v3 Authority Key Identifier: keyid:44:27:1B:44:24:38:5C:2D:78:9E:B1:50:5C:44:1B:AB:B1:1F:CD:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0bb768a3-a8cc-4632-ba11-88faa90c40d1.cer sbgp-ipAddrBlock: critical IPv4: 207.229.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:54:8e:2f:e9:73:c4:43:f7:a4:d6:0a:bf:21:b7:8b:00:db: f1:b9:d0:15:ba:c5:f5:cd:a4:76:90:54:df:3d:24:88:ba:5a: 16:10:f1:d0:d2:77:49:ca:7c:89:6f:f0:b4:10:97:33:8d:8f: 73:03:28:88:49:94:22:79:08:c2:89:d9:c8:40:ba:c7:39:6f: 66:34:68:b0:07:d3:4d:42:08:c3:56:5a:a4:a2:0b:4c:14:f0: 07:7c:a8:c8:7e:0d:1e:07:5f:0d:b0:f2:28:00:aa:5f:55:6d: 13:25:24:c5:12:91:b3:57:c5:e7:8e:c6:97:b8:2f:0e:c9:c2: 1a:34:ce:ed:d5:f1:62:71:c5:a4:78:69:01:db:99:ba:f6:c3: c6:46:de:94:a9:43:18:d2:95:02:aa:25:9c:e2:8e:52:2e:c1: 7f:f4:c1:87:f8:a0:a2:75:c1:cf:11:94:be:dc:75:1f:01:a8: ef:65:80:99:eb:83:f6:10:63:a7:f4:e2:0f:ac:7a:3a:0c:6d: a1:8d:69:ac:d3:97:8c:fb:cb:f2:45:63:48:a8:c3:b1:83:77: 88:55:3f:b4:e0:86:fe:39:f6:4e:87:76:0b:bf:89:57:29:47: e3:84:aa:83:45:5b:ba:8c:af:95:96:1a:4d:8e:d1:cc:b0:92: e2:7d:14:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tnNTDEfYE5GX0egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJiNzY4YTMtYThjYy00NjMyLWJhMTEtODhmYWE5MGM0 MGQxMB4XDTI2MTAwNzIzNTQzM1oXDTI3MDEwNjAwNTQzM1owLzEtMCsGA1UEAxMk ODE0MzgwMmMtNjVmOS00NWVjLThjYTMtMWYzZmJjMTI3NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgYH3eX0PYs1NiQyDWpxyd3yWu9kBtjxF2DR qNBxTNgQX1J498NhE+sxQ18x8TRVSfDw/u8wHJ5AQnErpdzK3GzEM3drWiTIwGSq y8TnVCHPY9B6jQllnOE9oo53sWfNTIHHBErBZtwoHavzA1sEst3SCqZK3OXQsb2c 6us5qBT4G/8MLUy3pXsTsxRHadp8xsfAA2NHBqXvB2skPiNA9EEzvcW+GXUsK5dU HRSP6fueBLeGvff1UGC9tBlGH/aGy3jUotvDp2KHmhzCd61WgAvhE3aCiTi3iJFq uhW9PPRFuAMv5vPA93G9dIvgUApRZmJ9CXhWLrk7eKY8Sv+hNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKIYADmOzS3zm4Jcutzma9hjffwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wYmI3 NjhhMy1hOGNjLTQ2MzItYmExMS04OGZhYTkwYzQwZDEvMGNkMDRlYjktZjhmNi0z MjQyLWFjYTUtOWU3ZWUwNWRkODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMGJiNzY4YTMtYThjYy00NjMyLWJh MTEtODhmYWE5MGM0MGQxLzBiYjc2OGEzLWE4Y2MtNDYzMi1iYTExLTg4ZmFhOTBj NDBkMS5jcmwwHwYDVR0jBBgwFoAURCcbRCQ4XC14nrFQXEQbq7EfzQ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8wYmI3NjhhMy1hOGNjLTQ2MzItYmExMS04OGZh YTkwYzQwZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+VjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdUji/pc8RD96TWCr8ht4sA2/G50BW6xfXNpHaQVN89JIi6WhYQ8dDS d0nKfIlv8LQQlzONj3MDKIhJlCJ5CMKJ2chAusc5b2Y0aLAH001CCMNWWqSiC0wU 8Ad8qMh+DR4HXw2w8igAql9VbRMlJMUSkbNXxeeOxpe4Lw7Jwho0zu3V8WJxxaR4 aQHbmbr2w8ZG3pSpQxjSlQKqJZzijlIuwX/0wYf4oKJ1wc8RlL7cdR8BqO9lgJnr g/YQY6f04g+sejoMbaGNaazTl4z7y/JFY0iow7GDd4hVP7Tghv459k6Hdgu/iVcp R+OEqoNFW7qMr5WWGk2O0cywkuJ9FBg= -----END CERTIFICATE-----Generated at Wed Nov 4 20:25:10 2026 by rpki-client